Lucene search
SuseSUSE-SA:2006:073HistoryDec 01, 2006 - 5:34 p.m.
local privilege escalation in mono-core
2006-12-0117:34:31
lists.opensuse.org
33
EPSS
0.152
Percentile
95.9%
Sebastian Krahmer of SUSE Security found that the Mono System.Xml.Serialization class contained a /tmp race which potentially allows local attackers to execute code as the user using the Serialization method.
Solution
There is no known workaround, please install the update packages.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Novell Open Enterprise Server (OES) | any | i586 | mono-core | < 1.1.7.7-0.11 | mono-core-1.1.7.7-0.11.i586.rpm |
| openSUSE | 10.0 | i586 | mono-data-postgresql | < 1.1.8.3-6.3 | mono-data-postgresql-1.1.8.3-6.3.i586.rpm |
| openSUSE | 9.3 | x86_64 | mono-data-postgresql | < 1.1.4-15.2 | mono-data-postgresql-1.1.4-15.2.x86_64.rpm |
| SUSE Linux Enterprise SDK | 10 | x86_64 | mono-web | < 1.1.13.8-2.10 | mono-web-1.1.13.8-2.10.x86_64.rpm |
| openSUSE | 10.0 | i586 | mono-devel | < 1.1.8.3-6.3 | mono-devel-1.1.8.3-6.3.i586.rpm |
| SUSE Linux Enterprise SDK | 10 | s390x | mono-nunit | < 1.1.13.8-2.10 | mono-nunit-1.1.13.8-2.10.s390x.rpm |
| openSUSE | 10.0 | ppc | mono-data-postgresql | < 1.1.8.3-6.3 | mono-data-postgresql-1.1.8.3-6.3.ppc.rpm |
| openSUSE | 10.1 | i586 | mono-winforms | < 1.1.13.8-2.10 | mono-winforms-1.1.13.8-2.10.i586.rpm |
| openSUSE | 10.1 | i586 | mono-web | < 1.1.13.8-2.10 | mono-web-1.1.13.8-2.10.i586.rpm |
| SUSE Linux Enterprise Server | 10 | x86_64 | mono-nunit | < 1.1.13.8-2.10 | mono-nunit-1.1.13.8-2.10.x86_64.rpm |
Related
ubuntu
ubuntu
ffmpeg, xine-lib vulnerabilities
2006-10-05 00:00:00
Dovecot vulnerability
2006-11-28 00:00:00
Mono vulnerability
2006-10-05 00:00:00
openvas
openvas
Debian Security Advisory DSA 1215-1 (xine-lib)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-1215)
2008-01-17 00:00:00
Gentoo Security Advisory GLSA 200609-09 (ffmpeg)
2008-09-24 00:00:00
nessus
nessus
openSUSE 10 Security Update : xine-lib (xine-lib-2308)
2007-10-17 00:00:00
SuSE 10 Security Update : xine-lib (ZYPP Patch Number 2307)
2007-12-13 00:00:00
Debian DSA-1215-1 : xine-lib - several vulnerabilities
2006-11-22 00:00:00
osv
osv
xine-lib
2006-11-20 00:00:00
debian
debian
gentoo
gentoo
FFmpeg: Buffer overflows
2006-09-13 00:00:00
KDE kfile JPEG info plugin: Denial of service
2007-01-12 00:00:00
Mono: Insecure temporary file creation
2006-11-28 00:00:00
debiancve
debiancve
cve
cve
cvelist
cvelist
ubuntucve
ubuntucve
fedora
fedora
[SECURITY] Fedora Core 5 Update: dovecot-1.0-0.beta8.3.fc5
2006-12-27 06:03:09
[SECURITY] Fedora Core 5 Update: dovecot-1.0-0.beta8.4.fc5
2007-05-08 02:21:14
[SECURITY] Fedora Core 5 Update: mono-1.1.13.7-3.fc5.1
2007-01-12 19:43:55
nvd
nvd
redhatcve
redhatcve
CVE-2006-6297
2015-10-30 09:41:56
securityvulns
securityvulns
[ MDKSA-2006:227 ] - Updated kdegraphics packages fix EXIF vulnerability
2006-12-14 00:00:00
freebsd
freebsd
mono -- "System.CodeDom.Compiler" Insecure Temporary Creation
2006-10-04 00:00:00