systemtap: insufficient security check when loading uprobes kernel module

runtime/staprun/staprunfuncs.c in the systemtap runtime tool staprun in SystemTap before 1.6 does not properly validate modules when a module path is specified by a user for user-space probing, which allows local users in the stapusr group to gain privileges via a crafted module in the search pat...

PDFs on IE8 Can Disclose User Path Info

Using Internet Explorer and a virtual PDF generator to print a PDF file from a HTML page causes the document’s entire storage path, for example file://C:UsersdabDownloadsdocument.pdf, to be stored in the document itself. Read the full article. The H Security...

CVE-2000-0231

The CVE-2000-0231 entry describes a vulnerability in Linux kreatecd where a user-supplied path is trusted to locate the cdrecord program. This allows local users to gain root privileges due to the underlying trust in an attacker-controlled path. Affected component: kreatecd (Linux). Root cause: t...