[SECURITY] [DSA 2864-1] postgresql-8.4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2864-1 [email protected] http://www.debian.org/security/ Christoph Berg February 20, 2014 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2864-1 (postgresql-8.4 - several vulnerabilities)

Various vulnerabilities were discovered in PostgreSQL: CVE-2014-0060 Shore up GRANT ... WITH ADMIN OPTION restrictions Noah Misch Granting a role without ADMIN OPTION is supposed to prevent the grantee from adding or removing members from the granted role, but this restriction was easily bypassed...

DSA-2864-1 postgresql-8.4 - several

Bulletin has no description...

PostgreSQL -- multiple privilege issues

PostgreSQL Project reports: This update fixes CVE-2014-0060, in which PostgreSQL did not properly enforce the WITH ADMIN OPTION permission for ROLE management. Before this fix, any member of a ROLE was able to grant others access to the same ROLE regardless if the member was given the WITH ADMIN...

Debian: Security Advisory (DSA-2864-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 4 : krb5 (ELSA-2008-0180)

From Red Hat Security Advisory 2008:0180 : Updated krb5 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network authentication system whi...

RHEL 4 : krb5 (RHSA-2008:0182)

Updated krb5 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4.5 Extended Update Support. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients...

CVE-2011-0063

The listfileget function in lib/Majordomo.pm in Majordomo 2 20110203 and earlier allows remote attackers to conduct directory traversal attacks and read arbitrary files via a ./.../ sequence in the "extra" parameter to the help command, which causes the regular expression to produce .. dot dot...

DSquare Exploit Pack: D2SEC_MAJORDOMO2

Name| d2secmajordomo2 ---|--- CVE| CVE-2011-0063 Exploit Pack| D2ExploitPack Description| d2secmajordomo2 Notes|...

CVE-2011-0063

Majordomo 2 contains a directory-traversal flaw in the _list_file_get() helper (help command). Affected versions are Majordomo 2 prior to 20110131; input in the extra parameter can produce dot-dot sequences to read arbitrary files. This is linked to an earlier incomplete fix for CVE-2011-0049. Pu...

NSOADV-2011-003: Majordomo2 'help' Command Directory Traversal (Patch Bypass)

-------------------------- NSOADV-2011-003 --------------------------- Majordomo2 'help' Command Directory Traversal Patch Bypass 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 111011001 11111111101 1 11 0110111 1 1111101111 1001 0 1 10 11 0 10 11 1111111 1...

Majordomo2 Directory Traversal

-------------------------- NSOADV-2011-003 --------------------------- Majordomo2 'help' Command Directory Traversal Patch Bypass 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 111011001 11111111101 1 11 0110111 1 1111101111 1001 0 1 10 11 0 10 11 1111111 1...

CVE-2011-0063

creationtimestamp| type| source ---|---|--- 2011-02-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16103 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/majordomo2directorytraversal.rb 2025-02-06...

CVE-2010-0063

CVE-2010-0063 concerns an incomplete blacklist in CoreTypes on Mac OS X versions prior to 10.6.3. The vulnerability allows user-assisted remote attackers to trigger arbitrary JavaScript via a web page that offers a download with a Content-Type not on Safari’s unsafe list, illustrated by the .ibpl...

CVE-2009-0063

Symantec Brightmail Gateway Appliance prior to 8.0.1 has a cross-site scripting (XSS) vulnerability in the Control Center. The issue arises from insufficient input filtering of external client input in the web management console, enabling remote authenticated users to inject arbitrary web script ...

Mandriva Linux Security Advisory : krb5 (MDVSA-2008:069)

Multiple memory management flaws were found in the GSSAPI library used by Kerberos that could result in the use of already freed memory or an attempt to free already freed memory, possibly leading to a crash or allowing the execution of arbitrary code CVE-2007-5901, CVE-2007-5971. A flaw was...

Mandriva Update for krb5 MDVSA-2008:070 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDVSA-2008:070 krb5 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Update for krb5 MDVSA-2008:069 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDVSA-2008:069 krb5 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Update for krb5 MDVSA-2008:069 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDVSA-2008:069 krb5 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Ubuntu Update for linux-restricted-modules-2.6.17/20, vmware-player-kernel-2.6.15 vulnerabilities USN-543-1

Ubuntu Update for Linux kernel vulnerabilities USN-543-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5431.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-restricted-modules-2.6.17/20, vmware-player-kernel-2.6.15 vulnerabilities USN-543-1 Authors: System Generated Check Copyright:...