pombredanne / cve-stuff Goto Github PK

Just a place where i can backup all the debdiffs/patches that i create, just a bit of organization

- CVE-2011-3618, atop, vulnerable to symlink attack via insecure /tmp directory or file
  LP #820497, https://bugs.launchpad.net/ubuntu/+source/atop/+bug/820497
  http://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-3618.html

- CVE-2010-3387, vdrleaktest in Video Disk Recorder (VDR) 1.6.0 places a zero-length directory name in the LD_LIBRARY_PATH
  LP #930700, https://bugs.launchpad.net/ubuntu/+source/vdr/+bug/930700
  http://people.canonical.com/~ubuntu-security/cve/2010/CVE-2010-3387.html

- CVE-2010-4000, gnome-shell in GNOME Shell 2.31.5 places a zero-length directory name in the LD_LIBRARY_PATH
  LP #930854, https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/930854
  http://people.canonical.com/~ubuntu-security/cve/2010/CVE-2010-4000.html

- CVE-2011-0996, dhcpcd before 5.2.12 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname
  LP #931036, https://bugs.launchpad.net/ubuntu/+source/dhcpcd/+bug/931036
  http://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-0996.html

- CVE-2011-2921, ktsuss fails to change the effective UID back to the real UID
  LP #932107, https://bugs.launchpad.net/ubuntu/+source/ktsuss/+bug/932107
  http://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-2921.html

- CVE-2011-2922, GTK interface runs as root and allows arbitrary code execution via the GTK_MODULES environmental variable.
  LP #932593, https://bugs.launchpad.net/ubuntu/+source/ktsuss/+bug/932593
  http://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-2922.html
  http://www.ethereal.com/lists/ethereal-dev/200101/msg00013.html

- CVE-2011-4612, Newline injection in error.log in icecast2
  LP #894782, https://bugs.launchpad.net/ubuntu/+source/icecast2/+bug/894782
  http://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-4612.html

[ONGOING]
- CVE-2011-0523 ,gypsy opens arbitrary files, has unchecked buffer overflows
  LP #690323, https://bugs.launchpad.net/ubuntu/+source/gypsy/+bug/690323
  http://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-0523.html