Oval Definition:	oval:org.mitre.oval:def:6898
Revision Date: 2014-06-23 Version: 19 Title: DSA-2017 pulseaudio -- insecure temporary directory Description: Dan Rosenberg discovered that the PulseAudio sound server creates a temporary directory with a predictable name. This allows a local attacker to create a Denial of Service condition or possibly disclose sensitive information to unprivileged users. Family: unix Class: patch Status: ACCEPTED Reference(s): CVE-2009-1299 DSA-2017 Platform(s): Debian GNU/Linux 5.0 Product(s): pulseaudio Definition Synopsis Debian GNU/Linux 5.0 is installed AND Supported architectures section Installed architecture is s390 OR Installed architecture is amd64 OR Installed architecture is sparc OR Installed architecture is arm OR Installed architecture is i386 OR Installed architecture is armel OR Installed architecture is mips OR Installed architecture is ia64 OR Installed architecture is alpha OR Installed architecture is powerpc OR Installed architecture is mipsel OR Installed architecture is hppa AND Packages section libpulse-dev is earlier than 0.9.10-3+lenny2 OR pulseaudio-utils is earlier than 0.9.10-3+lenny2 OR pulseaudio-esound-compat is earlier than 0.9.10-3+lenny2 OR libpulse-mainloop-glib0-dbg is earlier than 0.9.10-3+lenny2 OR pulseaudio-dbg is earlier than 0.9.10-3+lenny2 OR pulseaudio-module-gconf-dbg is earlier than 0.9.10-3+lenny2 OR pulseaudio-esound-compat-dbg is earlier than 0.9.10-3+lenny2 OR pulseaudio-module-hal is earlier than 0.9.10-3+lenny2 OR libpulsecore5 is earlier than 0.9.10-3+lenny2 OR libpulse-browse0 is earlier than 0.9.10-3+lenny2 OR pulseaudio-module-zeroconf is earlier than 0.9.10-3+lenny2 OR libpulse-browse0-dbg is earlier than 0.9.10-3+lenny2 OR pulseaudio-module-zeroconf-dbg is earlier than 0.9.10-3+lenny2 OR pulseaudio-module-jack-dbg is earlier than 0.9.10-3+lenny2 OR pulseaudio-module-x11 is earlier than 0.9.10-3+lenny2 OR pulseaudio-utils-dbg is earlier than 0.9.10-3+lenny2 OR pulseaudio-module-x11-dbg is earlier than 0.9.10-3+lenny2 OR libpulse-mainloop-glib0 is earlier than 0.9.10-3+lenny2 OR pulseaudio-module-gconf is earlier than 0.9.10-3+lenny2 OR pulseaudio-module-hal-dbg is earlier than 0.9.10-3+lenny2 OR pulseaudio-module-lirc-dbg is earlier than 0.9.10-3+lenny2 OR pulseaudio-module-lirc is earlier than 0.9.10-3+lenny2 OR pulseaudio-module-jack is earlier than 0.9.10-3+lenny2 OR libpulse0 is earlier than 0.9.10-3+lenny2 OR pulseaudio is earlier than 0.9.10-3+lenny2 OR libpulsecore5-dbg is earlier than 0.9.10-3+lenny2 OR libpulse0-dbg is earlier than 0.9.10-3+lenny2
BACK