3537 matches found
[SA17202] AIX LSCFG Insecure Temporary File Handling Vulnerability
TITLE: AIX LSCFG Insecure Temporary File Handling Vulnerability SECUNIA ADVISORY ID: SA17202 VERIFY ADVISORY: http://secunia.com/advisories/17202/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system OPERATING SYSTEM: AIX 5.x http://secunia.com/product/213/ DESCRIPTION: A...
Mandrake Linux Security Advisory : cfengine (MDKSA-2005:184)
Javier Fernndez-Sanguino Pea discovered several insecure temporary file uses in cfengine = 1.6.5 and = 2.1.16 which allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in. CVE-2005-2960 In addition, Javier discovered the cfmailfilter and cfcron.in...
Debian DSA-857-1 : graphviz - insecure temporary file
Javier Fernandez-Sanguino Pena discovered insecure temporary file creation in graphviz, a rich set of graph drawing tools, that can be exploited to overwrite arbitrary files by a local attacker. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
GLSA-200510-04 : Texinfo: Insecure temporary file creation
The remote host is affected by the vulnerability described in GLSA-200510-04 Texinfo: Insecure temporary file creation Frank Lichtenheld has discovered that the 'sortoffline' function in texindex insecurely creates temporary files with predictable filenames. Impact : A local attacker could create...
RHEL 4 : mysql (RHSA-2005:685)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:685 advisory. MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many...
[SECURITY] [DSA 857-1] New graphviz packages fix insecure temporary file
-------------------------------------------------------------------------- Debian Security Advisory DSA 857-1 [email protected] http://www.debian.org/security/ Martin Schulze October 10th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 857-1] New graphviz packages fix insecure temporary file
-------------------------------------------------------------------------- Debian Security Advisory DSA 857-1 [email protected] http://www.debian.org/security/ Martin Schulze October 10th, 2005 http://www.debian.org/security/faq -...
[Full-disclosure] [SECURITY] [DSA 857-1] New graphviz packages fix insecure temporary file
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 857-1 [email protected] http://www.debian.org/security/ Martin Schulze October 10th, 2005 http://www.debian.org/security/faq -...
DSA-857-1 graphviz - insecure temporary file
Bulletin has no description...
mysql security update
CentOS Errata and Security Advisory CESA-2005:685 Updated mysql packages that fix a temporary file flaw and a number of bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server...
net security update
CentOS Errata and Security Advisory CESA-2005:395 Updated net-snmp packages that fix two security issues and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. SNMP Simple Network Management Protocol is a protocol used f...
Low: Red Hat Security Advisory: net-snmp security update
Updated net-snmp packages that fix two security issues and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. SNMP Simple Network Management Protocol is a protocol used for network management. A denial of service bug was...
[SECURITY] [DSA 843-1] New arc packages fix insecure temporary files
-------------------------------------------------------------------------- Debian Security Advisory DSA 843-1 [email protected] http://www.debian.org/security/ Martin Schulze October 5th, 2005 http://www.debian.org/security/faq -...
Debian DSA-843-1 : arc - insecure temporary file
Two vulnerabilities have been discovered in the ARC archive program under Unix. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2945 Eric Romang discovered that the ARC archive program under Unix creates a temporary file with insecure permissions...
RHEL 3 : ghostscript (RHSA-2005:081)
Updated ghostscript packages that fix a PDF output issue and a temporary file security bug are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Ghostscript is a program for displaying PostScript files or printing them to non-PostScript...
Debian DSA-839-1 : apachetop - insecure temporary file
Eric Romang discovered an insecurely created temporary file in apachetop, a realtime monitoring tool for the Apache webserver that could be exploited with a symlink attack to overwrite arbitrary files with the user id that runs apachetop. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
Mandrake Linux Security Advisory : lm_sensors (MDKSA-2005:149)
Javier Fernandez-Sanguino Pena discovered that the pwmconfig script in the lmsensors package created temporary files in an insecure manner. This could allow a symlink attack to create or overwrite arbitrary files with full root privileges because pwmconfig is typically executed by root. The updat...
Debian DSA-822-1 : gtkdiskfree - insecure temporary file creation
Eric Romang discovered that gtkdiskfree, a GNOME program that shows free and used space on filesystems, creates a temporary file in an insecure fashion. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...
GLSA-200509-21 : Hylafax: Insecure temporary file creation in xferfaxstats script
The remote host is affected by the vulnerability described in GLSA-200509-21 Hylafax: Insecure temporary file creation in xferfaxstats script Javier Fernandez-Sanguino has discovered that xferfaxstats cron script supplied by Hylafax insecurely creates temporary files with predictable filenames...