CVE-2011-4060

The runtime linker in QNX Neutrino RTOS 6.5.0 before Service Pack 1 does not properly clear the LDDEBUGOUTPUT and LDDEBUG environment variables when a program is spawned from a setuid program, which allows local users to overwrite files via a symlink attack...

Code injection

The runtime linker in QNX Neutrino RTOS 6.5.0 before Service Pack 1 does not properly clear the LDDEBUGOUTPUT and LDDEBUG environment variables when a program is spawned from a setuid program, which allows local users to overwrite files via a symlink attack...

CVE-2011-4060

The runtime linker in QNX Neutrino RTOS 6.5.0 before Service Pack 1 does not properly clear the LDDEBUGOUTPUT and LDDEBUG environment variables when a program is spawned from a setuid program, which allows local users to overwrite files via a symlink attack...

CVE-2011-4060

The CVE-2011-4060 issue affects QNX Neutrino RTOS 6.5.0 before Service Pack 1, where the runtime linker does not properly clear LD_DEBUG_OUTPUT and LD_DEBUG environment variables when spawning a program from a setuid context. This allows local users to manipulate file system state via a symlink a...

CVE-2011-4028

The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to determine the existence of arbitrary files via a symlink attack on a temporary lock file, which is handled differently if the file exists...

Fedora 16 : puppet-2.6.6-3.fc16 (2011-13623)

The following vulnerabilities have been discovered and fixed : - CVE-2011-3870, a symlink attack via a user's SSH authorizedkeys file - CVE-2011-3869, a symlink attack via a user's .k5login file - CVE-2011-3871, a privilege escalation attack via the temp file used by the puppet resource applicati...

Fedora 15 : puppet-2.6.6-3.fc15 (2011-13636)

The following vulnerabilities have been discovered and fixed : - CVE-2011-3870, a symlink attack via a user's SSH authorizedkeys file - CVE-2011-3869, a symlink attack via a user's .k5login file - CVE-2011-3871, a privilege escalation attack via the temp file used by the puppet resource applicati...

Fedora 14 : puppet-2.6.6-3.fc14 (2011-13633)

The following vulnerabilities have been discovered and fixed : - CVE-2011-3870, a symlink attack via a user's SSH authorizedkeys file - CVE-2011-3869, a symlink attack via a user's .k5login file - CVE-2011-3871, a privilege escalation attack via the temp file used by the puppet resource applicati...

[ GLSA 201110-08 ] feh: Multiple vulnerabilities

Gentoo Linux Security Advisory GLSA 201110-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-201110-08 : feh: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201110-08 feh: Multiple vulnerabilities Multiple vulnerabilities have been discovered in feh. Please review the CVE identifiers referenced below for details. Impact : A malicious entity might entice a user to visit a URL using the...

feh: Multiple vulnerabilities

Background feh is a fast, lightweight imageviewer using imlib2. Description Multiple vulnerabilities have been discovered in feh. Please review the CVE identifiers referenced below for details. Impact A malicious entity might entice a user to visit a URL using the --wget-timestamp option, thus...

[BSA-051] Security update for puppet

Micah Anderson uploaded new packages for puppet which fixed the following security problems: CVE-2011-3848=20 Kristian Erik Hermansen reported that an unauthenticated directory traversal could drop any valid X.509 Certificate Signing Request at any location on disk, with the privileges of the...

CVE-2011-3870

Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to modify the permissions of arbitrary files via a symlink attack on the SSH authorizedkeys file...

CVE-2011-3869

Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to overwrite arbitrary files via a symlink attack on the .k5login file...

openvas 2.x race condition

openvas-server/openvas/ovalplugins.c ... resultsfilename = "/tmp/results.xml"; if gfiletest resultsfilename, GFILETESTEXISTS logwrite "Found existing results file in s, deleting it to avoid conflicts.", resultsfilename; it unlink /tmp/results.xml avoid symlink attack then spawn process that write...

CVE-2011-3204

hammerhead.cc in Hammerhead 2.1.4 allows local users to write to arbitrary files via a symlink attack on 1 /tmp/hammer.log aka the HHLOG file or 2 the REPORTLOG file...

CVE-2011-3204

hammerhead.cc in Hammerhead 2.1.4 allows local users to write to arbitrary files via a symlink attack on 1 /tmp/hammer.log aka the HHLOG file or 2 the REPORTLOG file...

Design/Logic Flaw

hammerhead.cc in Hammerhead 2.1.4 allows local users to write to arbitrary files via a symlink attack on 1 /tmp/hammer.log aka the HHLOG file or 2 the REPORTLOG file...

CVE-2011-3204

The CVE-2011-3204 entry concerns hammerhead.cc in Hammerhead 2.1.4. A local attacker can exploit a symlink vulnerability to write to arbitrary files via two logging paths: the HH_LOG file (/tmp/hammer.log) and the REPORT_LOG file. The underlying issue is a symlink attack that permits unprivileged...

CVE-2011-3204

hammerhead.cc in Hammerhead 2.1.4 allows local users to write to arbitrary files via a symlink attack on 1 /tmp/hammer.log aka the HHLOG file or 2 the REPORTLOG file...