124 matches found
CVE-2017-2056
CVE-2017-2056 entry is rejected and not active; it does not represent an active vulnerability entry.
[SECURITY] [DLA 488-1] xymon security update
Package : xymon Version : 4.3.0beta2.dfsg-9.1+deb7u1 CVE ID : CVE-2016-2054 CVE-2016-2055 CVE-2016-2056 CVE-2016-2058 Markus Krell discovered that Xymon formerly known as Hobbit, a network- and applications-monitoring system, was vulnerable to the following security issues: CVE-2016-2054 The...
CVE-2016-2056
xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the addusername argument in 1 web/useradm.c or 2 web/chpasswd.c...
CVE-2016-2056
Xymon xymond prior to 4.3.25 is affected by CVE-2016-2056: remote authenticated users can inject shell commands via the adduser_name field in web/useradm.c or web/chpasswd.c, executing arbitrary commands as the web server user. This is a shell command injection vulnerability with potential for fu...
CVE-2016-2056
xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the addusername argument in 1 web/useradm.c or 2 web/chpasswd.c...
Debian DSA-3495-1 : xymon - security update
Markus Krell discovered that xymon, a network- and applications-monitoring system, was vulnerable to the following security issues : - CVE-2016-2054 The incorrect handling of user-supplied input in the 'config' command can trigger a stack-based buffer overflow, resulting in denial of service via...
[SECURITY] [DSA 3495-1] xymon security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3495-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 29, 2016 https://www.debian.org/security/faq -...
Xymon 4.3.x Buffer Overflow / Code Execution / Information Disclosure
Hi, Multiple security issues have been found in the server component of the Xymon monitoring system. These issues affect all versions of Xymon 4.3.x prior to 4.3.25, as well as the obsolete 4.1.x and 4.2.x versions. All issues have been resolved in Xymon 4.3.25, released on Feb 8 2016. It is...
Xymon useradm Command Execution
This module exploits a command injection vulnerability in Xymon versions before 4.3.25 which allows authenticated users to execute arbitrary operating system commands as the web server user. When adding a new user to the system via the web interface with useradm.sh, the user's username and passwo...
CVE-2013-2056
The Inter-Satellite Sync ISS operation in Red Hat Network RHN Satellite 5.3, 5.4, and 5.5 does not properly check client "authenticity," which allows remote attackers to obtain channel content by skipping the initial authentication call...
CVE-2014-2056
PHPDocX, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity XXE attack...
CVE-2014-2056
CVE-2014-2056 affects ownCloud Server via the PHPDocX library. Affected: ownCloud Server < 5.0.15 and
Ubuntu 12.04 LTS : djvulibre vulnerability (USN-2056-1)
It was discovered that DjVuLibre incorrectly handled certain memory operations. If a user or automated system were tricked into processing a specially crafted DjVu file, applications could be made to crash, resulting in a denial of service, or possibly execute arbitrary code. Note that Tenable...
CVE-2013-2056
The Inter-Satellite Sync ISS operation in Red Hat Network RHN Satellite 5.3, 5.4, and 5.5 does not properly check client "authenticity," which allows remote attackers to obtain channel content by skipping the initial authentication call...
CVE-2013-2056
The CVE-2013-2056 entry concerns Red Hat Network Satellite (RHN Satellite) versions 5.3–5.5 (Spacewalk-backend). The vulnerability stems from the Inter-Satellite Sync (ISS) operation not properly verifying client authenticity, enabling a remote attacker to obtain channel content by bypassing the ...
RHEL 5 / 6 : spacewalk-backend in Satellite Server (RHSA-2013:0848)
Updated spacewalk-backend packages that fix one security issue are now available for Red Hat Network Satellite 5.3, 5.4, and 5.5. The Red Hat Security Response Team has rated this update as having a moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...
Moderate: Red Hat Security Advisory: Red Hat Network Satellite spacewalk-backend security update
Updated spacewalk-backend packages that fix one security issue are now available for Red Hat Network Satellite 5.3, 5.4, and 5.5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...
CVE-2012-2056
Content Lock (Drupal) is affected by a CSRF vulnerability due to the module not using a token for unlocking content, enabling an attacker to hijack the authentication of victims via CSRF vectors described in the Drupal advisory. Affected versions: all Content Lock releases. Exploitation details a...