openSUSE Security Update : iscsitarget (openSUSE-SU-2010:0604-1)

This update of iscscitarget/tgt fixes multiple overflows and a format string vulnerability : - CVE-2010-2221: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Buffer Errors CWE-119 - CVE-2010-0743: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Format String Vulnerability...

openSUSE Security Update : tgt (openSUSE-SU-2010:0608-1)

This update of iscscitarget/tgt fixes multiple overflows and a format string vulnerability : - CVE-2010-2221: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Buffer Errors CWE-119 - CVE-2010-0743: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Format String Vulnerability...

openSUSE Security Update : iscsitarget (openSUSE-SU-2010:0604-1)

This update of iscscitarget/tgt fixes multiple overflows and a format string vulnerability : - CVE-2010-2221: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Buffer Errors CWE-119 - CVE-2010-0743: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Format String Vulnerability...

Mandriva Update for iscsitarget MDVSA-2010:131 (iscsitarget)

Check for the Version of iscsitarget OpenVAS Vulnerability Test Mandriva Update for iscsitarget MDVSA-2010:131 iscsitarget Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CentOS 5 : scsi-target-utils (CESA-2010:0362)

An updated scsi-target-utils package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

scsi security update

CentOS Errata and Security Advisory CESA-2010:0362 An updated scsi-target-utils package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring Syste...

Debian DSA-2042-1 : iscsitarget - format string

Florent Daigniere discovered multiple format string vulnerabilities in Linux SCSI target framework which is known as iscsitarget under Debian allow remote attackers to cause a denial of service in the ietd daemon. The flaw could be trigger by sending a carefully-crafted Internet Storage Name...

Important: Red Hat Security Advisory: scsi-target-utils security update

An updated scsi-target-utils package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2010-0743

Multiple format string vulnerabilities in isns.c in 1 Linux SCSI target framework aka tgt or scsi-target-utils 1.0.3, 0.9.5, and earlier and 2 iSCSI Enterprise Target aka iscsitarget 0.4.16 allow remote attackers to cause a denial of service tgtd daemon crash or possibly have unspecified other...

CVE-2010-0743

Multiple format string vulnerabilities in isns.c in 1 Linux SCSI target framework aka tgt or scsi-target-utils 1.0.3, 0.9.5, and earlier and 2 iSCSI Enterprise Target aka iscsitarget 0.4.16 allow remote attackers to cause a denial of service tgtd daemon crash or possibly have unspecified other...

CVE-2010-0743

CVE-2010-0743 affects scsi-target-utils (tgt) and iSCSI Enterprise Target (iscsitarget) via a format-string vulnerability in isns.c that can trigger a denial of service (tgtd daemon crash) or other impact. Vulnerable versions include tgt 1.0.3, 0.9.5 and earlier, and iscsitarget 0.4.16. The issue...

CVE-2009-0743

Cross-site scripting XSS vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0517.0 aka 6.0 MR4 and 7.0 before 7.02 aka 7.0 MR1 allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field...

CVE-2009-0743

Cross-site scripting XSS vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0517.0 aka 6.0 MR4 and 7.0 before 7.02 aka 7.0 MR1 allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field...

CVE-2009-0743

The CVE-2009-0743 issue is an XSS vulnerability in Cisco Unified MeetingPlace Web Conferencing’s Web Server, specifically on the edit account page. The flaw allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field in versions 6.0 prior to 6.0(517.0) (6...

CVE-2008-0743

The CVE-2008-0743 issue affects Joovili 2.1 and earlier, where a PHP remote file inclusion vulnerability exists in members_help.php. The vulnerability allows an attacker to supply a URL via the hlp parameter to execute arbitrary PHP code on the server. This is evidenced by multiple sources (NVD e...

openSUSE 10 Security Update : log4net (log4net-2211)

This update fixes a format string exploit in the RemoteSyslogAppender of log4net. CVE-2006-0743 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update log4net-2211. The text description of this plugi...

CVE-2007-0743

CVE-2007-0743 affects Apple Mac OS X 10.3.9–10.4.9, where URLMount passes SMB mount credentials (username/password) as command-line arguments to mount_sub, enabling local users to potentially view sensitive information by inspecting the process. The vulnerability is tied to how credentials are ex...

CVE-2007-0743

URLMount in Apple Mac OS X 10.3.9 through 10.4.9 passes the username and password credentials for mounting filesystems on SMB servers as command line arguments to the mountsub command, which may allow local users to obtain sensitive information by listing the process...

CVE-2006-0743

Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service memory corruption and termination via unknown vectors...

CVE-2006-0743

CVE-2006-0743 affects Apache log4net 1.2.9 (LocalSyslogAppender) with a format string vulnerability that could cause a denial of service via memory corruption. The connected documents confirm the vulnerability in log4net 1.2.9 and describe DoS outcomes; some advisories note remediation by upgradi...