Cfengine Insecure Temporary File Creation

Posted on October 3, 2005 in | Comments (0)

Cfengine Insecure Temporary File Creation Vulnerabilities
Javier Fernandez-Sanguino Pena has reported some vulnerabilities in Cfengine, which can be exploited by malicious, local users to perform certain actions on a vulnerable system with escalated privileges.

storeBackup Insecure Temporary File Creation and Insecure Backup Root Permissions
A vulnerability and a security issue have been reported in storeBackup, which potentially can be exploited by malicious, local users to gain access to sensitive information or perform certain actions on a vulnerable system with escalated privileges.

Debian update for mozilla-firefox
Debian has issued an update for mozilla-firefox. This fixes some vulnerabilities, which can be exploited by malicious people to conduct spoofing attacks, manipulate certain data, bypass certain security restrictions, and compromise a user's system.