21 matches found
Linux Distros Unpatched Vulnerability : CVE-2012-2653
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, which might allow attackers to gain root...
CVE-2012-2653 affecting package arpwatch 2.1a15-51
CVE-2012-2653 affecting package arpwatch 2.1a15-51. This CVE either no longer is or was never applicable...
SUSE: Security Advisory (SUSE-SU-2012:0987-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GLSA-201607-16 : arpwatch: Privilege escalation
The remote host is affected by the vulnerability described in GLSA-201607-16 arpwatch: Privilege escalation Arpwatch does not properly drop supplementary groups. Impact : Attackers, if able to exploit arpwatch, could escalate privileges outside of the running process. Workaround : There is no kno...
openSUSE Security Update : arpwatch (openSUSE-SU-2012:0915-1)
Changes in arpwatch : - arpwatch-2.1a11-drop-privs.dif: call initgroups with pw-pwgid, not NULL, to not have groupid 0 initialized. bnc764521, CVE-2012-2653 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...
Mandriva Linux Security Advisory : arpwatch (MDVSA-2013:030)
A vulnerability has been discovered and corrected in arpwatch : arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, which might allow attackers to gain root privileges by leveraging other vulnerabilities in the daemon CVE-2012-265...
SuSE 11.1 Security Update : arpwatch (SAT Patch Number 6570)
arpwatch was improperly dropping its privileges. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...
Mandriva Linux Security Advisory : arpwatch (MDVSA-2012:113)
A vulnerability has been discovered and corrected in arpwatch : arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, which might allow attackers to gain root privileges by leveraging other vulnerabilities in the daemon CVE-2012-265...
Fedora Update for arpwatch FEDORA-2012-8677
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2012-2653
arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, which might allow attackers to gain root privileges by leveraging other vulnerabilities in the daemon...
CVE-2012-2653
arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, which might allow attackers to gain root privileges by leveraging other vulnerabilities in the daemon...
CVE-2012-2653
CVE-2012-2653 affects arpwatch 2.1a15 (used by Red Hat, Debian, Fedora, and others). The root cause is failure to drop supplementary groups, which may allow a local attacker to gain root privileges by leveraging other vulnerabilities in the daemon. Impact: local privilege escalation; CVSS data in...
Debian DSA-2481-1 : arpwatch - fails to drop supplementary groups
Steve Grubb from Red Hat discovered that a patch for arpwatch as shipped at least in Red Hat and Debian distributions in order to make it drop root privileges would fail to do so and instead add the root group to the list of the daemon uses. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...
Fedora Update for arpwatch FEDORA-2012-8675
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for arpwatch FEDORA-2012-8702
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 15 : arpwatch-2.1a15-16.fc15 (2012-8702)
with '-u' fix supplementary group list 825328 CVE-2012-2653 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
Fedora 17 : arpwatch-2.1a15-20.fc17 (2012-8677)
with '-u' fix supplementary group list 825328 CVE-2012-2653 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
[SECURITY] [DSA 2481-1] arpwatch security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2481-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez June 2, 2012 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2482-1] libgdata security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2482-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez June 2, 2012 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2482-1] arpwatch security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2482-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez June 2, 2012 http://www.debian.org/security/faq -...