CVE-2011-2059

The CVE-2011-2059 issue affects Cisco IOS IPv6: the IPv6 component is vulnerable to fingerprinting/information disclosure via an ICMPv6 Echo Request containing a Hop-by-Hop extension header with PadN data 0x0c01050c. Affected: Cisco IOS prior to 15.1(4)M1.3. Impact described as potential exposure...

VMSA-2011-0004 : VMware ESX/ESXi SLPD denial of service vulnerability and ESX third-party updates for Service Console packages bind, pam, and rpm.

a. Service Location Protocol daemon DoS This patch fixes a denial-of-service vulnerability in the Service Location Protocol daemon SLPD. Exploitation of this vulnerability could cause SLPD to consume significant CPU resources. VMware would like to thank Nicolas Gregoire and US CERT for reporting...

SuSE 10 Security Update : popt (ZYPP Patch Number 7069)

This update fixes a security problem where RPM misses to clear the SUID/SGID bit of old files during package updates. CVE-2010-2059 Also the following bugs were fixed : - do not use glibc for passwd/group lookups when --root is used bnc536256 - disable cpio md5 checking for repackaged rpms...

Mandriva Update for rpm MDVSA-2010:180 (rpm)

Check for the Version of rpm OpenVAS Vulnerability Test Mandriva Update for rpm MDVSA-2010:180 rpm Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Mandriva Update for rpm MDVSA-2010:180 (rpm)

Check for the Version of rpm OpenVAS Vulnerability Test Mandriva Update for rpm MDVSA-2010:180 rpm Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

openSUSE Security Update : rpm (openSUSE-SU-2010:0627-1)

This update fixes the problem where RPM misses to clear the SUID/SGID bit of old files during package updates. CVE-2010-2059 Also following bugs were fixed : - backport nosource/nopatch srpm tag generation fix - backport spurious tar message fix bnc558475 - do not use glibc for passwd/group looku...

Mandriva Linux Security Advisory : rpm (MDVSA-2010:180)

A vulnerability has been found and corrected in rpm : lib/fsm.c in RPM 4.8.0 and unspecified 4.7.x and 4.6.x versions, and RPM before 4.4.3, does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade, which might allow local users to gain...

CentOS Update for popt CESA-2010:0678 centos4 i386

Check for the Version of popt OpenVAS Vulnerability Test CentOS Update for popt CESA-2010:0678 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

RedHat Update for rpm RHSA-2010:0679-01

Check for the Version of rpm OpenVAS Vulnerability Test RedHat Update for rpm RHSA-2010:0679-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

RedHat Update for rpm RHSA-2010:0679-01

Check for the Version of rpm OpenVAS Vulnerability Test RedHat Update for rpm RHSA-2010:0679-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

popt, rpm security update

CentOS Errata and Security Advisory CESA-2010:0678 Updated rpm packages that fix two security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores,...

RHEL 4 : rpm (RHSA-2010:0678)

Updated rpm packages that fix two security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are availabl...

rpm security update

4.3.3-33nonptl - fix CVE-2010-2059, fails to drop SUID/SGID bits on package upgrade 626709 - add dist tag...

openSUSE Security Update : popt (openSUSE-SU-2010:0428-1)

This update fixes the problem where RPM misses to clear the SUID/SGID bit of old files during package updates. CVE-2010-2059 Also the following bug was fixed: do not use glibc for passwd/group lookups when --root is used bnc536256 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...

Fedora Update for rpm FEDORA-2010-9829

Check for the Version of rpm OpenVAS Vulnerability Test Fedora Update for rpm FEDORA-2010-9829 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora Update for rpm FEDORA-2010-10617

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for rpm FEDORA-2010-9829

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 13 : rpm-4.8.1-2.fc13 (2010-9829)

Wed Jun 30 2010 Panu Matilainen - 4.8.1-2 - plug a tiny race on sbit/capability removal - Mon Jun 14 2010 Panu Matilainen - 4.8.1-1 - update to 4.8.1 http://rpm.org/wiki/Releases/4.8.1 - drop no longer needed patches - fix source url pointing to testing directory - fixes CVE-2010-2059 / 598934 -...

Debian: Security Advisory (DSA-2059-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2059-1 : pcsc-lite - buffer overflow

It was discovered that PCSCD, a daemon to access smart cards, was vulnerable to a buffer overflow allowing a local attacker to elevate his privileges to root. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...