Code injection

fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown impact, related to LOOKUPFOLLOW...

CVE-2010-1088

CVE-2010-1088 affects the MiracleLinux 3 kernel package (kernel-2.6.18-194.3.AXS3). It concerns the Linux kernel component fs/namei.c for versions 2.6.18 through 2.6.34 where automounting of NFS symlinks may not be followed, with the impact described as “unknown” in the advisory and related to LO...

Ubuntu Update for samba vulnerability USN-918-1

Ubuntu Update for Linux kernel vulnerabilities USN-918-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9181.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for samba vulnerability USN-918-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-875-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE9 Security Update : yast2-backup (YOU Patch Number 12279)

This updated of yast2-backup fixes a sellcode injection vulnerability and improves handling of symlinks for the backup process. CVE-2008-4636 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

DEBIAN-CVE-2009-2939

The postfix.postinst script in the Debian GNU/Linux and Ubuntu postfix 2.5.5 package grants the postfix user write access to /var/spool/postfix/pid, which might allow local users to conduct symlink attacks that overwrite arbitrary files...

Fedora Core 10 FEDORA-2009-8802 (qt)

The remote host is missing an update to qt announced via advisory FEDORA-2009-8802. OpenVAS Vulnerability Test $Id: fcore20098802.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8802 qt Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Fedora Core 10 FEDORA-2009-8802 (qt)

The remote host is missing an update to qt announced via advisory FEDORA-2009-8802. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-8800 (qt)

The remote host is missing an update to qt announced via advisory FEDORA-2009-8800. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-8800 (qt)

The remote host is missing an update to qt announced via advisory FEDORA-2009-8800. OpenVAS Vulnerability Test $Id: fcore20098800.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8800 qt Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Fedora 11 : qt-4.5.2-2.fc11 (2009-8800)

Qt's WebKit code did not properly handle numeric character references, which could allow remote attackers to cause a denial of service memory corruption and application crash via a crafted HTML document. Also included is: a fix for lib symlinks changing erroneously on upgrades a fix for Copy and...

Fedora 10 : qt-4.5.2-2.fc10 (2009-8802)

Qt's WebKit code did not properly handle numeric character references, which could allow remote attackers to cause a denial of service memory corruption and application crash via a crafted HTML document. Also included is: a fix for lib symlinks changing erroneously on upgrades a fix for Copy and...

Race condition

Race condition in PulseAudio 0.9.9, 0.9.10, and 0.9.14 allows local users to gain privileges via vectors involving creation of a hard link, related to the application setting LDBINDNOW to 1, and then calling execv on the target of the /proc/self/exe symlink...

USN-791-1: Moodle vulnerabilities

Thor Larholm discovered that PHPMailer, as used by Moodle, did not correctly escape email addresses. A local attacker with direct access to the Moodle database could exploit this to execute arbitrary commands as the web server user. CVE-2007-3215 Nigel McNie discovered that fetching https URLs di...

mysql: incomplete upstream fix for CVE-2008-2079

MySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time a...

Mandrake Security Advisory MDVSA-2009:094 (mysql)

The remote host is missing an update to mysql announced via advisory MDVSA-2009:094. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

MDVA-2008:121 : blt

An updated blt package is provided that fixes two issues. The first is that the package contains two symlinks named /usr/bin/bltsh and /usr/bin/bltwish that were intended to make it easier to launch these two utilities. However, they were linked to files that did not exist, and consequently did n...

MDVA-2008:140 : symlinks

The symlinks program did not work on files larger than 2GB, reporting the error Value too large for defined data type. This update fixes this issue in addition to an error where symlinks converted from absolute to relative paths were not shortened Red Hat bug 89655. %NASLMINLEVEL 70300 @DEPRECATE...

Mandriva Linux Security Advisory : rsync (MDVSA-2008:011)

rsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows remote attackers to access restricted files via unknown vectors that cause rsync to create a symlink that points outside of the module's hierarchy. CVE-2007-6199 Unspecified vulnerability in rsync before...

Mandriva Update for symlinks MDVA-2008:140 (symlinks)

Check for the Version of symlinks OpenVAS Vulnerability Test Mandriva Update for symlinks MDVA-2008:140 symlinks Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...