Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
91

Gentoo: 200309-05 Critical: Mindi Local Exploit Insecure File Creation

Mindi creates files in /tmp which could allow local user to overwritearbitrary files.. - - --------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200309-05 - - --------------------------------------------------------------------- PACKAGE : mindi SUMMARY : insecure file creations DATE : 2003-09-02 10:37 UTC EXPLOIT : local VERSIONS AFFECTED : =mindi-0.86 CVE : CAN-2003-0617 - - --------------------------------------------------------------------- Mindi creates files in /tmp which could allow local user to overwrite arbitrary files. SOLUTION It is recommended that all Gentoo Linux users who are running sys-apps/mindi upgrade to mindi-0.86 as follows: emerge sync emerge mindi emerge clean - - --------------------------------------------------------------------- This email address is being protected from spambots. You need JavaScript enabled to view it. - GnuPG key is available at - - --------------------------------------------------------------------- . Gentoo Linux Security Advisory concerning mindi: possible local exploit due to insecure file creation in /tmp folder. Immediate update recommended.. Mindi Exploit,Gentoo Advisory,Secure File Creation,Local Exploit. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Sep 02, 2003 Critical Gentoo
87

Debian: DSA 362-1 Critical: MindI Insecure Temp Files Exploit

mindi, a program for creating boot/root disks, does not takeappropriate security precautions when creating temporary files.. - -------------------------------------------------------------------------- Debian Security Advisory DSA 362-1 This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Matt Zimmerman August 2nd, 2003 Debian -- Debian security FAQ - -------------------------------------------------------------------------- Package : mindi Vulnerability : insecure temporary file Problem-Type : local Debian-specific: no CVE Id : CAN-2003-0617 mindi, a program for creating boot/root disks, does not take appropriate security precautions when creating temporary files. This bug could potentially be exploited to overwrite arbitrary files with the privileges of the user running mindi. For the stable distribution (woody) this problem has been fixed in version 0.58.r5-1woody1. For the unstable distribution (sid) this problem will be fixed soon. Refer to Debian bug #203825. We recommend that you update your mindi package. Upgrade Instructions - -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody - -------------------------------- Source archives: Size/MD5 checksum: 572 0e37c6cec0b2d159b9cbc4f034500aaf Size/MD5 checksum: 7002 4df22a6fad88ee1742594a814af88468 Size/MD5 checksum: 3579919 c835aafbb37ad2e78a74fe77e1f24d4b Intel IA-32 architecture: Size/MD5 checksum: 3572896 6d21a43c420d9b15e108f5a8e11f3522 These files will probably bemoved into the stable distribution on its next revision. - --------------------------------------------------------------------------------- For apt-get: deb Debian -- Security Information stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . To improve Mindi software security, we must fix the insecure temporary file vulnerability noted in Debian Security Notice DSA 362-1 by adopting secure file handling practices. insecure file, Debian advisory, mindi security issue. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Aug 02, 2003 Critical Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200