CVE-2012-3440: Improper Link Resolution Before File Access

A certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux RHEL 5 allows local users to overwrite arbitrary files via a symlink attack on the /var/tmp/nsswitch.conf.bak temporary file...

CVE-2012-3453

logol 1.5.0 uses world writable permissions for the /var/lib/logol/results directory, which allows local users to delete or overwrite arbitrary files...

CVE-2012-3453

logol 1.5.0 uses world writable permissions for the /var/lib/logol/results directory, which allows local users to delete or overwrite arbitrary files...

PT-2012-4727

Name of the Vulnerable Software and Affected Versions eXtplorer version 2.1.0b6 Description The issue concerns the use of world-writable permissions for the /var/lib/extplorer/ftp tmp directory. This setup allows local users to delete or overwrite arbitrary files. Recommendations For version...

PT-2012-4726

Name of the Vulnerable Software and Affected Versions logol version 1.5.0 Description The issue allows local users to delete or overwrite arbitrary files due to world writable permissions for the /var/lib/logol/results directory. Recommendations For logol version 1.5.0, consider changing the...

DEBIAN-CVE-2011-3149

The expandarg function in the pamenv module modules/pamenv/pamenv.c in Linux-PAM aka pam before 1.1.5 does not properly handle when environment variable expansion can overflow, which allows local users to cause a denial of service CPU consumption...

PT-2012-1035

Name of the Vulnerable Software and Affected Versions FCKeditor versions 2.6.7 and earlier Description A cross-site scripting XSS issue exists in the print textinputs var function, allowing remote attackers to inject arbitrary web script or HTML via textinputs array parameters. Multiple...

CVE-2012-0813

Wicd before 1.7.1 saves sensitive information in log files in /var/log/wicd, which allows context-dependent attackers to obtain passwords and other sensitive information...

CVE-2012-0813: Undefined Security Weakness

Wicd before 1.7.1 saves sensitive information in log files in /var/log/wicd, which allows context-dependent attackers to obtain passwords and other sensitive information...

GLSA-201206-08 : Wicd: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201206-08 Wicd: Multiple vulnerabilities Two vulnerabilities have been found in Wicd: Passwords and passphrases are written to /var/log/wicd CVE-2012-0813. Input from the daemon's D-Bus interface is not properly sanitized...

Wicd: Multiple vulnerabilities

Background Wicd is an open source wired and wireless network manager for Linux. Description Two vulnerabilities have been found in Wicd: Passwords and passphrases are written to /var/log/wicd CVE-2012-0813. Input from the daemon's D-Bus interface is not properly sanitized CVE-2012-2095. Impact A...

PT-2012-1132

Name of the Vulnerable Software and Affected Versions wicd versions prior to 1.7.2.1 Description The issue concerns multiple vulnerabilities in the wicd package that can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploit...

DEBIAN-CVE-2012-2414

main/manager.c in the Manager Interface in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x before 1.8.11.1, and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4 does not properly enforce System class authorization requirements, which allows remote authenticated users to...

Fedora 15 : polipo-1.0.4.1-6.fc15 (2012-0849)

add daily cache cleanup - fix missing creation of /var/run directory bz 755198 - make sure log directory context is set correctly bz 741779 - fix denial of service vulnerability CVE-2011-3596 bz 742897 Note that Tenable Network Security has extracted the preceding description block directly from...

Joomla Component mod_spo SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Simple Page Option LFI Google Dork: inurl:modspo Date: 15/07/2011 Author: SeguridadBlanca.Blogspot.com or SeguridadBlanca Software Link: http://joomlacode.org/gf/download/frsrelease/11841/47776/modspo1.5.16.zip Version: 1.5.x...

Design/Logic Flaw

Google Chrome OS before R12 0.12.433.38 Beta allows local users to gain privileges by creating a /var/lib/chromeos-aliases.conf file and placing commands in it...

PT-2011-3657

Name of the Vulnerable Software and Affected Versions Google Chrome OS versions prior to R12 0.12.433.38 Beta Description The issue allows local users to gain privileges by creating a /var/lib/chromeos-aliases.conf file and placing commands in it. Recommendations For Google Chrome OS versions pri...

CVE-2011-2169: Undefined Security Weakness

Google Chrome OS before R12 0.12.433.38 Beta allows local users to gain privileges by creating a /var/lib/chromeos-aliases.conf file and placing commands in it...

CVE-2011-1784

The pidfilewrite function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the 1 keepalived.pid, 2 checkers.pid, and 3 vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files...

Code injection

The pidfilewrite function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the 1 keepalived.pid, 2 checkers.pid, and 3 vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files...