CVE-2012-1054

CVE-2012-1054 affects Puppet 2.6.x (before 2.6.14), Puppet 2.7.x (before 2.7.11), and Puppet Enterprise (PE) Users 1.0–2.0.x (before 2.0.3). The vulnerability is triggered when managing a user login file via the k5login resource, enabling local privilege escalation through a symlink attack on .k5...

Fedora Update for puppet FEDORA-2012-6055

Check for the Version of puppet OpenVAS Vulnerability Test Fedora Update for puppet FEDORA-2012-6055 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for puppet FEDORA-2012-5999

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for puppet FEDORA-2012-2415

Check for the Version of puppet OpenVAS Vulnerability Test Fedora Update for puppet FEDORA-2012-2415 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for puppet FEDORA-2012-2415

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[BSA-065] Security Update for puppet

Micah Anderson uploaded new packages for puppet which fixed the following security problems: CVE-2012-1053 and CVE-2012-1054 CVE-2012-1053 Puppet runs execs with an unintended group privileges, potentially leading to privilege escalation. CVE-2012-1054 The k5login type writes to untrusted...

Debian Security Advisory DSA 2419-1 (puppet)

The remote host is missing an update to puppet announced via advisory DSA 2419-1. OpenVAS Vulnerability Test $Id: deb24191.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2419-1 puppet Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Fedora 16 : puppet-2.6.14-1.fc16 (2012-2415)

Please refer to the upstream release notes for details : http://projects.puppetlabs.com/projects/1/wiki/ReleaseNotes2.6.14 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Fedora 15 : puppet-2.6.14-1.fc15 (2012-2367)

Please refer to the upstream release notes for details : http://projects.puppetlabs.com/projects/1/wiki/ReleaseNotes2.6.14 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

[SECURITY] [DSA 2419-1] puppet security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2419-1 [email protected] http://www.debian.org/security/ Florian Weimer February 27, 2012 http://www.debian.org/security/faq -...

SuSE 11.1 Security Update : puppet (SAT Patch Number 5876)

This update of puppet fixes two vulnerabilities that could potentially be exploited by local attackers to escalate privileges due to improper privilege dropping and file handling issues symlink flaws in puppet. CVE-2012-1053 / CVE-2012-1054 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Debian DSA-2419-1 : puppet - several vulnerabilities

Two vulnerabilities were discovered in Puppet, a centralized configuration management tool. - CVE-2012-1053 Puppet runs execs with an unintended group privileges, potentially leading to privilege escalation. - CVE-2012-1054 The k5login type writes to untrusted locations, enabling local users to...

[SECURITY] [DSA 2419-1] puppet security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2419-1 [email protected] http://www.debian.org/security/ Florian Weimer February 27, 2012 http://www.debian.org/security/faq -...

CVE-2012-1054

Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise PE Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3, when managing a user login file with the k5login resource type, allows local users to gain privileges via a symlink attack on .k5login...

CVE-2011-1054

Hex-Rays IDA Pro CVE-2011-1054 affects the PEF input file loader in IDA Pro versions 5.7 and 6.0. The connected OpenVAS entries describe Hex-Rays IDA Pro multiple vulnerabilities, but do not provide concrete exploit vectors or root-cause details for this CVE. The impact in the CVE entry is stated...

KLA10216 Multiple vulnerabilities in IDA Pro

Multiple critical vulnerabilities have been found in IDA Pro. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or conduct other unknown attacks. Below is a complete list of vulnerabilities 1. Unspecified vulnerabilities can be exploited from...

CVE-2010-1054

creationtimestamp| type| source ---|---|--- 2010-03-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33761...

CVE-2009-1054

CVE-2009-1054 concerns an unspecified remote-code-execution vulnerability in JustSystems Ichitaro 13 (2004–2008), Lite2, and Ichitaro viewer 5.1.5.0 and earlier. The flaw allows a crafted file to execute arbitrary code and was observed in the wild via Trojan.Tarodrop.H (March 2009). Affected comp...

Fedora Update for mediawiki FEDORA-2007-1442

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

FreeBSD Ports: mod_access_referer

The remote host is missing an update to the system as announced in the referenced advisory. VID af747389-42ba-11d9-bd37-00065be4b5b6 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...