CVE-2019-19882

A flaw was found in shadow-utils. When compiled with --with-libpam, but without explicitly passing --disable-account-tools-setuid and suitable PAM configurations, a local user could obtain root access due to setuid being misconfigured. The highest threat from this vulnerability is to file...

CVE-2012-3409

ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation...

Privilege escalation

ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation...

CVE-2012-3409

ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation...

UBUNTU-CVE-2012-3409

ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation...

CVE-2012-3409

ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation...

CVE-2012-3409

The vulnerability CVE-2012-3409 affects ecryptfs-utils: the suid helper does not restrict mounting filesystems with nosuid,nodev, enabling a possible local privilege escalation. Multiple advisories reference this issue (SUSE CVE-2012-3409; Debian security tracker; Ubuntu-related OSV entries; Fedo...

CVE-2012-3409

ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation...

CVE-2012-3409

ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation...

PT-2019-6768

Name of the Vulnerable Software and Affected Versions ecryptfs-utils affected versions not specified Description The issue is related to the suid helper in ecryptfs-utils, which does not properly restrict mounting filesystems with nosuid and nodev options. This oversight creates a possible...

CVE-2012-3409: Improper Input Validation

ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation...

EulerOS 2.0 SP3 : cifs-utils (EulerOS-SA-2019-2562)

According to the version of the cifs-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pamcifscreds, allows remote attackers to have...

EulerOS 2.0 SP3 : iscsi-initiator-utils (EulerOS-SA-2019-2596)

According to the version of the iscsi-initiator-utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio server to abort or potentially execut...

EulerOS 2.0 SP3 : shadow-utils (EulerOS-SA-2019-2662)

According to the version of the shadow-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap.CVE-2016-6252 Note that Tenable Network...

Default credentials

openstack-utils openstack-db has insecure password creation...

CVE-2013-1793

CVE-2013-1793 concerns openstack-utils and openstack-db with insecure password creation. The available connected documents confirm the affected components but do not provide remediation details. NVD metrics indicate a Network attack vector with no authentication required, and a high impact on con...

Moderate: Red Hat Security Advisory: httpd24-httpd security, bug fix, and enhancement update

An update for httpd24, httpd24-httpd, and httpd24-nghttp2 is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

PT-2019-6853

Name of the Vulnerable Software and Affected Versions openstack-utils affected versions not specified Description The issue concerns insecure password creation in openstack-utils openstack-db. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

CVE-2013-1793: Missing Authentication for Critical Function

openstack-utils openstack-db has insecure password creation...

EulerOS 2.0 SP2 : cifs-utils (EulerOS-SA-2019-2366)

According to the version of the cifs-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pamcifscreds, allows remote attackers to have...