UBUNTU-CVE-2011-1784

The pidfilewrite function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the 1 keepalived.pid, 2 checkers.pid, and 3 vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files...

PT-2011-1179

Name of the Vulnerable Software and Affected Versions Openswan versions 2.2.x through 2.6.37 Description The issue is related to improper permission restrictions in Openswan, specifically with files /var/run/starter.pid and /var/lock/subsys/ipsec. This could allow local users to kill arbitrary...

Fedora 14 : fail2ban-0.8.4-27.fc14 (2011-5153)

fail2ban used predictable /tmp files which a local user can allocate before fail2ban does. All tmp files have been moved to /var/lib/fail2ban. This also helps with selinux policies. Another security related fix is that fail2ban defaulted to gamin which conflicts with selinux, so users had to...

PT-2011-2332

Name of the Vulnerable Software and Affected Versions Oracle Solaris versions 8, 9, and 10 Description The issue allows local users to obtain password hashes and conduct brute force password guessing attacks due to the storage of back-out patch files undo.Z unencrypted with world-readable...

DEBIAN-CVE-2011-0727

GNOME Display Manager gdm 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a 1 dmrc or 2 face icon file under /var/cache/gdm/...

CVE-2011-0727: Improper Link Resolution Before File Access

GNOME Display Manager gdm 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a 1 dmrc or 2 face icon file under /var/cache/gdm/...

CVE-2011-1551

SUSE openSUSE Factory assigns ownership of the /var/log/cobbler/ directory tree to the web-service user account, which might allow local users to gain privileges by leveraging access to this account during root filesystem operations by the Cobbler daemon...

CVE-2011-1551

SUSE openSUSE Factory assigns ownership of the /var/log/cobbler/ directory tree to the web-service user account, which might allow local users to gain privileges by leveraging access to this account during root filesystem operations by the Cobbler daemon...

CVE-2011-1551: Undefined Security Weakness

SUSE openSUSE Factory assigns ownership of the /var/log/cobbler/ directory tree to the web-service user account, which might allow local users to gain privileges by leveraging access to this account during root filesystem operations by the Cobbler daemon...

PT-2011-3211

Name of the Vulnerable Software and Affected Versions openSUSE Factory affected versions not specified Description The issue allows local users to potentially gain privileges by exploiting access to the web-service user account during root filesystem operations by the Cobbler daemon. This is due ...

CVE-2011-0441

The Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete arbitrary files via a symlink attack on a directory under /var/lib/php5/...

CVE-2011-0441

The Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete arbitrary files via a symlink attack on a directory under /var/lib/php5/...

CVE-2011-0441

CVE-2011-0441 is a local vulnerability in PHP 5.x packages (notably the Debian/Ubuntu php5 package) where the /etc/cron.d/php5 cron job can be abused by a local user to delete arbitrary files via a symlink attack on a directory under /var/lib/php5. The Debian advisory DSA 2195-1 and Ubuntu USN-13...

PT-2011-2344

Name of the Vulnerable Software and Affected Versions PHP version 5.3.5 Description The issue allows local users to delete arbitrary files via a symlink attack on a directory under /var/lib/php5/. This is related to the Debian GNU/Linux /etc/cron.d/php5 cron job. Recommendations For PHP version...

PT-2011-1040

Name of the Vulnerable Software and Affected Versions GNOME Display Manager gdm versions 2.x through 2.32.0 gdm-user-switch-applet version 2.30.4 gdm-plugin-fingerprint version 2.30.4 gdm version 2.30.4 gdm-libs version 2.30.4 gdm-plugin-smartcard version 2.30.4 gdm-debuginfo version 2.30.4...

CVE-2011-0022

The setup scripts in 389 Directory Server 1.2.x aka Red Hat Directory Server 8.2.x, when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service daemon outage or arbitrary process termination by...

PT-2011-2020

Name of the Vulnerable Software and Affected Versions 389 Directory Server versions 1.2.x Description The issue allows local users to cause a denial of service, potentially leading to daemon outage or arbitrary process termination, by replacing PID files in the /var/run/dirsrv directory. This is...

Server: insecure pid file directory permissions

The setup scripts in 389 Directory Server 1.2.x aka Red Hat Directory Server 8.2.x, when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service daemon outage or arbitrary process termination by...

iOS SideBooks 1.0 - Directory Traversal

Exploit Title: SideBooks v1.0 for iPhone / iPod touch, Directory Traversal Date: 02/22/2011 Author: R3d@l3rt, Sp@2K, Sunlight, Hackkey Software Link: http://itunes.apple.com/kr/app/sidebooks/id409777225?mt=8 Version: 1.0 Tested on: iPhone, iPod 3GS with 4.2.1 firmware There is directory traversal...

php: information leak vulnerability in var_export()

The varexport function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certain fatal errors occur, even if displayerrors is off, which allows remote attackers to obtain sensitive information by causing the application to exceed limits for memory, execution...