13258 matches found
hplip: insecure temporary file handling
The senddatatostdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing HPLIP 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file...
PT-2013-1081 · Hewlett Packard +3 · Hplip +3
Name of the Vulnerable Software and Affected Versions: HP Linux Imaging and Printing HPLIP versions 3.12.4 and earlier Description: The issue allows local users to overwrite arbitrary files via a symlink attack on temporary files, potentially leading to disruption of confidentiality, integrity, a...
Microsoft Internet Explorer Shift JIS字符信息泄露漏洞(CVE-2013-0015) (ms13-009)
BUGTRAQ ID: 57822 CVECAN ID: CVE-2013-0015 Microsoft Internet Explorer是微软公司推出的一款网页浏览器。 Shift JIS是日本语的字符编码。Internet Explorer 6, 7, 8, 9没有正确执行Shift JIS编码的自动选择，通过构造触发跨域滚动事件的特制网站，远程攻击者可从不同的域或区域读取内容，造成信息泄露。 0 Microsoft Internet Explorer 6 - 9 临时解决方法： 如果您不能立刻安装补丁或者升级，建议您采取以下措施以降低威胁： 将互联网和局域网安全区域设置为“高”...
DEBIAN-CVE-2012-5564
android-tools 4.1.1 in Android Debug Bridge ADB allows local users to overwrite arbitrary files via a symlink attack on /tmp/adb.log...
xNBD - tmpxnbd.log Insecure Temporary File Handling
xNBD - tmpxnbd.log Insecure Temporary File Handling source: https://www.securityfocus.com/bid/57784/info xNBD is prone to a vulnerability because it handles temporary files in an insecure manner. Local attackers may leverage this issue to perform symbolic-link attacks in the context of the affect...
xNBD - '/tmp/xnbd.log' Insecure Temporary File Handling
source: https://www.securityfocus.com/bid/57784/info xNBD is prone to a vulnerability because it handles temporary files in an insecure manner. Local attackers may leverage this issue to perform symbolic-link attacks in the context of the affected application. Other attacks may also be possible. ...
Thinksns2. 8 file upload exploit exp-vulnerability warning-the black bar safety net
Vulnerability version The presence of vulnerabilities the version: latest 2. 8 stable version. Other version not test. Vulnerability file Vulnerable file is: thumb.php Author: Wei kunpeng 1, Prepare the following PHP file and upload it to the server yourself. File content as follows: ? php echo “...
openshift-origin-port-proxy: openshift-port-proxy-cfg lockwrap() tmp file creation
The lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin before 1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp...
SuSE 11.1 Security Update : puppet (SAT Patch Number 6115)
This update fixes the following issues : - Filebucket arbitrary file read. CVE-2011-1986 - Filebucket DoS. CVE-2012-1987 - Filebucket arbitrary code execution. CVE-2012-1988 - insecure handling of temporary files. CVE-2012-1989 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...
RHEL 5 : rgmanager (RHSA-2009:1339)
The remote Redhat Enterprise Linux 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2009:1339 advisory. The rgmanager package contains the Red Hat Resource Group Manager, which provides high availability for critical server applications in the event of...
RHEL 5 : cman (RHSA-2009:1341)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1341 advisory. The Cluster Manager cman utility provides services for managing a Linux cluster. Multiple insecure temporary file use flaws were found in...
CentOS Update for hpijs3 CESA-2013:0133 centos5
Check for the Version of hpijs3 OpenVAS Vulnerability Test CentOS Update for hpijs3 CESA-2013:0133 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
Scientific Linux Security Update : hplip3 on SL5.x i386/x86_64 (20130108)
It was found that the HP CUPS Common UNIX Printing System fax filter in HPLIP created a temporary file in an insecure way. A local attacker could use this flaw to perform a symbolic link attack, overwriting arbitrary files accessible to a process using the fax filter such as the hp3-sendfax tool...
Microsoft .NET Framework 远程权限提升漏洞(CVE-2013-0003)
Bugtraq ID:57114 CVE ID: CVE-2013-0003 Microsoft .NET Framework是一套由Microsoft分发的帮助开发者构建基于WEB应用的系统 Microsoft .NET Framework System.DirectoryServices.Protocols S.DS.P命名空间方法没有正确校验内存中的对象大小，在拷贝这些对象到数组之前缺少正确的边界检查，可触发缓冲区溢出。攻击者可以构建特制的XMAL浏览器应用XBAP或不可信的.Net应用，诱使用户解析，可完全控制应用系统，执行任意代码 0 Microsoft .NET...
Microsoft .NET Framework远程权限提升漏洞(MS13-004)
CVE ID: CVE-2013-0004 Microsoft .NET Framework是一套由Microsoft分发的帮助开发者构建基于WEB应用的系统。 Microsoft .NET Framework里存在的一个两次构建错误会导致不正确验证内存中某些对象的权限，攻击者可以构建特制的XMAL浏览器应用XBAP或不可信的.Net应用，诱使用户解析，可完全控制应用系统，执行任意代码。 0 Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.0 Microsoft .NET Framework 3.5 Microsoft...
Microsoft .NET Framework 远程权限提升漏洞(CVE-2013-0004)
Bugtraq ID:57113 CVE ID: CVE-2013-0004 Microsoft .NET Framework是一套由Microsoft分发的帮助开发者构建基于WEB应用的系统 Microsoft .NET Framework里存在的一个两次构建错误会导致不正确验证内存中某些对象的权限，攻击者可以构建特制的XMAL浏览器应用XBAP或不可信的.Net应用，诱使用户解析，可完全控制应用系统，执行任意代码 0 Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.0 Microsoft .NET Framework...
Microsoft Windows Print Spooler打印作业处理漏洞（MS13-001)
CVECAN ID: CVE-2013-0011 Microsoft Windows是微软公司推出的一系列操作系统。 Microsoft Windows Print Spooler服务没有正确处理特制的打印作业，在实现上存在远程代码执行漏洞，可导致任意代码执行。 0 Microsoft Windows Server 2008 Microsoft Windows 7 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 禁用Print Spooler服务 厂商补丁： Microsoft ---------...
hplip: insecure temporary file handling
The senddatatostdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing HPLIP 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file...
Latest Internet Explorer zero-day linked to Elderwood Project
Last week we have seen ongoing attacks was exploiting a vulnerability in Internet Explorer 6, Internet Explorer 7, and Internet Explorer 8 that came to light after the Council on Foreign Relations website was hacked and was hosting the code. Symantec has linked exploits to the group responsible f...
