PYSEC-2012-31

libs/updater.py in GoLismero 0.6.3, and other versions before Git revision 2b3bb43d6867, as used in backtrack and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on GoLismero-controlled files, as demonstrated using Admin/changes.dat...

Code injection

libs/updater.py in GoLismero 0.6.3, and other versions before Git revision 2b3bb43d6867, as used in backtrack and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on GoLismero-controlled files, as demonstrated using Admin/changes.dat...

CVE-2012-0054

libs/updater.py in GoLismero 0.6.3, and other versions before Git revision 2b3bb43d6867, as used in backtrack and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on GoLismero-controlled files, as demonstrated using Admin/changes.dat...

CVE-2012-0808

CVE-2012-0808 affects as31 2.3.1-4: the RNG is not seeded, producing predictable temporary file names and enabling local users to create or truncate files via a symlink attack. No specific exploit details or fixed-version remediation are provided in the connected documents; vulnerability is descr...

CVE-2012-0808

as31 2.3.1-4 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or truncate files via a symlink attack...

CVE-2012-0054

GoLismero 0.6.3 (and earlier builds up to commit 2b3bb43d6867) is affected by a local-file overwrite vulnerability via a symlink attack on GoLismero-controlled files, demonstrated with Admin/changes.dat. The root cause is improper handling of symlinks in libs/updater.py, enabling local users to o...

Medium: puppet

Issue Overview: Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise PE Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3, when managing a user login file with the k5login resource type, allows local users to gain privileges via a symlink attack on .k5login. The changeuser method in...

CVE-2012-1054

Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise PE Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3, when managing a user login file with the k5login resource type, allows local users to gain privileges via a symlink attack on .k5login...

cronie: Race condition by setting timestamp of user's crontab file, when editing the file

The editcmd function in crontab.c in 1 cronie before 1.4.4 and 2 Vixie cron vixie-cron allows local users to change the modification times of arbitrary files, and consequently cause a denial of service, via a symlink attack on a temporary file in the /tmp directory...

xorg-x11-server: File existence disclosure vulnerability

The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of arbitrary files via a symlink attack on a temporary lock file, which is handled differently if the file exists...

CVE-2011-4105

LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on /.Xauthority...

CVE-2011-4105

LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on /.Xauthority...

DEBIAN-CVE-2011-4105

LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on /.Xauthority...

Code injection

LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on /.Xauthority...

CVE-2011-4105

LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on /.Xauthority...

CVE-2011-4105

LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on /.Xauthority...

CVE-2011-4105

CVE-2011-4105 affects LightDM prior to 1.0.6. A local user can change the ownership of arbitrary files via a symlink attack on ~/.Xauthority. This is a local-privilege/teardown-style issue, with low CVSS in the base data but clear impact on file ownership. Remediation: upgrade LightDM to 1.0.6 or...

Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : php5 regression (USN-1358-2)

USN 1358-1 fixed multiple vulnerabilities in PHP. The fix for CVE-2012-0831 introduced a regression where the state of the magicquotesgpc setting was not correctly reflected when calling the iniget function. We apologize for the inconvenience. It was discovered that PHP computed hash values for...

Gentoo Security Advisory GLSA 201110-14 (D-Bus)

The remote host is missing updates announced in advisory GLSA 201110-14. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 201110-14 (D-Bus)

The remote host is missing updates announced in advisory GLSA 201110-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...