Mandriva Update for logrotate MDVSA-2011:065 (logrotate)

Check for the Version of logrotate OpenVAS Vulnerability Test Mandriva Update for logrotate MDVSA-2011:065 logrotate Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Mandriva Update for logrotate MDVSA-2011:065 (logrotate)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[ MDVSA-2011:065 ] logrotate

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:065 http://www.mandriva.com/security/ Package : logrotate Date : April 5, 2011 Affected: 2009.0, 2010.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities were...

Mandriva Linux Security Advisory : logrotate (MDVSA-2011:065)

Multiple vulnerabilities were discovered and corrected in logrotate : Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions are in place CVE-2011-1098. The shredfile...

Red Hat Enterprise Linux logrotate任意执行命令及信息泄露漏洞

CVE ID: CVE-2011-1155,CVE-2011-1154,CVE-2011-1098 logrotate程序可简化多个日志文件的管理，允许日志文件的自动循环、压缩、删除和 邮寄。 logrotate处理shred指令时存在shell命令注入漏洞，特制日志文件可造成logrotate 以运行logrotate默认root的用户权限执行任意命令。注意：默认没有启用shred指令。 logrotate在创建新日志文件时应用权限的方式中存在竞争条件漏洞，在一些特定配置 中，本地攻击者可利用此漏洞在logrotate应用最终权限之前打开新的日志文件，可导 致泄露敏感信息。...

CVE-2011-1155

CVE-2011-1155 affects logrotate up to version 3.7.9, where the writeState function in logrotate.c may allow context-dependent attackers to trigger a denial-of-service (rotation outage) by using a log filename containing a newline or a backslash. The MiracleLinux advisory and related Nessus entrie...

CVE-2011-1155

The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service rotation outage via a 1 \n newline or 2 \ backslash character in a log filename, as demonstrated by a filename that is automatically constructed on the basis ...

Fedora 15 : logrotate-3.7.9-8.fc15 (2011-3758)

Fixes CVE-2011-1154, CVE-2011-1155 and CVE-2011-1098. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

openSUSE Security Update : irssi (openSUSE-SU-2010:0183-1)

irssi did not check the identity information of a remote hosts's certificate. Attackers could exploit that for a man-in-the-middle attack CVE-2010-1155. irssi could crash if someone changed nick while the victim was leaving the channel CVE-2010-1156. %NASLMINLEVEL 70300 C Tenable Network Security...

openSUSE Security Update : irssi (openSUSE-SU-2010:0183-1)

irssi did not check the identity information of a remote hosts's certificate. Attackers could exploit that for a man-in-the-middle attack CVE-2010-1155. irssi could crash if someone changed nick while the victim was leaving the channel CVE-2010-1156. %NASLMINLEVEL 70300 C Tenable Network Security...

openSUSE Security Update : irssi (openSUSE-SU-2010:0183-1)

irssi did not check the identity information of a remote hosts's certificate. Attackers could exploit that for a man-in-the-middle attack CVE-2010-1155. irssi could crash if someone changed nick while the victim was leaving the channel CVE-2010-1156. %NASLMINLEVEL 70300 C Tenable Network Security...

Ubuntu: Security Advisory (USN-929-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] irssi

New irssi packages are available for Slackware 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix security issues. Here are the details from the Slackware 13.0 ChangeLog: patches/packages/irssi-0.8.15-i486-1slack13.0.txz: Upgraded. From the NEWS file: - Check if an SSL certificate...

FreeBSD Ports: irssi

The remote host is missing an update to the system as announced in the referenced advisory. VID 3b7967f1-49e8-11df-83fb-0015587e2cc1 OpenVAS Vulnerability Test $ Description: Auto generated from VID 3b7967f1-49e8-11df-83fb-0015587e2cc1 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Ubuntu 8.04 LTS / 8.10 / 9.04 / 9.10 : irssi regression (USN-929-2)

USN-929-1 fixed vulnerabilities in irssi. The upstream changes introduced a regression when using irssi with SSL and an IRC proxy. This update fixes the problem. We apologize for the inconvenience. It was discovered that irssi did not perform certificate host validation when using SSL connections...

Mandriva Update for irssi MDVSA-2010:079 (irssi)

Check for the Version of irssi OpenVAS Vulnerability Test Mandriva Update for irssi MDVSA-2010:079 irssi Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[USN-929-1] irssi vulnerabilities

=========================================================== Ubuntu Security Notice USN-929-1 April 16, 2010 irssi vulnerabilities CVE-2010-1155, CVE-2010-1156 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 8.04 LTS Ubuntu...

CVE-2010-1155

Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name CN field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof IRC servers via an arbitrary certificate...

Ubuntu Update for irssi vulnerabilities USN-929-1

Ubuntu Update for Linux kernel vulnerabilities USN-929-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9291.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for irssi vulnerabilities USN-929-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-929-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...