5217 matches found
CVE-2013-7458
linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .redisclihistory, which allows local users to obtain sensitive information by reading the file...
CVE-2013-7458
Redis before 3.2.3 uses world-readable permissions for the linenoise history file (.rediscli_history), enabling local users to read sensitive information. This CVE-2013-7458 describes a local information disclosure due to file permissions. Connected sources corroborate the affected component (lin...
CVE-2013-7458
linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .redisclihistory, which allows local users to obtain sensitive information by reading the file...
Open Source Pentesting Management And Automation Platform: Vulnreport
Open Source Pentesting Management And Automation Platform Vulnreport is a platform for managing penetration tests and generating well-formatted, actionable findings reports without the normal overhead that takes up security engineer’s time. It is designed to accelerate management of penetration...
openSUSE Security Update : redis (openSUSE-2016-945)
This update for redis fixes the following issues : - CVE-2013-7458: unsafe permissions of command line history boo991250 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2016-945. The...
pDNS2 - Passive DNS V2
pDNS2 is yet another implementation of a passive DNS tool working with Redis as the database. pDNS2 means ‘passive DNS version2’ and favors speed in query over other database features. pDNS2 is based on Florian Weimer’s original dnslogger with improved features for speed and specialization for...
OPENSUSE-SU-2016:1980-1 Security update for redis
This update for redis fixes the following issues: - CVE-2013-7458: unsafe permissions of command line history boo991250...
OPENSUSE-SU-2016:1981-1 Security update for redis
This update for redis fixes the following issues: - CVE-2013-7458: unsafe permissions of command line history boo991250...
Redis redis-cli Information Disclosure Vulnerability
Redis is the United States Redis Labs, Inc. sponsored by a set of open source using ANSI C written to support the network , can be based on memory can also be a persistent log-type , key-value Key-Value storage database, and provides a variety of languages API. An information disclosure...
Debian Security Advisory DSA 3634-1 (redis - security update)
It was discovered that redis, a persistent key-value database, did not properly protect redis-cli history files: they were created by default with world-readable permissions. Users and systems administrators may want to proactively change permissions on existing /redisclihistory files, instead of...
Debian: Security Advisory (DSA-3634-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-7458
A permissions flaw was found in Redis, where redis-cli stores its history in /.redisclihistory. The file is created with permissions 0644, which could lead to the exposure of sensitive data for users with world-readable home directories...
HellRaiser - Vulnerability Scanner
Install Install ruby, bundler and rails. https://gorails.com/setup/ubuntu/16.04 Install redis-server and nmap. sudo apt-get update sudo apt-get install redis-server nmap Clone HellRaiser repository, change to hellraiser web app directory and run bundle install. git clone...
Debian DLA-577-1 : redis security update
It was discovered that the redis-cli tool in redis an in-memory key-value database created world-readable history files. For Debian 7 'Wheezy', this issue has been fixed in redis version 2:2.4.14-1+deb7u1. We recommend that you upgrade your redis packages. NOTE: Tenable Network Security has...
Debian DSA-3634-1 : redis - security update
It was discovered that redis, a persistent key-value database, did not properly protect redis-cli history files: they were created by default with world-readable permissions. Users and systems administrators may want to proactively change permissions on existing /redisclihistory files, instead of...
[SECURITY] [DLA 577-1] redis security update
Package : redis Version : 2:2.4.14-1+deb7u1 CVE ID : CVE-2013-7458 Debian Bug : 832460 It was discovered that the redis-cli tool in redis an in-memory key-value database created world-readable history files. For Debian 7 "Wheezy", this issue has been fixed in redis version 2:2.4.14-1+deb7u1. We...
[SECURITY] [DSA 3634-1] redis security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3634-1 [email protected] https://www.debian.org/security/ Sebastien Delafond July 30, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3634-1] redis security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3634-1 [email protected] https://www.debian.org/security/ Sebastien Delafond July 30, 2016 https://www.debian.org/security/faq -...
DLA-577-1 redis - security update
Bulletin has no description...
DSA-3634-1 redis - security update
Bulletin has no description...