9 matches found
EUVD-2012-5276
Malware in sbrugna...
CVE-2012-5355
welcome.py in xdiagnose before 2.5.2ubuntu0.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp...
CVE-2012-5355
welcome.py in xdiagnose before 2.5.2ubuntu0.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp...
CVE-2012-5355
The CVE-2012-5355 issue affects xdiagnose prior to version 2.5.2ubuntu0.1. A symlink attack on a temporary file in /tmp allows local users to overwrite arbitrary files, due to a predictable temporary file name. Impact is limited to local privilege/domains where xdiagnose runs, enabling partial in...
CVE-2012-5355
welcome.py in xdiagnose before 2.5.2ubuntu0.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp...
Ubuntu: Security Advisory (USN-1591-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu Update for - xdiagnose USN-1591-1
Ubuntu Update for Linux kernel vulnerabilities USN-1591-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN15911.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for - xdiagnose USN-1591-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net...
Ubuntu 12.04 LTS : xdiagnose update (USN-1591-1)
Alec Warner discovered that xdiagnose improperly handled temporary files in welcome.py when creating user-initiated archive files. While failsafeX does not use the vulnerable code, this update removes this functionality to protect any 3rd party applications which import the vulnerable code. In th...
USN-1591-1: xdiagnose update
Alec Warner discovered that xdiagnose improperly handled temporary files in welcome.py when creating user-initiated archive files. While failsafeX does not use the vulnerable code, this update removes this functionality to protect any 3rd party applications which import the vulnerable code. In th...