RHEL 5 : vixie-cron (RHSA-2012:0304)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2012:0304 advisory. - vixie-cron, cronie: Race condition by setting timestamp of user's crontab file, when editing the file CVE-2010-0424 Note that Nessus has not tested...

SuSE 10 Security Update : cron (ZYPP Patch Number 6865)

This update of cron fixes a race condition in crontab that can be used to change the time-stamp of arbitrary files while editing the crontab entry. - CVSS v2 Base Score: 3.6 Additionally the return value of initgroups is verified now. CVE-2010-0424 %NASLMINLEVEL 70300 C Tenable Network Security,...

Fedora 12 : cronie-1.4.3-4.fc12 (2010-2751)

CVE-2010-0424 vixie-cron, cronie: Race condition by setting timestamp of user's crontab file, when editing the file . Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and forma...

Fedora 13 : cronie-1.4.4-1.fc13 (2010-3642)

Bug 565809 - CVE-2010-0424 vixie-cron, cronie: Race condition by setting timestamp of user's crontab file, when editing the file Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Fedora Update for cronie FEDORA-2010-4300

Check for the Version of cronie OpenVAS Vulnerability Test Fedora Update for cronie FEDORA-2010-4300 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

openSUSE Security Update : cron (cron-2026)

This update of cron fixes a race condition in crontab that can be used to change the time-stamp of arbitrary files while editing the crontab entry. CVE-2010-0424: CVSS v2 Base Score: 3.6 Additionally the return value of initgroups is verified now. %NASLMINLEVEL 70300 C Tenable Network Security,...

SuSE 10 Security Update : cron (ZYPP Patch Number 6864)

This update of cron fixes a race condition in crontab that can be used to change the time-stamp of arbitrary files while editing the crontab entry. - CVSS v2 Base Score: 3.6 Additionally the return value of initgroups is verified now. CVE-2010-0424 %NASLMINLEVEL 70300 C Tenable Network Security,...

openSUSE Security Update : cron (cron-2026)

This update of cron fixes a race condition in crontab that can be used to change the time-stamp of arbitrary files while editing the crontab entry. CVE-2010-0424: CVSS v2 Base Score: 3.6 Additionally the return value of initgroups is verified now. %NASLMINLEVEL 70300 C Tenable Network Security,...

openSUSE Security Update : cron (cron-2026)

This update of cron fixes a race condition in crontab that can be used to change the time-stamp of arbitrary files while editing the crontab entry. CVE-2010-0424: CVSS v2 Base Score: 3.6 Additionally the return value of initgroups is verified now. %NASLMINLEVEL 70300 C Tenable Network Security,...

SuSE 11 Security Update : cron (SAT Patch Number 2027)

This update of cron fixes a race condition in crontab that can be used to change the time-stamp of arbitrary files while editing the crontab entry. Additionally the return value of initgroups is verified now. CVE-2010-0424: CVSS v2 Base Score: 3.6 %NASLMINLEVEL 70300 C Tenable Network Security,...

CVE-2009-0424

The CVE-2009-0424 entry concerns AN Guestbook (ANG) prior to version 0.7.7. The vulnerability is a Cross‑Site Scripting (XSS) in sign1.php where the country parameter is not properly sanitized, enabling an attacker to inject arbitrary script/HTML via affected paths (administrator/manage.php or ad...

CVE-2008-0424

The CVE-2008-0424 entry concerns Mooseguy Blog System (MGBS) 1.0. The vulnerability is a SQL injection in blog.php caused by input via the month parameter, enabling remote attackers to execute arbitrary SQL commands. Affected software is MGBS 1.0; the exact root cause is an unsafely handled month...

CVE-2007-0424

The CVE-2007-0424 entry concerns the BEA WebLogic Server proxy plug-in for Netscape Enterprise Server, vulnerable before September 2006. The available description indicates an unspecified vulnerability that allows remote attackers to cause a denial of service by sending certain requests that trig...

CVE-2006-0424

CVE-2006-0424 affects BEA WebLogic Server and WebLogic Express, specifically versions 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7. The vulnerability permits remote authenticated guest users to read the server log and obtain sensitive configuration information. The available connected so...

CVE-2005-0424

Affected software: ASPjar Guestbook 1.00. The CVE-2005-0424 entry maps to CVE-2002-1730 and describes a vulnerability in delete.asp that enables remote attackers to delete arbitrary messages by crafting specific cookie values. Root cause: improper handling of the delete.asp administrative script ...

CVE-2004-0424

Integer overflow in the ipsetsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service crash or execute arbitrary code via the MCASTMSFILTER socket option...

CVE-2004-0424

Integer overflow in the ipsetsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service crash or execute arbitrary code via the MCASTMSFILTER socket option...

RHEL 3 : kernel (RHSA-2004:183)

Updated kernel packages that fix two privilege escalation vulnerabilities are now available. The Linux kernel handles the basic functions of the operating system. iSEC Security Research discovered a flaw in the ipsetsockopt function code of the Linux kernel versions 2.4.22 to 2.4.25 inclusive. Th...

CVE-2004-0424

Integer overflow in the ipsetsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service crash or execute arbitrary code via the MCASTMSFILTER socket option...

CVE-2004-0424

CVE-2004-0424 involves an integer overflow in the Linux kernel’s ip_setsockopt handling of the MCAST_MSFILTER socket option. Affected ranges are Linux kernel 2.4.22–2.4.25 and 2.6.1–2.6.3. The vulnerability allows local users to cause a crash (denial of service) or potentially execute arbitrary c...