EUVD-2009-1252

Malware in sbrugna...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the tunapie package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian Security Advisory DSA 1764-1 (tunapie)

The remote host is missing an update to tunapie announced via advisory DSA 1764-1. OpenVAS Vulnerability Test $Id: deb17641.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1764-1 tunapie Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1764-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1764-1] New tunapie packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1764-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 07, 2009 http://www.debian.org/security/faq -...

tunapie multiple security vulnerabilities

Unfiltered shell characters vulnerability, symlink vulnerability...

CVE-2009-1254

James Stone Tunapie 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a stream URL...

CVE-2009-1253

James Stone Tunapie 2.1 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file...

CVE-2009-1254

James Stone Tunapie 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a stream URL...

Design/Logic Flaw

James Stone Tunapie 2.1 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file...

CVE-2009-1253

James Stone Tunapie 2.1 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file...

Code injection

James Stone Tunapie 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a stream URL...

CVE-2009-1253

James Stone Tunapie 2.1 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file...

CVE-2009-1254

James Stone Tunapie 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a stream URL...

Debian DSA-1764-1 : tunapie - several vulnerabilities

Several vulnerabilities have been discovered in Tunapie, a GUI frontend to video and radio streams. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1253 Kees Cook discovered that insecure handling of temporary files may lead to local denial of servi...

CVE-2009-1253

Tunapie is affected by CVE-2009-1253, a local vulnerability caused by insecure handling of temporary files that allows a local user to overwrite arbitrary files via a symlink attack. Debian's DSA-1764-1 notes fixes in tunapie 2.1.8-2 for the lenny release (and earlier 1.3.1-1+etch2 for etch), add...

CVE-2009-1254

Tunapie (GUI frontend for video/radio streams) is affected by CVE-2009-1254 due to insufficient escaping of stream URLs, enabling remote command execution via a crafted URL. The issue is part of a set also including CVE-2009-1253 (symlink-based local DoS); Debian DSAs document fixes. Remediation ...

CVE-2009-1254

Removed by vendor...

CVE-2009-1253

Removed by vendor...

[SECURITY] [DSA 1764-1] New tunapie packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1764-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 07, 2009 http://www.debian.org/security/faq -...