CVE-2014-9622

CVE-2014-9622 covers an eval-injection in xdg-utils 1.1.0 RC1 where, if no supported desktop environment is identified, an attacker can cause xdg-open to execute arbitrary commands via the URL argument. The vulnerability is treated as a remote-code-execution risk affecting Linux distros, with CVS...

CVE-2014-9622

Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows context-dependent attackers to execute arbitrary code via the URL argument to xdg-open...

Debian DSA-3131-1 : xdg-utils - security update

John Houwer discovered a way to cause xdg-open, a tool that automatically opens URLs in a user's preferred application, to execute arbitrary commands remotely. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

[SECURITY] [DSA 3131-1] xdg-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3131-1 [email protected] http://www.debian.org/security/ Michael Gilbert January 18, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3131-1] xdg-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3131-1 [email protected] http://www.debian.org/security/ Michael Gilbert January 18, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3131-1] xdg-utils security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3131-1 [email protected] http://www.debian.org/security/ Michael Gilbert January 18, 2015 http://www.debian.org/security/faq -...

Oracle Solaris Third-Party Patch Update : xdg-utils (cve_2008_0386_improper_input)

The remote Solaris system is missing necessary patches to address security updates : - Xdg-utils 1.0.2 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URL argument to 1 xdg-open or 2 xdg-email. CVE-2008-0386 %NASLMINLEVEL 70300 C Tenab...

Debian Security Advisory DSA 3131-1 (xdg-utils - security update)

John Houwer discovered a way to cause xdg-open, a tool that automatically opens URLs in a user OpenVAS Vulnerability Test $Id: deb3131.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3131-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright:...

Debian: Security Advisory (DSA-3131-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-0564

Buffer underflow in the ssldecryptrecord function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allows remote attackers to cause a denial of service application crash via a crafted packet that is improperly handled during decryption of an SSL...

[SECURITY] [DLA 108-1] nfs-utils security update

Package : nfs-utils Version : 1:1.2.2-4squeeze3 CVE ID : CVE-2012-3541 In the past, rpc.statd posted SMNOTIFY requests using the same socket it used for sending downcalls to the kernel. To receive replies from remote hosts, the socket was bound to INADDRANY. To prevent unwanted data injection, bi...

DLA-108-1 nfs-utils - security update

Bulletin has no description...

GLSA-201412-02 : nfs-utils: Information disclosure

The remote host is affected by the vulnerability described in GLSA-201412-02 nfs-utils: Information disclosure rpc.gssd in nfs-utils is vulnerable to DNS spoofing due to it depending on PTR resolution for GSSAPI authentication, allowing for data to be submitted to a malicious server without the...

nfs-utils: Information disclosure

Background nfs-utils contains the client and daemon implementations for the NFS protocol. Description rpc.gssd in nfs-utils is vulnerable to DNS spoofing due to it depending on PTR resolution for GSSAPI authentication, allowing for data to be submitted to a malicious server without the knowledge ...

UBUNTU-CVE-2014-1581

Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and...

SUSE-RU-2015:0574-1 Security update for powerpc-utils

The 'snap' system information collection tool of the PowerPC Utils package collected fstab and yaboot.conf files which might contain passwords. CVE-2014-4040 As these files are of interest, we now print a warning that the user of the 'snap' tool should check if private passwords are in those file...

Mozilla: Use-after-free setting text directionality (MFSA 2014-72)

Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to execute arbitrary code via text that is improperly handled during the...

Important: glibc

Issue Overview: An off-by-one heap-based buffer overflow flaw was found in glibc's internal gconvtranslitfind function. An attacker able to make an application call the iconvopen function with a specially crafted argument could possibly use this flaw to execute arbitrary code with the privileges ...

UBUNTU-CVE-2014-1567

Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to execute arbitrary code via text that is improperly handled during the...

Red Hat Linux stickiness of /tmp

No description provided by source. from: http://marc.info/?l=full-disclosure&m=129842239022495&w=2 Developers should not rely on the stickiness of /tmp on Red Hat Linux --------------------------------------------------------------------- Recent versions of Red Hat Enterprise Linux and Fedora...