rgmanager security, bug fix, and enhancement update

2.0.52-1.0.1 - Update summary and description to be vendor neutral 2.0.52-1 - When vm.sh does a status check and gets 'no state' it is now treated as a running state. - Resolves: rhb514044 2.0.51-1 - In some cases virtual machines will be restarted after a successful migration when the cluster...

cman/fence: insecure temporary file usage in the apc fence agents

The 1 fenceapc and 2 fenceapcsnmp programs, as used in a fence 2.02.00-r1 and possibly b cman, when running in verbose mode, allows local users to append to arbitrary files via a symlink attack on the apclog temporary file...

[IVIZ-09-005] CA HIPS Remote Kernel Vulnerability

--------------------------------------------------------------------------------------------------- iViZ Security Advisory 09-005 19/08/2009 --------------------------------------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd...

Altiris Deployment Solution Agent < 6.9.355 Local Privilege Escalation (SYM08-019)

The version of the Altiris Deployment Solution Agent installed on the remote host is affected by a local privilege escalation issue. Successful exploitation of this issue could allow an authorized non-privileged user to gain local system access on the client system. C Tenable Network Security, In...

imap-uw -- local buffer overflow vulnerabilities

SANS reports: University of Washington "tmail" and "dmail" are mail deliver agents. "tmail" and "dmail" are exposed to local buffer overflow issues because they fail to perform adequate boundary checks on user-supplied data...

FreeBSD Ports: razor-agents

The remote host is missing an update to the system as announced in the referenced advisory. VID 85069fb6-e15b-11d9-83cf-0010dc5df42d OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: razor-agents

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

GLSA-200808-12 : Postfix: Local privilege escalation vulnerability

The remote host is affected by the vulnerability described in GLSA-200808-12 Postfix: Local privilege escalation vulnerability Sebastian Krahmer of SuSE has found that Postfix allows to deliver mail to root-owned symlinks in an insecure manner under certain conditions. Normally, Postfix does not...

Code injection

The SNMP-DMI mapper subagent daemon aka snmpXdmid in Solstice Enterprise Agents in Sun Solaris 8 through 10 allows remote attackers to cause a denial of service daemon crash via malformed packets...

CVE-2008-2946

The SNMP-DMI mapper subagent daemon aka snmpXdmid in Solstice Enterprise Agents in Sun Solaris 8 through 10 allows remote attackers to cause a denial of service daemon crash via malformed packets...

CVE-2008-2946: Undefined Security Weakness

The SNMP-DMI mapper subagent daemon aka snmpXdmid in Solstice Enterprise Agents in Sun Solaris 8 through 10 allows remote attackers to cause a denial of service daemon crash via malformed packets...

Format string in McAfee Framework 3.6.0.569 &#40;ePolicy Orchestrator 4.0&#41;

Luigi Auriemma Application: McAfee Framework implemented in McAfee ePolicy Orchestrator 4.0 http://www.mcafee.com/us/enterprise/products/systemsecuritymanagement/epolicyorchestrator.html Versions: = 3.6.0.569 Platforms: Windows Bug: format string in naimcomnLog Exploitation: remote Date: 12 Mar...

HP-UX PHSS_37399 : HP OpenView Operations (OVO) Agents Running Shared Trace Service, Remote Arbitrary Code Execution (HPSBMA02239 SSRT061260 rev.3)

s700800 11.X OV OVO8.X Core Agt HPUX 11 IA A.08.17.3 : A potential security vulnerability has been identified in HP OpenView Operations OVO Agents running Shared Trace Service. The vulnerability could be remotely exploited to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security,...

HP-UX PHSS_37398 : HP OpenView Operations (OVO) Agents Running Shared Trace Service, Remote Arbitrary Code Execution (HPSBMA02239 SSRT061260 rev.3)

s700800 11.X OV OVO8.X Core Agt Solaris A.08.17.3 : A potential security vulnerability has been identified in HP OpenView Operations OVO Agents running Shared Trace Service. The vulnerability could be remotely exploited to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, In...

SuSE 10 Security Update : heartbeat (ZYPP Patch Number 1978)

This update fixes both a local and a remote denial of service attack within heartbeat, as well as numerous other bugs in the messaging and membership layer, GUI, Cluster Resource Manager, Local Resource Manager and Resource Agents. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

HP-UX PHSS_35457 : HP OpenView Operations (OVO) Agents Running Shared Trace Service, Remote Arbitrary Code Execution (HPSBMA02239 SSRT061260 rev.3)

s700800 11.X OV OVO8.X Core Agt Tru64 A.08.17 : A potential security vulnerability has been identified in HP OpenView Operations OVO Agents running Shared Trace Service. The vulnerability could be remotely exploited to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...

CVE-2002-2422

CVE-2002-2422 is a cross-site scripting (XSS) vulnerability affecting Compaq Insight Management Agents in versions 2.0, 2.1, 3.6.0, 4.2 and 4.3.7. The issue allows a remote attacker to inject arbitrary web script or HTML by supplying a crafted URL, which causes the script to appear in the resulti...

CVE-2002-2422: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Compaq Insight Management Agents 2.0, 2.1, 3.6.0, 4.2 and 4.3.7 allows remote attackers to inject arbitrary web script or HTML via a URL, which inserts the script into the resulting error message...

HP-UX PHSS_36278 : HP OpenView Operations (OVO) Agents Running Shared Trace Service, Remote Arbitrary Code Execution (HPSBMA02239 SSRT061260 rev.3)

s700800 11.X OV OVO8.X EventAction Linux A.08.17 : A potential security vulnerability has been identified in HP OpenView Operations OVO Agents running Shared Trace Service. The vulnerability could be remotely exploited to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

[security bulletin] HPSBMA02239 SSRT061260 rev.1 - HP OpenView Operations &#40;OVO&#41; Agents Running Shared Trace Service, Remote Arbitrary Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01110576 Version: 1 HPSBMA02239 SSRT061260 rev.1 - HP OpenView Operations OVO Agents Running Shared Trace Service, Remote Arbitrary Code Execution NOTICE: The information in this Security Bulleti...