8930 matches found
Code injection
CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server CS 3.0 and 4.0, and Multi Network Firewall MNF 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file...
CVE-2009-0032
CVE-2009-0032 affects CUPS shipped with Mandriva Linux (2008.0, 2008.1, 2009.0) and Mandriva CS/MNF; a local symlink attack on the /tmp/pdf.log file lets local users overwrite arbitrary files. Root cause: insecure handling of temporary file creation via symlinks in CUPS. Impact: local privilege/e...
CVE-2009-0032
CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server CS 3.0 and 4.0, and Multi Network Firewall MNF 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file...
Mandrake Security Advisory MDVSA-2009:011 (virtualbox)
The remote host is missing an update to virtualbox announced via advisory MDVSA-2009:011. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
Mandrake Security Advisory MDVSA-2009:011 (virtualbox)
The remote host is missing an update to virtualbox announced via advisory MDVSA-2009:011. OpenVAS Vulnerability Test $Id: mdksa2009011.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:011 virtualbox Authors: Thomas Reinke Copyright: Copyright c 2009...
[ MDVSA-2009:011 ] virtualbox
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:011 http://www.mandriva.com/security/ Package : virtualbox Date : January 14, 2009 Affected: 2008.0, 2008.1, 2009.0 Problem Description: A vulnerability have been discovered and corrected in VirtualBox,...
FreeBSD Ports: pdfjam
The remote host is missing an update to the system as announced in the referenced advisory. VID a02c9595-e018-11dd-a765-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID a02c9595-e018-11dd-a765-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
FreeBSD Ports: pdfjam
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD : verlihub -- insecure temporary file usage and arbitrary command execution (58997463-e012-11dd-a765-0030843d3802)
securityfocus reports : An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application. Successfully mounting a symlink attack may allow the attacker to delete or corrupt sensitive files,...
openSUSE 10 Security Update : jhead (jhead-5899)
This update of jhead fixes several security problems : - CVE-2008-4575: buffer overflow in DoCommand - CVE-2008-4639: local symlink attack - CVE-2008-4640: DoCommand allowed deletion of arbitrary files - CVE-2008-4641: execution of arbitrary shell commands in DoCommand %NASLMINLEVEL 70300 C Tenab...
xen: insecure temporary file use in qemu-dm.debug
qemu-dm.debug in Xen 3.2.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/args temporary file...
Moderate: Red Hat Security Advisory: xen security and bug fix update
Updated xen packages that resolve several security issues and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The xen packages contain the Xen tools and management daemons needed to manage...
RHEL 5 : xen (RHSA-2009:0003)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:0003 advisory. The xen packages contain the Xen tools and management daemons needed to manage virtual machines running on Red Hat Enterprise Linux. Xen was...
CUPS Privilege Escalation Exploit
/ cve-2008-5377.c CUPS http://jon.oberheide.org Usage: $ gcc cve-2008-5377.c -o cve-2008-5377.c $ ./cve-2008-5377 $ id uid=0root gid=1000vm ... Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-5377 pstopdf in CUPS 1.3.8 allows local users to overwrite arbitrary files via a...
CVE-2008-5746
Sun SNMP Management Agent SUNWmasf 1.4u2 through 1.5.4 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on temporary files...
Code injection
Sun SNMP Management Agent SUNWmasf 1.4u2 through 1.5.4 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on temporary files...
CVE-2008-5746
CVE-2008-5746 affects Sun SNMP Management Agent (SUNWmasf) versions 1.4u2 through 1.5.4. The vulnerability allows local users to overwrite arbitrary files and gain privileges via a symlink attack on temporary files. Impact is privilege escalation and potential compromise of file integrity on affe...
CVE-2008-5746
Sun SNMP Management Agent SUNWmasf 1.4u2 through 1.5.4 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on temporary files...
FreeBSD Ports: ampache
The remote host is missing an update to the system as announced in the referenced advisory. VID 0ac68e68-d32b-11dd-b540-d1288664c17e OpenVAS Vulnerability Test $ Description: Auto generated from VID 0ac68e68-d32b-11dd-b540-d1288664c17e Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...