CVE-2010-2058

CVE-2010-2058 affects Prewikka 0.9.14 where setup.py writes prewikka.conf with world-readable permissions, allowing a local attacker to read the SQL database password. Multiple connected advisories (Gentoo GLSA 201101-07, OpenVAS entries) confirm the issue and identify the affected package as net...

CVE-2010-2058

setup.py in Prewikka 0.9.14 installs prewikka.conf with world-readable permissions, which allows local users to obtain the SQL database password...

CVE-2010-2023

transports/appendfile.c in Exim before 4.72, when a world-writable sticky-bit mail directory is used, does not verify the stnlink field of mailbox files, which allows local users to cause a denial of service or possibly gain privileges by creating a hard link to another user's file...

GLSA-201006-10 : multipath-tools: World-writeable socket

The remote host is affected by the vulnerability described in GLSA-201006-10 multipath-tools: World-writeable socket multipath-tools uses world-writable permissions for the socket file /var/run/multipathd.sock. Impact : Local users could send arbitrary commands to the multipath daemon, causing...

rhn-client-tools: authorized information disclosure

yum-rhn-plugin in Red Hat Network Client Tools aka rhn-client-tools on Red Hat Enterprise Linux RHEL 5 and Fedora uses world-readable permissions for the /var/spool/up2date/loginAuth.pkl file, which allows local users to access the Red Hat Network profile, and possibly prevent future security...

Mathematica Arbitrary File Overwriting Vulnerability (Linux)

The host is running Mathematica and is prone to arbitrary file overwriting vulnerability. OpenVAS Vulnerability Test $Id: secpodmathematicasymlinkvulnlin.nasl 5394 2017-02-22 09:22:42Z teissa $ Mathematica Arbitrary File Overwriting Vulnerability Linux Authors: Sooraj KS Copyright: Copyright c 20...

multipath-tools: World-writeable socket

Background multipath-tools are used to drive the Device Mapper multipathing driver. Description multipath-tools uses world-writable permissions for the socket file /var/run/multipathd.sock. Impact Local users could send arbitrary commands to the multipath daemon, causing cluster failures and data...

Groone's Simple Contact Form (abspath) Remote File Inclusion Vulnerability

===================================================================== Groone's Simple Contact Form abspath RFI Vulnerability ===================================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/...

Groone's Simple Contact Form (abspath) RFI Vulnerability

Exploit for php platform in category web applications ======================================================== Groone's Simple Contact Form abspath RFI Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0...

Fedora Update for quake3 FEDORA-2010-8558

Check for the Version of quake3 OpenVAS Vulnerability Test Fedora Update for quake3 FEDORA-2010-8558 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[SECURITY] Fedora 13 Update: quake3-1.36-7.svn1783.fc13

This package contains the enhanced opensource ioquake3 version of the Quake 3 Arena engine. This engine can be used to play a number of games based on th is engine, below is an incomplete list: OpenArena, Free, Open Source Quake3 like game, recommended! packagename: openarena Urban Terror, gratis...

[SECURITY] Fedora 12 Update: quake3-1.36-7.svn1783.fc12

This package contains the enhanced opensource ioquake3 version of the Quake 3 Arena engine. This engine can be used to play a number of games based on th is engine, below is an incomplete list: OpenArena, Free, Open Source Quake3 like game, recommended! packagename: openarena Urban Terror, gratis...

CentOS Update for kdebase CESA-2010:0348 centos4 i386

Check for the Version of kdebase OpenVAS Vulnerability Test CentOS Update for kdebase CESA-2010:0348 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for kdebase MDVSA-2010:074 (kdebase)

Check for the Version of kdebase OpenVAS Vulnerability Test Mandriva Update for kdebase MDVSA-2010:074 kdebase Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

openSUSE Security Update : kde4-kdm (openSUSE-SU-2010:0112-1)

The KDE KDM contains a local race condition which allows to make arbitrary files world-writable. CVE-2010-0436 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : kde4-kdm (kde4-kdm-2134)

The KDE KDM contains a local race condition which allows to make arbitrary files world-writable. CVE-2010-0436 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

10 Lessons From The Pwn2Own Hacker Contest

The recent CanSecWest Pwn2Own contest saw successful hacking attacks against Microsoft Internet Explorer 8, Mozilla Firefox and Apple’s Safari and iPhone products. Now that the dust has settled and the vendors are starting to patch the vulnerabilities, Threatpost editor Ryan Naraine takes a look ...

Joomla World Rates Local File Inclusion

================================================================================================================ o Joomla Component World Rates Local File Inclusion Vulnerability Software : comworldrates Vendor : http://dev.pucit.edu.pk/ Download : http://dev.pucit.edu.pk/files/worldrates.zip...

RedHat Update for automake RHSA-2010:0321-04

Check for the Version of automake OpenVAS Vulnerability Test RedHat Update for automake RHSA-2010:0321-04 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Malware PDF Spreads Via World Cup Emails

Researchers are reporting on an ongoing targeted malware campaign using a FIFA World Cup 2010 theme, in an attempt to trick end users into executing a malicious PDF file, exploiting a recently patched flaw in Adobe Reader. Read the full article. ZDNet...