Ubuntu 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : libvirt vulnerabilities (USN-1008-1)

It was discovered that libvirt would probe disk backing stores without consulting the defined format for the disk. A privileged attacker in the guest could exploit this to read arbitrary files on the host. This issue only affected Ubuntu 10.04 LTS. By default, guests are confined by an AppArmor...

Ubuntu 10.04 LTS : virtinst update (USN-1008-2)

Libvirt in Ubuntu 10.04 LTS now no longer probes qemu disks for the image format and defaults to 'raw' when the format is not specified in the XML. This change in behavior breaks virt-install --import because virtinst in Ubuntu 10.04 LTS did not allow for specifying a disk format and does not...

USN-1008-2: Virtinst update

Libvirt in Ubuntu 10.04 LTS now no longer probes qemu disks for the image format and defaults to 'raw' when the format is not specified in the XML. This change in behavior breaks virt-install --import because virtinst in Ubuntu 10.04 LTS did not allow for specifying a disk format and does not...

USN-1008-1: libvirt vulnerabilities

It was discovered that libvirt would probe disk backing stores without consulting the defined format for the disk. A privileged attacker in the guest could exploit this to read arbitrary files on the host. This issue only affected Ubuntu 10.04 LTS. By default, guests are confined by an AppArmor...

openSUSE Security Update : libvirt (openSUSE-SU-2010:0620-1)

libvirt did not properly handle configured disk formats which potenially allowed users to read arbitrary files CVE-2010-2237, CVE-2010-2238, CVE-2010-2239 Improperly mapped source privileged ports in guests may allow obtaining privileged resources on the host CVE-2010-2242. %NASLMINLEVEL 70300 C...

CVE-2010-2237

Red Hat libvirt, possibly 0.6.1 through 0.8.2, looks up disk backing stores without referring to the user-defined main disk format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors...

CVE-2010-2237

CVE-2010-2237 affects libvirt (notably Red Hat libvirt 0.6.1–0.8.2) where probing of disk backing stores occurs without validating the user‑defined main disk format. This could allow a privileged guest user to read arbitrary files on the host via unknown vectors; other impact is not clearly speci...

Fedora Update for libvirt FEDORA-2010-11021

Check for the Version of libvirt OpenVAS Vulnerability Test Fedora Update for libvirt FEDORA-2010-11021 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for libvirt FEDORA-2010-10960

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2006-2237

creationtimestamp| type| source ---|---|--- 2010-07-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16886 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/awstatsmigrateexec.rb 2025-02-06 03:13:38+00:00| see...

AWStats 6.4 < 6.5 - migrate Remote Command Execution (Metasploit)

$Id: awstatsmigrateexec.rb 9671 2010-07-03 06:21:31Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

openSUSE Security Update : OpenOffice_org (OpenOffice_org-288)

This update fixes an integer overflow in the WMF handler CVE-2008-2237 and multiple bugs in the EMF parser CVE-2008-2238. Additionally multiple non-security fixes were added. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

CVE-2009-2237

The CVE-2009-2237 entry concerns the Drupal Views Bulk Operations module (Drupal: VBO) with vulnerable versions: 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7. The vulnerability allows remote attackers to bypass intended access restrictions and modify created content ("nodes or classes of nod...

CentOS 3 / 5 : openoffice.org (CESA-2008:0939)

Updated openoffice.org packages that correct security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop...

Mandriva Linux Security Advisory : openoffice.org (MDVSA-2009:006)

Heap-based overflow on functions to manipulate WMF and EMF files in OpenOffice.org documments enables remote attackers to execute arbitrary code on documments holding certain crafted either WMF or EMF files CVE-2008-2237 CVE-2008-2238. This update provide the fix for these security issues and...

Ubuntu 8.04 LTS : openoffice.org-l10n update (USN-677-2)

USN-677-1 fixed vulnerabilities in OpenOffice.org. The changes required that openoffice.org-l10n also be updated for the new version in Ubuntu 8.04 LTS. Multiple memory overflow flaws were discovered in OpenOffice.org's handling of WMF and EMF files. If a user were tricked into opening a speciall...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : openoffice.org, openoffice.org-amd64 vulnerabilities (USN-677-1)

Multiple memory overflow flaws were discovered in OpenOffice.org's handling of WMF and EMF files. If a user were tricked into opening a specially crafted document, a remote attacker might be able to execute arbitrary code with user privileges. CVE-2008-2237, CVE-2008-2238 Dmitry E. Oboukhov...

Ubuntu: Security Advisory (USN-677-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Core 9 FEDORA-2009-2237 (mediawiki)

The remote host is missing an update to mediawiki announced via advisory FEDORA-2009-2237. OpenVAS Vulnerability Test $Id: fcore20092237.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-2237 mediawiki Authors: Thomas Reinke Copyright: Copyright c 200...

Fedora Core 9 FEDORA-2009-2237 (mediawiki)

The remote host is missing an update to mediawiki announced via advisory FEDORA-2009-2237. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...