Moderate: Red Hat Security Advisory: sudo security update

An updated sudo package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Microsoft Office XML Converter for Mac Local Privilege Escalation Vulnerability

Description Microsoft Office XML Converter for Mac is prone to a local privilege-escalation vulnerability that affects filesystem Access Control Lists ACLs. A local attacker can exploit this issue to execute arbitrary code with superuser privileges. Successful exploits may result in the complete...

Debian DSA-2051-1 : postgresql-8.3 - several vulnerabilities

Several local vulnerabilities have been discovered in PostgreSQL, an object-relational SQL database. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-1169 Tim Bunce discovered that the implementation of the procedural language PL/Perl insufficiently...

postgresql: SQL privilege escalation via modifications to session-local state

PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly manage session-local state during execution of an index function by a database superuser, which allows remote authenticated users to gain...

MIT Kerberos 5 - srckdcdo_tgs_req.c Ticket Renewal Double-Free Memory Corruption

MIT Kerberos 5 - srckdcdotgsreq.c Ticket Renewal Double-Free Memory Corruption source: https://www.securityfocus.com/bid/39599/info MIT Kerberos is prone to a remote memory-corruption vulnerability. An authenticated attacker can exploit this issue by sending specially crafted ticket-renewal...

MIT Kerberos 5 - 'src/kdc/do_tgs_req.c' Ticket Renewal Double-Free Memory Corruption

source: https://www.securityfocus.com/bid/39599/info MIT Kerberos is prone to a remote memory-corruption vulnerability. An authenticated attacker can exploit this issue by sending specially crafted ticket-renewal requests to a vulnerable computer. Successfully exploiting this issue can allow the...

Debian DSA-2014-1 : moin - several vulnerabilities

Several vulnerabilities have been discovered in moin, a python clone of WikiWiki. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-0668 Multiple security issues in MoinMoin related to configurations that have a non-empty superuser list, the xmlrpc...

Fedora Update for sudo FEDORA-2010-3415

Check for the Version of sudo OpenVAS Vulnerability Test Fedora Update for sudo FEDORA-2010-3415 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

MoinMoin Wiki Superuser Lists Unspecified Vulnerability

MoinMoin Wiki is prone to unspecified vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moinmo:moinmoin";...

MoinMoin Wiki Superuser Lists Unspecified Vulnerability

This host is running MoinMoin Wiki and is prone to unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: gbmoinmoinwikisulistunspecifiedvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ MoinMoin Wiki Superuser Lists Unspecified Vulnerability Authors: Veerendra GG Copyright: Copyright c 2010...

PYSEC-2010-15

Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related to configurations that have a non-empty superuser list, the xmlrpc action enabled, the SyncPages action enabled, or OpenID configured...

PYSEC-2010-15

Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related to configurations that have a non-empty superuser list, the xmlrpc action enabled, the SyncPages action enabled, or OpenID configured...

CVE-2010-0668

Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related to configurations that have a non-empty superuser list, the xmlrpc action enabled, the SyncPages action enabled, or OpenID configured...

CVE-2010-0668

Removed by vendor...

sudo: Fails to reset group permissions if runas_default set

sudo 1.6.x before 1.6.9p21, when the runasdefault option is used, does not properly set group memberships, which allows local users to gain privileges via a sudo command...

CVE-2010-0668: Undefined Security Weakness

Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related to configurations that have a non-empty superuser list, the xmlrpc action enabled, the SyncPages action enabled, or OpenID configured...

Accellion Secure File Transfer Appliance - Multiple Command Restriction Privilege Escalations

Accellion Secure File Transfer Appliance - Multiple Command Restriction Privilege Escalations source: https://www.securityfocus.com/bid/38176/info Accellion File Transfer Appliance is prone to multiple remote vulnerabilities, including: - Multiple privilege-escalation issues - A directory-travers...

Accellion File Transfer - Appliance web_client_user_guide.html?lang Traversal Arbitrary File Access

Accellion File Transfer - Appliance webclientuserguide.html?lang Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/38176/info Accellion File Transfer Appliance is prone to multiple remote vulnerabilities, including: - Multiple privilege-escalation issues - A...

Accellion Secure File Transfer Appliance - Multiple Command Restriction / Privilege Escalations

source: https://www.securityfocus.com/bid/38176/info Accellion File Transfer Appliance is prone to multiple remote vulnerabilities, including: - Multiple privilege-escalation issues - A directory-traversal issue - An HTML-injection issue - A remote command-injection issue An attacker may leverage...

Battery Life Toolkit 1.0.9 - bltk_sudo Local Privilege Escalation

Battery Life Toolkit 1.0.9 - bltksudo Local Privilege Escalation source: https://www.securityfocus.com/bid/37996/info Battery Life Toolkit BLTK is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with superuser privileges,...