CVE-2014-2029

CVE-2014-2029 : The Percona Toolkit 2.1 tools perform an automatic version check by downloading configuration information over HTTP from v.percona.com. This insecure behavior can enable man-in-the-middle attackers to obtain sensitive information or execute arbitrary code. Root cause: unsecured HT...

Oracle Linux 7 : openssh (ELSA-2017-2029)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2029 advisory. 7.4p1-11 + 0.10.3-1 - Compiler warnings 1341754 7.4p1-10 + 0.10.3-1 - Add missing messages in FIPS mode 1341754 7.4p1-9 + 0.10.3-1 - Allow harmless...

Code injection

HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2029...

CVE-2016-2029

The CVE-2016-2029 entry refers to HPE Matrix Operating Environment before 7.5.1, where remote attackers can obtain sensitive information or modify data via unspecified vectors. The connected documents confirm this vulnerability as a separate issue from CVE-2016-4358 and do not provide concrete ex...

CVE-2016-2029

HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-4358...

CVE-2015-2029

IBM WebSphere eXtreme Scale 7.1.0 (before 7.1.0.3) and 7.1.1 (before 7.1.1.1) expose a session fixation vulnerability that allows remote attackers to hijack a user’s web session by exploiting an existing session identifier. The issue stems from improper session management (failure to invalidate o...

Adobe Shockwave Player <= 11.6.4.634 Multiple Memory Corruption Vulnerabilities (APSB12-13) (Mac OS X)

The remote Mac OS X host contains a version of Adobe Shockwave Player that is 11.6.4.634 or earlier. It is, therefore, affected by multiple unspecified memory corruption vulnerabilities. A remote attacker can exploit these issues by tricking a user into viewing a malicious Shockwave file, resulti...

openSUSE Security Update : percona-toolkit / xtrabackup (openSUSE-SU-2014:0333-1)

percona-toolkit and xtrabackup were updated : - disable automatic version check for all tools bnc864194 Prevents transmission of version information to an external host in the default configuration. CVE-2014-2029 Can be used by owner of a Percona Server or an attacker who can control this...

openSUSE Security Update : xtrabackup (openSUSE-SU-2014:0363-1)

xtrabackup was updated to 2.1.8 : Disabled the 'binary version check' functionality in the VersionCheck module due to security concerns. The automatic version check remains disabled in the openSUSE package. bnc864194 CVE-2014-2029 More bugs fixed : - do not discard read-ahead buffers through...

openSUSE Security Update : percona-toolkit (openSUSE-SU-2014:0361-1)

percona-toolkit was updated to 2.1.11 bnc864194 CVE-2014-2029 This improves sanitisation of input and output for commands run when performing a version check. This option is not the default. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

SuSE Update for percona-toolkit,xtrabackup openSUSE-SU-2014:0333-1 (percona-toolkit,xtrabackup)

Check for the Version of percona-toolkit,xtrabackup OpenVAS Vulnerability Test $Id: gbsuse201403331.nasl 8044 2017-12-08 08:32:49Z santu $ SuSE Update for percona-toolkit,xtrabackup openSUSE-SU-2014:0333-1 percona-toolkit,xtrabackup Authors: System Generated Check Copyright: Copyright C 2014...

CVE-2013-2029

nagios.upgradetov3.sh, as distributed by Red Hat and possibly others for Nagios Core 3.4.4, 3.5.1, and earlier, allows local users to overwrite arbitrary files via a symlink attack on a temporary nagioscfg file with a predictable name in /tmp/...

CVE-2013-2029

nagios.upgradetov3.sh, as distributed by Red Hat and possibly others for Nagios Core 3.4.4, 3.5.1, and earlier, allows local users to overwrite arbitrary files via a symlink attack on a temporary nagioscfg file with a predictable name in /tmp/...

CVE-2013-2029

CVE-2013-2029 describes a local privilege issue in Nagios Core 3.4.4, 3.5.1 and earlier where a symlink attack on a temporary nagioscfg file in /tmp allows a local user to overwrite arbitrary files. The vulnerability is tied to the nagios.upgrade_to_v3.sh script distributed with these releases. P...

CVE-2013-2029

nagios.upgradetov3.sh, as distributed by Red Hat and possibly others for Nagios Core 3.4.4, 3.5.1, and earlier, allows local users to overwrite arbitrary files via a symlink attack on a temporary nagioscfg file with a predictable name in /tmp/...

Ubuntu 10.04 LTS : libcommons-fileupload-java vulnerability (USN-2029-1)

It was discovered that Apache Commons FileUpload incorrectly handled file names with NULL bytes in serialized instances. An attacker could use this issue to possibly write to arbitrary files. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...

Medium: nagios

Issue Overview: nagios.upgradetov3.sh allows local users to overwrite arbitrary files via a symlink attack on a temporary nagioscfg file with a predictable name in /tmp/. Affected Packages: nagios Issue Correction: Run yum update nagios or yum update --advisory ALAS-2013-227 to update your system...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2011-2029)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-2029 advisory. - afpacket: prevent information leak CVE-2011-2898 - gro: Only reset frag0 when skb can be pulled CVE-2011-2723 - vm: fix vmpgoff wrap in stack...

CVE-2012-2029

Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2030, CVE-2012-2031, CVE-2012-2032, and CVE-2012-2033...

Memory corruption

Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2029, CVE-2012-2030, CVE-2012-2031, and CVE-2012-2032...