GLSA 200506-13: webapp-config: Insecure temporary file handling

Gentoo 2529 Published by Philipp Esselbach 0

A webapp-config security update has been released for Gentoo Linux

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200506-13
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Normal
Title: webapp-config: Insecure temporary file handling
Date: June 17, 2005
Bugs: #91785, #88831
ID: 200506-13

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
=======

The webapp-config utility insecurely creates temporary files in a world writable directory, potentially allowing the execution of arbitrary commands.

GLSA 200506-12: MediaWiki: Cross-site scripting vulnerability

Gentoo 2529 Published by Philipp Esselbach 0

A MediaWiki security update is available for Gentoo Linux

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200506-12
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Low
Title: MediaWiki: Cross-site scripting vulnerability
Date: June 13, 2005
Bugs: #95255
ID: 200506-12

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
=======

MediaWiki is vulnerable to a cross-site scripting attack that could allow arbitrary scripting code execution.

UPDATE: GLSA 200505-06: TCPDump

Gentoo 2529 Published by Philipp Esselbach 0

Another TCPDump security update is available

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory [UPDATE] GLSA 200505-06:02
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Normal
Title: TCPDump: Decoding routines Denial of Service vulnerability
Date: May 09, 2005
Updated: June 12, 2005
Bugs: #90541, #95349
ID: 200505-06:02

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Update
=====

While working on the tcpdump issues solved in the original version of this GLSA, Simon L. Nielsen from FreeBSD Security Team discovered a similar infinite loop DoS vulnerability in the BGP handling code (CAN-2005-1267). New packages have been released to address this new issue.

The updated sections appear below.

GLSA 200506-11: Gaim: Denial of Service vulnerabilities

Gentoo 2529 Published by Philipp Esselbach 0

A Gaim security update is available for Gentoo Linux

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200506-11
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Normal
Title: Gaim: Denial of Service vulnerabilities
Date: June 12, 2005
Bugs: #95347
ID: 200506-11

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
=======

Gaim contains two remote Denial of Service vulnerabilities.

GLSA 200506-07: Ettercap: Format string vulnerability

Gentoo 2529 Published by Philipp Esselbach 0

An Ettercap security update has been released for Gentoo Linux

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200506-07
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: High
Title: Ettercap: Format string vulnerability
Date: June 11, 2005
Bugs: #94474
ID: 200506-07

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
=======

A format string vulnerability in Ettercap could allow a remote attacker to execute arbitrary code.

GLSA 200506-10: LutelWall: Insecure temporary file creation

Gentoo 2529 Published by Philipp Esselbach 0

A LutelWall security update is available for Gentoo Linux

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200506-10
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Normal
Title: LutelWall: Insecure temporary file creation
Date: June 11, 2005
Bugs: #95378
ID: 200506-10

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
=======

LutelWall is vulnerable to symlink attacks, potentially allowing a local user to overwrite arbitrary files.

GLSA 200506-09: gedit: Format string vulnerability

Gentoo 2529 Published by Philipp Esselbach 0

A gedit security update has been released for Gentoo Linux

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200506-09
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Normal
Title: gedit: Format string vulnerability
Date: June 11, 2005
Bugs: #93352
ID: 200506-09

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
=======

gedit suffers from a format string vulnerability that could allow arbitrary code execution.

GLSA 200506-08: GNU shtool, ocaml-mysql: Insecure temporary

Gentoo 2529 Published by Philipp Esselbach 0

A GNU shtool, ocaml-mysql security update has been released for Gentoo Linux

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200506-08
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Normal
Title: GNU shtool, ocaml-mysql: Insecure temporary file creation
Date: June 11, 2005
Bugs: #93782, #93784
ID: 200506-08

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
=======

GNU shtool and ocaml-mysql are vulnerable to symlink attacks, potentially allowing a local user to overwrite arbitrary files.

Background
=========

GNU shtool is a compilation of small shell scripts into a single shell tool. The ocaml-mysql package includes the GNU shtool code.

Affected packages
================

-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 dev-util/shtool < 2.0.1-r2 >= 2.0.1-r2
2 dev-ml/ocaml-mysql < 1.0.3-r1 >= 1.0.3-r1
-------------------------------------------------------------------
2 affected packages on all of their supported architectures.
-------------------------------------------------------------------

Description
==========

Eric Romang has discovered that GNU shtool insecurely creates temporary files with predictable filenames (CAN-2005-1751). On closer inspection, Gentoo Security discovered that the shtool temporary file, once created, was being reused insecurely (CAN-2005-1759).

Impact
=====

A local attacker could create symbolic links in the temporary files directory, pointing to a valid file somewhere on the filesystem. When a GNU shtool script is executed, this would result in the file being overwritten with the rights of the user running the script, which could
be the root user.

Workaround
=========

There is no known workaround at this time.

Resolution
=========

All GNU shtool users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-util/shtool-2.0.1-r2"

All ocaml-mysql users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-ml/ocaml-mysql-1.0.3-r1"

References
=========

[ 1 ] CAN-2005-1751
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1751
[ 2 ] CAN-2005-1759
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1759

Availability
===========

This GLSA and any updates to it are available for viewing at the Gentoo Security Website:

http://security.gentoo.org/glsa/glsa-200506-08.xml

Concerns?
========

Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at http://bugs.gentoo.org.

License
======

Copyright 2005 Gentoo Foundation, Inc; referenced text belongs to its owner(s).

The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.

http://creativecommons.org/licenses/by-sa/2.0

GLSA 200506-06: libextractor: Multiple overflow vulnerability

Gentoo 2529 Published by Philipp Esselbach 0

A libextractor security update has been released for Gentoo Linux

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200506-06
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Normal
Title: libextractor: Multiple overflow vulnerabilities
Date: June 09, 2005
Bugs: #79704
ID: 200506-06

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
=======

libextractor is affected by several overflow vulnerabilities in the PDF, Real and PNG extractors, making it vulnerable to execution of arbitrary code.

GLSA 200506-05: SilverCity: Insecure file permissions

Gentoo 2529 Published by Philipp Esselbach 0

A SilverCity security update has been released for Gentoo Linux

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200506-05
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Normal
Title: SilverCity: Insecure file permissions
Date: June 08, 2005
Bugs: #93558
ID: 200506-05

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
=======

Executable files with insecure permissions can be modified causing an unsuspecting user to run arbitrary code.

GLSA 200506-03: Dzip: Directory traversal vulnerability

Gentoo 2529 Published by Philipp Esselbach 0

A Dzip security update is available for Gentoo Linux

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200506-03
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Normal
Title: Dzip: Directory traversal vulnerability
Date: June 06, 2005
Bugs: #93079
ID: 200506-03

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
=======

Dzip is vulnerable to a directory traversal attack.

Background
=========

Dzip is a compressor and uncompressor especially made for demo recordings of id's Quake.

GLSA 200506-02: Mailutils: SQL Injection

Gentoo 2529 Published by Philipp Esselbach 0

A Mailutils security update is available for Gentoo Linux

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200506-02
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Normal
Title: Mailutils: SQL Injection
Date: June 06, 2005
Bugs: #94824
ID: 200506-02

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
=======

GNU Mailutils is vulnerable to SQL command injection attacks.

Background
=========

GNU Mailutils is a collection of mail-related utilities.

GLSA 200506-04: Wordpress: Multiple vulnerabilities

Gentoo 2529 Published by Philipp Esselbach 0

A Wordpress security update is available for Gentoo Linux

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200506-04
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Normal
Title: Wordpress: Multiple vulnerabilities
Date: June 06, 2005
Bugs: #88926, #94512
ID: 200506-04

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
=======

Wordpress contains SQL injection and XSS vulnerabilities.

Background
=========

WordPress is a PHP and MySQL based content management and publishing system.

GLSA 200506-01: Binutils, elfutils: Buffer overflow

Gentoo 2529 Published by Philipp Esselbach 0

Binutils, elfutils security update are available for Gentoo Linux

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200506-01
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Normal
Title: Binutils, elfutils: Buffer overflow
Date: June 01, 2005
Bugs: #91398, #91817
ID: 200506-01

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
=======

Various utilities from the GNU Binutils and elfutils packages are vulnerable to a heap based buffer overflow, potentially resulting in the execution of arbitrary code.

GLSA 200505-20: Mailutils: Multiple vulnerabilities in imap

Gentoo 2529 Published by Philipp Esselbach 0

A Mailutils security update is available for Gentoo Linux

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200505-20
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: High
Title: Mailutils: Multiple vulnerabilities in imap4d and mail
Date: May 27, 2005
Bugs: #94053
ID: 200505-20

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
=======

The imap4d server and the mail utility from GNU Mailutils contain multiple vulnerabilities, potentially allowing a remote attacker to execute arbitrary code with root privileges.

GLSA 200505-19: gxine: Format string vulnerability

Gentoo 2529 Published by Philipp Esselbach 0

A gxine security update is available for Gentoo Linux

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200505-19
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Normal
Title: gxine: Format string vulnerability
Date: May 26, 2005
Bugs: #93532
ID: 200505-19

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
=======

A format string vulnerability in gxine could allow a remote attacker to execute arbitrary code.

GLSA 200505-18: Net-SNMP: fixproc insecure temporary file creation

Gentoo 2529 Published by Philipp Esselbach 0

A Net-SNMP security update is available for Gentoo Linux

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200505-18
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Normal
Title: Net-SNMP: fixproc insecure temporary file creation
Date: May 23, 2005
Bugs: #91792
ID: 200505-18

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
=======

Net-SNMP creates temporary files in an insecure manner, possibly allowing the execution of arbitrary code.

GLSA 200505-17: Qpopper: Multiple Vulnerabilities

Gentoo 2529 Published by Philipp Esselbach 0

A Qpopper update has been released for Gentoo Linux

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200505-17
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Normal
Title: Qpopper: Multiple Vulnerabilities
Date: May 23, 2005
Bugs: #90622
ID: 200505-17

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
=======

Qpopper contains two vulnerabilities allowing an attacker to overwrite arbitrary files and create files with insecure permissions.

GLSA 200505-16: ImageMagick, GraphicsMagick: Denial of Service

Gentoo 2529 Published by Philipp Esselbach 0

ImageMagick, GraphicsMagick security update are available for Gentoo Linux

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200505-16
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Normal
Title: ImageMagick, GraphicsMagick: Denial of Service
vulnerability
Date: May 21, 2005
Bugs: #90423, #90595
ID: 200505-16

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
=======

ImageMagick and GraphicsMagick utilities can be abused to perform a Denial of Service attack.

GLSA 200505-15: gdb: Multiple vulnerabilities

Gentoo 2529 Published by Philipp Esselbach 0

A gdb security update is available for Gentoo Linux

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200505-15
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Normal
Title: gdb: Multiple vulnerabilities
Date: May 20, 2005
Bugs: #88398, #91398, #91654
ID: 200505-15

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
=======

Multiple vulnerabilities have been discovered in the GNU debugger, potentially allowing the execution of arbitrary code.

Previous Page

Next Page

Windows

Linux

macOS

Community

  • SeveG
    need some help here... situationPC= Packard BellOS= win1 ...
  • dhamu
    Hello Phil, I have a Linux Tutorial website that curre ...
  • StephanX
    Hi friends, i am new in the Linux universe but i try to ...