libipa_hbac, libsss_autofs, libsss_idmap, libsss_sudo, sssd security update

CentOS Errata and Security Advisory CESA-2013:0508 Updated sssd packages that fix two security issues, multiple bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. Common...

DEBIAN-CVE-2013-0219

System Security Services Daemon SSSD before 1.9.4, when 1 creating, 2 copying, or 3 removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files...

CVE-2013-0219

System Security Services Daemon SSSD before 1.9.4, when 1 creating, 2 copying, or 3 removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files...

CVE-2013-0219

CVE-2013-0219 affects System Security Services Daemon (SSSD) prior to 1.9.4. A TOCTOU race in copying/removing a user’s home directory tree allows a local attacker to exploit symlinks to create, modify, or delete arbitrary files in another user’s directory. This is the explicit vulnerability desc...

CVE-2013-0219

System Security Services Daemon SSSD before 1.9.4, when 1 creating, 2 copying, or 3 removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files...

CVE-2013-0219

System Security Services Daemon SSSD before 1.9.4, when 1 creating, 2 copying, or 3 removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files...

RedHat Update for sssd RHSA-2013:0508-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RHEL 6 : sssd (RHSA-2013:0508)

Updated sssd packages that fix two security issues, multiple bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which giv...

Low: Red Hat Security Advisory: sssd security, bug fix and enhancement update

Updated sssd packages that fix two security issues, multiple bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which giv...

Fedora Update for sssd FEDORA-2013-1826

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 17 : sssd-1.8.6-1.fc17 (2013-1826)

A rebase to the latest LTM upstream relase that fixes CVE-2013-0220 and CVE-2013-0219 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 18 : sssd-1.9.4-2.fc18 (2013-1795)

A rebase to the latest LTM upstream relase that fixes CVE-2013-0220 and CVE-2013-0219. Also fixes recreating the Kerberos cache when any part of the ccache directory is gone. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisor...

Fedora Update for sssd FEDORA-2013-1795

Check for the Version of sssd OpenVAS Vulnerability Test Fedora Update for sssd FEDORA-2013-1795 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for sssd FEDORA-2013-1795

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scripttagname:"affected", value:"sss...

RHEL 6 : mysql (RHSA-2013:0219)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0219 advisory. - mysql: unspecified DoS vulnerability related to InnoDB CPU Jan 2013 CVE-2012-0572 - mysql: unspecified DoS vulnerability related to Server...

SuSE 11.1 Security Update : socat (SAT Patch Number 6407)

This update fixes two small security issues in socat : - Fixed a stack overflow in commandline parsing bnc627475 / CVE-2010-2799 Only exploitable if an attacker can control the commandline parameters. - Fixed heap overflow in READLINE output mode bnc759859 / CVE-2012-0219 %NASLMINLEVEL 70300 C...

Fedora Update for socat FEDORA-2012-8274

Check for the Version of socat OpenVAS Vulnerability Test Fedora Update for socat FEDORA-2012-8274 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

GLSA-201208-01 : socat: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201208-01 socat: Arbitrary code execution A vulnerability in the 'xioscanreadline' function in xio-readline.c could cause a heap-based buffer overflow. Impact : A remote attacker could possibly execute arbitrary code with the...

SuSE 10 Security Update : socat (ZYPP Patch Number 8186)

This update fixes two small security issues in socat : - Fixed a stack overflow in commandline parsing bnc627475 / CVE-2010-2799 Only exploitable if an attacker can control the commandline parameters. - Fixed heap overflow in READLINE output mode. bnc759859 / CVE-2012-0219 %NASLMINLEVEL 70300 C...

CVE-2012-0219

Heap-based buffer overflow in the xioscanreadline function in xio-readline.c in socat 1.4.0.0 through 1.7.2.0 and 2.0.0-b1 through 2.0.0-b4 allows local users to execute arbitrary code via the READLINE address...