Linux Distros Unpatched Vulnerability : CVE-2010-0424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The editcmd function in crontab.c in 1 cronie before 1.4.4 and 2 Vixie cron vixie-cron allows local users to change the modification times of arbitrary files, a...

Linux Distros Unpatched Vulnerability : CVE-2008-4191

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a symlink attack on the extract-table.csv temporary file...

Linux Distros Unpatched Vulnerability : CVE-2011-0543

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Certain legacy functionality in fusermount in fuse 2.8.5 and earlier, when util-linux does not support the --no-canonicalize option, allows local users to bypas...

Linux Distros Unpatched Vulnerability : CVE-2011-2473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dodumpdata function in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to create or overwrite arbitrary files via a crafted...

Linux Distros Unpatched Vulnerability : CVE-2009-1962

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the 1 xfig-epsPID, 2 xfig-picPID.pix, 3 xfig-picPID.err, 4...

Linux Distros Unpatched Vulnerability : CVE-2011-1144

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The installer in PEAR 1.9.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the 1...

Linux Distros Unpatched Vulnerability : CVE-2010-2431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the 1...

Linux Distros Unpatched Vulnerability : CVE-2011-0541

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse 2.8.5 and earlier does not properly handle when /etc/mtab cannot be updated, which allows local users to unmount arbitrary directories via a symlink attack...

Linux Distros Unpatched Vulnerability : CVE-2011-1920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on...

Linux Distros Unpatched Vulnerability : CVE-2011-4028

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of arbitrary files via a symlink attack on a...

Linux Distros Unpatched Vulnerability : CVE-2008-5373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtx-changer.Adic-Scalar-24 in bacula-common 2.4.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mtx. temporary file, probably a...

Linux Distros Unpatched Vulnerability : CVE-2011-2923

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - foomatic-rip filter, all versions, used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled...

Linux Distros Unpatched Vulnerability : CVE-2010-1160

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU nano before 2.2.4 does not verify whether a file has been changed before it is overwritten in a file- save operation, which allows local user-assisted...

Linux Distros Unpatched Vulnerability : CVE-2008-4108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tools/faqwiz/move-faqwiz.sh aka the generic FAQ wizard moving tool in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on ...

CVE-2025-24965 .krun_config.json symlink attack creates or overwrites file on the host in crun

crun is an open source OCI Container Runtime fully written in C. In affected versions A malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation or modification on the host. No special permissions are needed, only the ability for the current...

CVE-2025-24965 .krun_config.json symlink attack creates or overwrites file on the host in crun

crun is an open source OCI Container Runtime fully written in C. In affected versions A malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation or modification on the host. No special permissions are needed, only the ability for the current...

Fedora: Security Advisory (FEDORA-2025-e717eae403)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Azure Linux 3.0 Security Update: kernel (CVE-2007-4998)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2007-4998 advisory. - cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers ...

Fedora 40 : stalld (2025-e717eae403)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e717eae403 advisory. Add code to deal with schedsetattr not being exported in glibc 2.41 Address CVE-2024-54159 denial of services via symlink attack Tenable has extracted the...

Fedora 41 : stalld (2025-3dc53b7f76)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-3dc53b7f76 advisory. Add code to deal with schedsetattr not being exported in glibc 2.41 Address CVE-2024-54159 denial of services via symlink attack Tenable has extracted the...