Enomaly ECP / Enomalism < 2.2.1 - Multiple Local Vulnerabilities

Enomaly ECP/Enomalism: Multiple vulnerabilities in enomalism2.sh redux Synopsis All versions of Enomaly ECP/Enomalism1 before 2.2.1 have multiple issues relating to the use of temporary files in an insecure manner. Fixes for CVE-2008-49902 and CVE-2009-03903 in 2.1.1 and 2.2 were found to be...

CVE-2009-0416

The SSL certificate setup program genSslCert.sh in Standards Based Linux Instrumentation for Manageability SBLIM sblim-sfcb 1.3.2 allows local users to overwrite arbitrary files via a symlink attack on the 1 /var/tmp/key.pem, 2 /var/tmp/cert.pem, and 3 /var/tmp/ssl.cnf temporary files...

Code injection

The SSL certificate setup program genSslCert.sh in Standards Based Linux Instrumentation for Manageability SBLIM sblim-sfcb 1.3.2 allows local users to overwrite arbitrary files via a symlink attack on the 1 /var/tmp/key.pem, 2 /var/tmp/cert.pem, and 3 /var/tmp/ssl.cnf temporary files...

CVE-2009-0416

The SSL certificate setup program genSslCert.sh in Standards Based Linux Instrumentation for Manageability SBLIM sblim-sfcb 1.3.2 allows local users to overwrite arbitrary files via a symlink attack on the 1 /var/tmp/key.pem, 2 /var/tmp/cert.pem, and 3 /var/tmp/ssl.cnf temporary files...

CVE-2009-0416

The CVE-2009-0416 issue affects SBLIM’s sblim-sfcb 1.3.2: the SSL certificate setup program genSslCert.sh allows a local user to trigger a symlink attack that can overwrite the temporary files /var/tmp/key.pem, /var/tmp/cert.pem, and /var/tmp/ssl.cnf. Several connected sources (SU SE/openSUSE adv...

Arbitrary file deletion

Enomaly Elastic Computing Platform ECP, formerly Enomalism, before 2.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/enomalism2.pid temporary file...

CVE-2008-4990

Enomaly Elastic Computing Platform ECP, formerly Enomalism, before 2.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/enomalism2.pid temporary file...

CVE-2008-4990

Enomaly Elastic Computing Platform ECP, formerly Enomalism, before 2.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/enomalism2.pid temporary file...

CVE-2008-4990

CVE-2008-4990 concerns Enomaly ECP/Enomalism (pre-2.2.1) where a local attacker can exploit a symlink race on the temporary PIDFILE (/tmp/enomalism2.pid) to overwrite arbitrary files as root, or inject/alter process termination signals. The linked Seebug entries detail multiple local vulnerabilit...

Mandrake Security Advisory MDVSA-2009:027 (cups)

The remote host is missing an update to cups announced via advisory MDVSA-2009:027. OpenVAS Vulnerability Test $Id: mdksa2009027.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:027 cups Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandrake Security Advisory MDVSA-2009:027 (cups)

The remote host is missing an update to cups announced via advisory MDVSA-2009:027. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

CVE-2008-4990 Enomaly ECP/Enomalism: Insecure temporary file creation vulnerabilities

CVE-2008-4990 Enomaly ECP/Enomalism: Insecure temporary file creation vulnerabilities 1. Synopsis All versions of Enomaly ECP/Enomalism prior to 2.1.1 use temporary files in an insecure manner, allowing for symlink and command injection attacks. 2. Impact Information Background Enomaly ECP former...

Enomaly ECP/Enomalism Insecure File Creation

CVE-2008-4990 Enomaly ECP/Enomalism: Insecure temporary file creation vulnerabilities 1. Synopsis All versions of Enomaly ECP/Enomalism prior to 2.1.1 use temporary files in an insecure manner, allowing for symlink and command injection attacks. 2. Impact Information Background Enomaly ECP former...

Arbitrary file deletion

winetricks before 20081223 allows local users to overwrite arbitrary files via a symlink attack on the xshowmenu.txt temporary file...

CVE-2009-0313

winetricks before 20081223 allows local users to overwrite arbitrary files via a symlink attack on the xshowmenu.txt temporary file...

CVE-2009-0313

Summary: CVE-2009-0313 concerns winetricks prior to 20081223, where a symlink vulnerability in handling temporary x_showmenu.txt files permits local users to overwrite arbitrary files. Affected components: winetricks (before 20081223). Root cause: symlink attack during creation/usage of a tempora...

[ MDVSA-2009:027 ] cups

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:027 http://www.mandriva.com/security/ Package : cups Date : January 24, 2009 Affected: 2009.0 Problem Description: A vulnerability has been discovered in CUPS shipped with Mandriva Linux which allows local...

CVE-2009-0032

CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server CS 3.0 and 4.0, and Multi Network Firewall MNF 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file...

CVE-2009-0032

CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server CS 3.0 and 4.0, and Multi Network Firewall MNF 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file...

Code injection

CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server CS 3.0 and 4.0, and Multi Network Firewall MNF 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file...