CVE-2011-0523

Vulnerability: gypsy 0.8 allows local users to read restricted files while running as root due to improper file-access restrictions. Impact: partial information disclosure on the host. Root cause: inadequate restriction of readable files in a setuid/root context (unspecified vectors). Remediation...

CVE-2011-0524

CVE-2011-0524 concerns gypsy 0.8, where multiple buffer overflows in the NMEA parser (nmea-gen.c) allow local users to crash the process via the sprintf-based vulnerability. The issue is tied to the NMEA parser’s use of sprintf, enabling denial of service when running gypsy 0.8. Connected sources...