SUSE-SA:2005:062: permissions

The remote host is missing the patch for the advisory SUSE-SA:2005:062 permissions. SUSE LINUX ships with three pre defined sets of permissions, 'easy', 'secure' and 'paranoid'. The chkstat program contained in the permissions package is used to set those permissions to the chosen level. Level...

CVE-2001-1119

CVE-2001-1119 affects xmcd's cda (on SuSE Linux) in versions 3.0.2 and 2.6, where local users can overwrite arbitrary files via a symlink attack on insecure temporary files (in /tmp). The root cause is a symbolic link redirection vulnerability tied to setuid-enabled cda. Impact; local privilege e...

CVE-2001-1119

cda in xmcd 3.0.2 and 2.6 in SuSE Linux allows local users to overwrite arbitrary files via a symlink attack...

XMCD vulnerable to arbitrary file overwriting via symlink redirection of temporary file

Overview xmcd is an x11/motif CD playing utility, in the public domain. cda, the command line interface to xmcd, executes with system administrator privileges. It is vulnerable to a symbolic link attack that may allow a local user to obtain administrator privileges. Description cda, the command...

CVE-2001-1119

cda in xmcd 3.0.2 and 2.6 in SuSE Linux allows local users to overwrite arbitrary files via a symlink attack...

[SECURITY] New Debian xmcd packages released

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz November 21, 2000 -...

[SECURITY] New Debian xmcd packages released

Package: xmcd Vulnerability: untrustworthy privileged binaries Debian-specific: yes Vulnerable: yes The Debian GNU/Linux xmcd package has historically installed two setuid helpers for accessing cddb databases and SCSI cdrom drives. More recently, the package offered the administrator the chance t...

[SECURITY] New Debian xmcd packages released

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz November 21, 2000 - ---------------------------------------------------------------------------- Package: xmcd Vulnerability:...

CVE-1999-0319

Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting...

CVE-1999-0319

CVE-1999-0319 describes a buffer overflow in xmcd 2.1 that allows local users to gain access via a user resource setting. Affected component: xmcd 2.1; root cause: buffer overflow in handling the user resource setting. Impact: local privilege elevation (confidentiality, integrity, and availabilit...

CVE-1999-0318

The CVE-1999-0318 issue affects the xmcd 2.0p12 release and is caused by a buffer overflow triggered via an environment variable, allowing local users to gain access. The PT-1997-1131 entry corroborates local privilege escalation through an environmental variable; it does not provide a product pa...

CVE-1999-0318

Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable...

CVE-1999-0318

Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable...

PT-1997-1131 · Xmcd · Xmcd

Name of the Vulnerable Software and Affected Versions: xmcd version 2.0p12 Description: The issue allows local users to gain access through an environmental variable due to a buffer overflow. Recommendations: For xmcd version 2.0p12, consider restricting access to environmental variables to...

CVE-1999-0319

Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting...

PT-1996-1042 · Xmcd · Xmcd

Name of the Vulnerable Software and Affected Versions: xmcd version 2.1 Description: A buffer overflow issue exists, allowing local users to gain access through a user resource setting. Recommendations: For version 2.1, at the moment, there is no information about a newer version that contains a...