|
|
>> Fedora Security Update Fixes Tomboy Untrusted Search Path Weakness
|
Title : Fedora Security Update Fixes Tomboy Untrusted Search Path Weakness
VUPEN ID : VUPEN/ADV-2007-3843
CVE ID : CVE-2005-4790
Rated as : Low Risk 
Remotely Exploitable : No
Locally Exploitable : Yes
Release Date : 2007-11-13
|
A vulnerability has been identified in Fedora, which could be exploited by local attackers to potentially obtain elevated privileges. This issue is caused by an error in Tomboy. For additional information, see : VUPEN/ADV-2007-3816
Affected Products
Fedora 8
Solution
Upgrade the affected packages :
a209ba7ccbb55e382deab50f7459d36905daf00a tomboy-0.8.1-3.fc8.i386.rpm
995205b725085baa98a12e5ae70ef640de94af76 tomboy-debuginfo-0.8.1-3.fc8.i386.rpm
3015508632106ff79c8843f21863223db6ff00a9 tomboy-debuginfo-0.8.1-3.fc8.x86_64.rpm
9f82e387a6216d87607ec315968a04ffd4c5e600 tomboy-0.8.1-3.fc8.x86_64.rpm
90e3eed381c0ec97f71376ed4bbc8d34f4cbb3b6 tomboy-debuginfo-0.8.1-3.fc8.ppc.rpm
cc0a9db9e81fae13b325ea4b15ec0256ce34e6f9 tomboy-0.8.1-3.fc8.ppc.rpm
6d3847f7f0a3711f431e2a390a14377326e3d11d tomboy-0.8.1-3.fc8.src.rpm
References
http://www.vupen.com/english/advisories/2007/3843
https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00351.html
ChangeLog
2007-11-13 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
