1936 matches found
Fedora Core 4 : openssl-0.9.7f-7.10 / openssl097a-0.9.7a-3.1 (2005-986)
The remote Fedora Core host is missing one or more security updates : openssl-0.9.7f-7.10 : - Wed Oct 12 2005 Tomas Mraz 0.9.7f-7.10 - fix CVE-2005-2969 - remove SSLOPMSIESSLV2RSAPADDING which disables the countermeasure against man in the middle attack in SSLv2 169863 - more fixes for constant...
rt-sa-2005-012.txt
Advisory: Pico Server pServ Local Information Disclosure RedTeam found a local information disclosure vulnerability in Pico Server pServ which results in a local user reading all files on the server with pServ's permissions. Details ======= Product: Pico Server pServ Affected Version: 3.3,...
Fedora Core 4 : kernel-2.6.12-1.1387_FC4 (2005-510)
Wed Jun 29 2005 Dave Jones - 2.6.12.2 - Mon Jun 27 2005 Dave Jones - Disable multipath caches. 161168 - Reenable AMD756 I2C driver for x86-64. 159609 - Add more IBM r40e BIOS's to the C2/C3 blacklist. - Thu Jun 23 2005 Dave Jones - Make orinoco driver suck less. Scanning/roaming/ethtool support...
silvercity lexical analysis application symbolic links problem
Symbolic links problem on temporary files creation...
RHEL 2.1 / 3 : kdelibs, kdebase (RHSA-2004:412)
Updated kdelib and kdebase packages that resolve multiple security issues are now available. The kdelibs packages include libraries for the K Desktop Environment. The kdebase packages include core applications for the K Desktop Environment. Andrew Tuitt reported that versions of KDE up to and...
CVE-2001-0907
Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a series of deeply nested symlinks, which causes the kernel to spend extra time when trying to access the link...
CVE-2001-0907: Undefined Security Weakness
Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a series of deeply nested symlinks, which causes the kernel to spend extra time when trying to access the link...
Mandrake Linux Security Advisory : kernel (MDKSA-2001:082-1)
Rafal Wojtczuk found a vulnerability in the 2.2.19 and 2.4.11 Linux kernels with the ptrace code and deeply nested symlinks spending an arbitrary amount of time in the kernel code. The ptrace vulnerability could be used by local users to gain root privilege, the symlink vulnerability could result...
uninitialized buffer in midnight commander
Midnight Commander is using uninitialized buffer for handling symlinks in VFS tar, cpio. See vfs/direntry.c, handling of buf at vfssresolvesymlink. I wonder but it works almost properly ;- On linux-i386 I can reach stack buffer overflow using specially crafted archive. Open...
CVE-2001-1171
Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules, which could allow local users to gain privileges or modify the firewall policy...
CVE-1999-1102
The CVE-1999-1102 entry concerns lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1 and other BSD-based systems. The vulnerability arises from a symlink-related attack in lpr that enables local users to create or overwrite arbitrary files after the program is invoked 1000 times. Root cause is a symlink hand...
CVE-2000-1156
StarOffice 5.2 follows symlinks and sets world-readable permissions for the /tmp/soffice.tmp directory, which allows a local user to read files of the user who is using StarOffice...
CVE-2000-1156: Undefined Security Weakness
StarOffice 5.2 follows symlinks and sets world-readable permissions for the /tmp/soffice.tmp directory, which allows a local user to read files of the user who is using StarOffice...
UUCP - File Creation/Overwriting Symlinks
/ root exploit: multiple subsystem errors allowing root exploit bashack.c - Thu Nov 30 21:50:50 NZDT 2000 redhat 6.1 /etc/rc.d/ and scripts that are trusting the untrustworthy. /bin/sh acts silly when u get it to use the include define FNAME "/usr/man/man1/last.1.gz;export PATH=.;cd ..;cd ..;cd...
CVE-2000-0366
CVE-2000-0366 affects Debian GNU/Linux 2.1 where a dump utility fails to properly restore symlinks. This can allow a local user to modify ownership of arbitrary files due to incorrect handling of symbolic links during restoration. The core issue is the improper restoration of symlinks, enabling o...
CVE-1999-0787
The CVE describes a local-privilege issue in ssh-agent: an AF_UNIX socket used for key forwarding is created by ssh-agent, and the client’s connection may bypass proper permissions checks, enabling a local attacker to establish sessions as the victim user. The Red Hat entry reiterates the SSH-age...
CVE-2000-0409: Undefined Security Weakness
Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate...
CVE-2000-0206
The CVE-2000-0206 entry concerns Oracle 8.1.5.x on Linux, where the installer follows symlinks and creates orainstRoot.sh with world-writable permissions. This configuration flaw allows local users to gain privileges. The available documents specify the vulnerable component (orainstRoot.sh during...
CVE-2000-0210
CVE-2000-0210 affects the lit program in Sun Flex License Manager (FlexLM). The vulnerability arises because lit follows symbolic links, allowing a local user to modify arbitrary files on the host. Root cause: improper handling of symlinks in the lit utility. Impact described in sources is local ...