112 matches found
Fedora Core 10 FEDORA-2009-3449 (device-mapper-multipath)
The remote host is missing an update to device-mapper-multipath announced via advisory FEDORA-2009-3449. OpenVAS Vulnerability Test $Id: fcore20093449.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3449 device-mapper-multipath Authors: Thomas Reink...
Fedora Core 9 FEDORA-2009-3453 (device-mapper-multipath)
The remote host is missing an update to device-mapper-multipath announced via advisory FEDORA-2009-3453. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...
Debian Security Advisory DSA 1767-1 (multipath-tools)
The remote host is missing an update to multipath-tools announced via advisory DSA 1767-1. OpenVAS Vulnerability Test $Id: deb17671.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1767-1 multipath-tools Authors: Thomas Reinke Copyright: Copyright c 2009...
Fedora Core 10 FEDORA-2009-3449 (device-mapper-multipath)
The remote host is missing an update to device-mapper-multipath announced via advisory FEDORA-2009-3449. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...
[SECURITY] [DSA 1767-1] New multipath-tools packages fix denial of service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-1767-1 [email protected] http://www.debian.org/security/ Nico Golde April 9th, 2009 http://www.debian.org/security/faq -...
Fedora 9 : device-mapper-multipath-0.4.7-17.fc9 (2009-3453)
Fix insecure permissions on multipathd.sock CVE-2009-0115 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
[SECURITY] [DSA 1767-1] New multipath-tools packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA-1767-1 [email protected] http://www.debian.org/security/ Nico Golde April 9th, 2009 http://www.debian.org/security/faq -...
RHEL 4 / 5 : device-mapper-multipath (RHSA-2009:0411)
Updated device-mapper-multipath packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The device-mapper multipath packages provide tools to manage multipath...
CVE-2009-0115
The Device Mapper multipathing driver aka multipath-tools or device-mapper-multipath 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise Server SLES, Fedora, and possibly other operating systems, uses world-writable permissions for the socket file aka /var/run/multipathd.sock, which allows loc...
CVE-2009-0115
CVE-2009-0115 affects the device-mapper-multipath tool (multipath-tools) version 0.4.8 used in multiple Linux distributions (SUSE openSUSE, SLES, Fedora, etc.). The underlying issue is world-writable permissions on the socket file /var/run/multipathd.sock, which allows a local user to send arbitr...
openSUSE 10 Security Update : kpartx (kpartx-6082)
This update improves the file permissions on the socket file. CVE-2009-0115 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update kpartx-6082. The text description of this plugin is C SUSE LLC...
[Full-disclosure] iDefense Security Advisory 03.11.08: Microsoft Excel 2003 Malformed Formula Memory Corruption Vulnerability
iDefense Security Advisory 03.11.08 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 11, 2008 I. BACKGROUND Microsoft Excel is the spreadsheet application that is included with Microsoft Corp's Office productivity software suite. More information is available at the following website...
CVE-2008-0115
CVE-2008-0115 : A remote-code-execution vulnerability in Microsoft Excel’s Formula Parsing affects Excel 2000 SP3–2007, Excel Viewer 2003, the Office Compatibility Pack, and Office for Mac 2004. The issue arises from improper handling of malformed formulas, allowing a user-assisted attacker to tr...
rPSA-2007-0115-1 libexif
rPath Security Advisory: 2007-0115-1 Published: 2007-06-04 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Indirect User Deterministic Denial of Service Updated Versions: libexif=/conary.rpath.com@rpl:devel//1/0.6.15-0.1-1 References: https://vulners.com/cve/CVE-2007-2645...
CVE-2007-0115
CVE-2007-0115 affects Coppermine Photo Gallery 1.4.10 and earlier. The vulnerability is a static code injection that lets remote authenticated administrators run arbitrary PHP code. The attack path involves injecting PHP code via the Username field to login.php, which is injected into an error me...
CVE-2006-0115
The provided connected documents confirm CVE-2006-0115 affects OnePlug Solutions OnePlug CMS with three SQL injection weaknesses in details.asp endpoints (Press_Release_ID, Service_ID, Product_ID). The underlying issue is improper input handling allowing remote SQL command execution (c.f. NVD ent...
CVE-2005-0115
DataRescue Interactive Disassembler Pro (IDA Pro) 4.7 is affected by a stack-based buffer overflow in the PE import directory parsing (Import Address Table). The vulnerability allows arbitrary code execution under the user’s context when a target opens a malicious PE file containing a long import...
CVE-2004-0115
The CVE-2004-0115 issue affects Microsoft Virtual PC for Mac 6.0–6.1. The setuid VirtualPC_Services creates a temporary log file (/tmp/VPCServices_Log) without proper checks, enabling a local attacker with valid logon to create a symlink that leads to truncation/overwriting of arbitrary files and...
CVE-2004-0115
VirtualPCServices in Microsoft Virtual PC for Mac 6.0 through 6.1 allows local attackers to truncate and overwrite arbitrary files, and execute arbitrary code, via a symlink attack on the VPCServicesLog temporary file...
CVE-2004-0115
VirtualPCServices in Microsoft Virtual PC for Mac 6.0 through 6.1 allows local attackers to truncate and overwrite arbitrary files, and execute arbitrary code, via a symlink attack on the VPCServicesLog temporary file...