91 matches found
CVE-2012-0745
CVE-2012-0745 affects IBM AIX 5.3, 6.1, 7.1 and VIOS 2.1.0.10 through 2.2.1.3. The root cause is an error in getpwnam() interaction with customer-extended LDAP user filtering, which can allow a local attacker to gain elevated privileges. The vulnerability leads to local privilege escalation (and ...
CVE-2011-0745
SugarCRM prior to 6.1.3 is affected by CVE-2011-0745. The issue arises when reloading or directly requesting a warning page produced by a duplicate-check, allowing remote authenticated users to see names they normally should not access: (1) customer names via ShowDuplicates in the Accounts module...
CVE-2010-0745
CVE-2010-0745 affects Dovecot 1.2.x prior to 1.2.11. An unspecified vulnerability allows remote attackers to cause a denial of service (CPU usage) by sending e-mails with long headers. Public sources (Mandriva/SUSE advisories and related OpenVAS entries) indicate upgrading to Dovecot 1.2.11 or ne...
openSUSE Security Update : dovecot12 (openSUSE-SU-2010:0175-1)
Huge mail headers could cause dovecot to consume excessive amounts of CPU CVE-2010-0745 dovecot was updated to version 1.2.11 which fixes the problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...
Mandriva Update for iptables MDVA-2010:104 (iptables)
Check for the Version of iptables OpenVAS Vulnerability Test Mandriva Update for iptables MDVA-2010:104 iptables Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Mandriva Update for iptables MDVA-2010:104 (iptables)
Check for the Version of iptables OpenVAS Vulnerability Test Mandriva Update for iptables MDVA-2010:104 iptables Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
CentOS Security Advisory CESA-2009:1243 (kernel)
The remote host is missing updates to kernel announced in advisory CESA-2009:1243. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...
RedHat Security Advisory RHSA-2009:1243
The remote host is missing updates announced in advisory RHSA-2009:1243. The kernel packages contain the Linux kernel, the core of any Linux operating system. These updated packages fix the following security issues: it was discovered that, when executing a new process, the clearchildtid pointer ...
Important: Red Hat Security Advisory: Red Hat Enterprise Linux 5.4 kernel security and bug fix update
Updated kernel packages that fix security issues, address several hundred bugs and add numerous enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 5. This is the fourth regular update. This update has been rated as having important...
Debian: Security Advisory (DSA-1749-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
BELL-CVE-2009-0745 CVE-2009-0745 does not affect BellSoft software
Bulletin has no description...
CVE-2009-0745
CVE-2009-0745 concerns the Linux kernel ext4 resize path. The ext4_group_add function in fs/ext4/resize.c fails to properly initialize the group descriptor during a resize (resize2fs), which can allow a local attacker to trigger a denial of service (OOPS) by manipulating crafted values in memory....
Gentoo Security Advisory GLSA 200409-13 (lha)
The remote host is missing updates announced in advisory GLSA 200409-13. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD Ports: xorg-server
The remote host is missing an update to the system as announced in the referenced advisory. VID 61534682-b8f4-11da-8e62-000e0c33c2dc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: xorg-server
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...
CVE-2008-0745
CVE-2008-0745 concerns a directory traversal vulnerability in aides/index.php of DomPHP 0.82, where an attacker can influence the page parameter with a ../ sequence to include and execute local files. Public records in NVD/NVD-derived entries describe a remote exploit path via this parameter, yie...
FreeBSD : xorg-server -- privilege escalation (61534682-b8f4-11da-8e62-000e0c33c2dc)
Daniel Stone of X.Org reports : During the analysis of results from the Coverity code review of X.Org, we discovered a flaw in the server that allows local users to execute arbitrary code with root privileges, or cause a denial of service by overwriting files on the system, again with root...
SUSE-SA:2006:016: xorg-x11-server
The remote host is missing the patch for the advisory SUSE-SA:2006:016 xorg-x11-server. A programming flaw in the X.Org X Server allows local attackers to gain root access when the server is setuid root, as is the default in SUSE Linux 10.0. This flaw was spotted by the Coverity project. Only SUS...
CVE-2006-0745
The CVE concerns the X.Org X Server (xorg-server) 1.0.0 and later (X11R6.9.0, X11R7.0) where a faulty check tests the address of geteuid instead of the function result, allowing a local user to bypass restrictions and perform a Local Privilege Escalation. Impact described across sources: an unpri...
[CVE-2006-0745] X.Org Security Advisory: privilege escalation and DoS in X11R6.9, X11R7.0
X.Org Security Advisory, March 20th 2006 Local privilege escalation in X.Org server 1.0.0 and later; X11R6.9.0 and X11R7.0 CVE-ID: CVE-2006-0745 Overview: During the analysis of results from the Coverity code review of X.Org, we discovered a flaw in the server that allows local users to execute...