Mathematica Arbitrary File Overwriting Vulnerability (Linux)

The host is running Mathematica and is prone to arbitrary file overwriting vulnerability. OpenVAS Vulnerability Test $Id: secpodmathematicasymlinkvulnlin.nasl 5394 2017-02-22 09:22:42Z teissa $ Mathematica Arbitrary File Overwriting Vulnerability Linux Authors: Sooraj KS Copyright: Copyright c 20...

multipath-tools: World-writeable socket

Background multipath-tools are used to drive the Device Mapper multipathing driver. Description multipath-tools uses world-writable permissions for the socket file /var/run/multipathd.sock. Impact Local users could send arbitrary commands to the multipath daemon, causing cluster failures and data...

Groone's Simple Contact Form (abspath) Remote File Inclusion Vulnerability

===================================================================== Groone's Simple Contact Form abspath RFI Vulnerability ===================================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/...

Groone's Simple Contact Form (abspath) RFI Vulnerability

Exploit for php platform in category web applications ======================================================== Groone's Simple Contact Form abspath RFI Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0...

Fedora Update for quake3 FEDORA-2010-8558

Check for the Version of quake3 OpenVAS Vulnerability Test Fedora Update for quake3 FEDORA-2010-8558 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[SECURITY] Fedora 13 Update: quake3-1.36-7.svn1783.fc13

This package contains the enhanced opensource ioquake3 version of the Quake 3 Arena engine. This engine can be used to play a number of games based on th is engine, below is an incomplete list: OpenArena, Free, Open Source Quake3 like game, recommended! packagename: openarena Urban Terror, gratis...

[SECURITY] Fedora 12 Update: quake3-1.36-7.svn1783.fc12

This package contains the enhanced opensource ioquake3 version of the Quake 3 Arena engine. This engine can be used to play a number of games based on th is engine, below is an incomplete list: OpenArena, Free, Open Source Quake3 like game, recommended! packagename: openarena Urban Terror, gratis...

CentOS Update for kdebase CESA-2010:0348 centos4 i386

Check for the Version of kdebase OpenVAS Vulnerability Test CentOS Update for kdebase CESA-2010:0348 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for kdebase MDVSA-2010:074 (kdebase)

Check for the Version of kdebase OpenVAS Vulnerability Test Mandriva Update for kdebase MDVSA-2010:074 kdebase Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

openSUSE Security Update : kde4-kdm (kde4-kdm-2134)

The KDE KDM contains a local race condition which allows to make arbitrary files world-writable. CVE-2010-0436 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : kde4-kdm (openSUSE-SU-2010:0112-1)

The KDE KDM contains a local race condition which allows to make arbitrary files world-writable. CVE-2010-0436 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

10 Lessons From The Pwn2Own Hacker Contest

The recent CanSecWest Pwn2Own contest saw successful hacking attacks against Microsoft Internet Explorer 8, Mozilla Firefox and Apple’s Safari and iPhone products. Now that the dust has settled and the vendors are starting to patch the vulnerabilities, Threatpost editor Ryan Naraine takes a look ...

Joomla World Rates Local File Inclusion

================================================================================================================ o Joomla Component World Rates Local File Inclusion Vulnerability Software : comworldrates Vendor : http://dev.pucit.edu.pk/ Download : http://dev.pucit.edu.pk/files/worldrates.zip...

RedHat Update for automake RHSA-2010:0321-04

Check for the Version of automake OpenVAS Vulnerability Test RedHat Update for automake RHSA-2010:0321-04 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Malware PDF Spreads Via World Cup Emails

Researchers are reporting on an ongoing targeted malware campaign using a FIFA World Cup 2010 theme, in an attempt to trick end users into executing a malicious PDF file, exploiting a recently patched flaw in Adobe Reader. Read the full article. ZDNet...

ZeuS Botnet Module Gives Total PC Control

New capabilities are strengthening the ZeuS botnet, which criminals use to steal financial credentials and execute unauthorized transactions in online banking, automated clearing house ACH networks and payroll systems. The latest version of this cybercrime toolkit offers a $10,000 module that can...

openSUSE Security Update : kernel (kernel-2050)

The openSUSE 11.1 Kernel was updated to 2.6.27.42 fixing various bugs and security issues. CVE-2010-0622: The wakefutexpi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly handle certain unlock operations for a Priority Inheritance PI futex, which allows local use...

MiTM Attack Stealing Virtual Gold on WoW

Crooks have developed a man-in-the-middle-attack designed to circumvent authentication kit used by dedicated World of Warcraft gamers. The ruse relies on tricking gamers into installing Trojans disguised as gaming ad-ons. Once applied the malware allows hackers to capture and relay authentication...

Killer Whale Trainer Death Exploited by Malware

Supposed footage of Wednesday’s fatal Sea World killer whale attack in Florida actually points at sites distributing scareware. Read the full article. The Register...

SuSE9 Security Update : the Linux kernel (YOU Patch Number 12578)

This update fixes various security issues and some bugs in the SUSE Linux Enterprise 9 kernel. - The collectrxframe function in drivers/isdn/hisax/hfcusb.c in the Linux kernel allows attackers to have an unspecified impact via a crafted HDLC packet that arrives over ISDN and triggers a buffer...