rpm: fails to drop SUID/SGID bits on package upgrade

lib/fsm.c in RPM 4.8.0 and unspecified 4.7.x and 4.6.x versions, and RPM before 4.4.3, does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerable 1...

The Windows File System vulnerability-a small vulnerability, big-vulnerability warning-the black bar safety net

Windows useful file to replace the command, to bypass the File Protection Used to replace file replace, even being used of the file can also be replaced. Very invincible. For example: in C:\create a directory, c:\aaa Then copy an mp3 to c:\aaa and named to the c:\aaa\a. mp3 Then copy another...

Dell Ships Malware-Infected Server Motherboard

Dell has confirmed that some of its PowerEdge server motherboards were shipped to customers with malware code on the embedded server management firmware. The infected motherboard was found on replacement Dell PowerEdge R410 rack servers, according to a post on a Dell support forum. A Dell...

Mozilla Characters mapped to U+FFFD in 8 bit encodings cause subsequent character to vanish

intl/uconv/util/nsUnicodeDecodeHelper.cpp in Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 inserts a U+FFFD sequence into text in certain circumstances involving undefined positions, which might make it easier for remote attackers to conduct cross-site scripting XSS attacks via crafte...

CVE-2004-2768

dpkg 1.9.21 does not properly reset the metadata of a file during replacement of the file in a package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerable 1 setuid file, 2 setgid file, or 3 device, a related issue to CVE-2010-2059...

CVE-2004-2768

dpkg 1.9.21 does not properly reset the metadata of a file during replacement of the file in a package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerable 1 setuid file, 2 setgid file, or 3 device, a related issue to CVE-2010-2059...

CVE-2010-2198

CVE-2010-2198 affects RPM 4.8.0 and earlier; root cause in lib/fsm.c is that metadata for an executable file is not properly reset during upgrade/removal of an RPM package. This can allow local users to gain privileges or bypass access restrictions by creating a hard link to the vulnerable file t...

CVE-2010-2059

CVE-2010-2059 affects RPM package manager: lib/fsm.c in RPM 4.8.0 and, per the description, unspecified 4.7.x and 4.6.x, and RPM before 4.4.3, may fail to reset executable file metadata during upgrade, potentially allowing local users to gain privileges by creating a hard link to a vulnerable (se...

IT-Grundschutz M4.093: Regelmäßige Integritätsprüfung

IT-Grundschutz M4.093: Regelmäßige Integritätsprüfung ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94209 Diese Prüfung bezieht sich auf die 10. Ergänzungslieferung 1...

CVE-2010-2026

The web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable modem with firmware 2.0.2r1256-060303 allows remote attackers to bypass authentication, and reset the modem or replace the firmware, via a direct request to an unspecified page...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix one security issue and two bugs are now available for Red Hat Enterprise Linux 5.3 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which...

openMairie openComInterne 'dsn[phptype]' Local File Inclusion Vulnerability

This host is running openMairie openComInterne and is prone to local file inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbopenmairieopencominternelfivuln.nasl 5323 2017-02-17 08:49:23Z teissa $ openMairie openComInterne 'dsnphptype' Local File Inclusion Vulnerability Authors: Madhuri D...

OpenMairie openAnnuaire Multiple Remote File Include Vulnerabilities

OpenMairie openAnnuaire is prone to multiple remote file inclusion vulnerabilities. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

IT-Grundschutz M5.017: Einsatz der Sicherheitsmechanismen von NFS

IT-Grundschutz M5.017: Einsatz der Sicherheitsmechanismen von NFS ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95052 Diese Prüfung bezieht sich auf die 10...

Mereo <= 1.9.1 Directory Traversal Vulnerability - Active Check

Mereo is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

osCommerce Local File Include and HTML Injection Vulnerabilities

osCommerce is prone to a local file-include vulnerability and an HTML- injection vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

httpd security and enhancement update

2.2.3-31.0.1.el54.4 - Replace index.html with Oracle's index page oracleindex.html - Update vstring and distro in specfile 2.2.3-31.4 - require and BR a version of OpenSSL with the secure reneg API 567980 2.2.3-31.3 - modssl: add SSLInsecureRenegotiation 567980 - add security fixes for...

Netpet CMS Directory Traversal Vulnerability

The host is running Netpet CMS and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: secpodnetpetcmsdirtravvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Netpet CMS Directory Traversal Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 SecPod,...

Firefox: Predictable /tmp pathname use

Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp locati...

thunderbird security update

1.5.0.12-25.0.1.el4 - Add thunderbird-oracle-default-prefs.js for errata rebuild and remove thunderbird-redhat-default-prefs.js - Replaced clean.gif in tarball 1.5.0.12-25 - Added patches from 2.0.0.24 1.5.0.12-24 - Update patchset to fix regression as per 1.9.0.13...