Thomas Biege

An issue was discovered in open-vm-tools where local users can gain privileges via a symlink attack on /tmp files if `vmware-user-suid-wrapper` is setuid root and the `ChmodChownDirectory` function is enabled.

The issue is related to the transmission of credentials over clear-text when accessing RHN Satellite.

The issue concerns the encrypt/decrypt functions in Ruby on Rails, which are susceptible to padding oracle attacks.

The issue concerns the creation of files with insecure permissions by the install-chef-suse.sh script, allowing local users to access confidential data.

A vulnerability in SUSE Studio Onsite allows authenticated users to execute arbitrary SQL statements via SQL injection. This issue affects the listing of available software.

The issue allows attackers to execute arbitrary commands via shell metacharacters in the path of an overlay file, related to `chown`.

The issue allows attackers to execute arbitrary commands via shell metacharacters in an image name.

The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the `url bounce` parameter. This can be exploited by including a malicious URL in the `url bounce` parameter, potentially leading to phishing attacks.

The issue allows local users to overwrite arbitrary files via a symlink attack on a /var/tmp/##### temporary file. This is due to a vulnerability in the pcmd and pmlogger init scripts.

The issue is related to insecure handling of temporary files and predictable file names in the Crowbar Ohai plugin, allowing local users to execute arbitrary shell commands.

The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the `next` parameter to the "/auth/login/" API endpoint.

A session fixation issue allows remote attackers to hijack web sessions via the `sessionid` cookie.

A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of arbitrary users for requests that disable the current user account, add user accounts, or modify user accounts to have administrator privileges.

A session fixation issue in Red Hat Network Satellite Server allows remote attackers to hijack web sessions. The issue is related to Spacewalk, but the specific vectors are not specified.

The issue allows remote attackers to conduct cross-site request forgery (CSRF) attacks via unspecified vectors. This is due to the `unserialize` function being called on the values of the `configuration` and `v[0]` parameters in the setup script.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the `view` parameter.

The issue is related to printing illegal parameter names and values, and it has unknown impact and remote attack vectors.

A heap-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code via a crafted EMF file. This issue is similar to a previously identified problem and is related to the OpenOffice.org (OOo) software.

The issue is related to the mount.vmhgfs component of the open-vm-tools package, which incorrectly handles symbolic links before accessing a file. This can allow an attacker to access confidential data, compromise its integrity, and cause a denial of service. Local users can bypass intended access restrictions on mounting shares via a symlink attack that leverages a realpath race condition in mount.vmhgfs.

The issue is related to insecure permissions for memory used by Adobe Flash Player when running on Linux, which could allow local users to gain privileges.