exploits , vulnerabilities , articles , Openswan IPsec Livetest Insecure Temporary File Creation Vulnerability

Title	Openswan IPsec Livetest Insecure Temporary File Creation Vulnerability
Published	2008-08-24-12:00AM
Updated	2008-09-18-10:30PM
Class	Design Error
CVE
Remote	No
Local	Yes
Credit	Dmitry E. Oboukhov
Vulnerable	RedHat Fedora 9 0 RedHat Fedora 8 0 Openswan Openswan 2.4.4 Openswan Openswan 2.4.2 Openswan Openswan 2.4 Openswan Openswan 2.3.1 Openswan Openswan 2.3 Openswan Openswan 2.2 Openswan Openswan 2.1.6 Openswan Openswan 2.1.5 RedHat Fedora Core3 Openswan Openswan 2.1.4 Openswan Openswan 2.1.2 Openswan Openswan 2.1.1 Openswan Openswan 1.0.9 Openswan Openswan 1.0.8 Openswan Openswan 1.0.7 Openswan Openswan 1.0.6 Openswan Openswan 1.0.5 Openswan Openswan 1.0.4 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia64 Debian Linux 4.0 ia32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable
Code	An attacker uses readily available commands to exploit this issue.
TXT

Vulnerabilities - newest 10 RSS | More

• 2009-12-16 Horde Application Framework Administration Interface Cross-Site Scripting Vulnerability
• 2009-12-16 Mozilla Firefox and SeaMonkey MFSA 2009-65 through -71 Multiple Vulnerabilities
• 2009-12-16 Merkaartor Insecure Temporary File Creation Vulnerability
• 2009-12-15 TYPO3 Watchdog (aba_watchdog) Unspecified Information Disclosure Vulnerability
• 2009-12-15 PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability
• 2009-12-15 PostgreSQL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
• 2009-12-15 IBM DB2 prior to 9.5 Fix Pack 5 Multiple Unspecified Security Vulnerabilities
• 2009-12-15 Sun Ray Server Software Desktop Session Handling Local Security Bypass Vulnerability
• 2009-12-15 Mozilla Firefox Sage Extension RSS Feeds Cross Domain Scripting Vulnerability
• 2009-12-15 Adobe Reader and Acrobat (CVE-2009-4324) Remote Code Execution Vulnerability

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Wed, 16 Dec 2009 21:00:26 +0000