123 matches found
openSUSE Security Update : lvm2 (openSUSE-SU-2010:0615-1)
clvmd allowed unprivileged users to issue arbitrary lvm commands CVE-2010-2526. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update lvm2-2920. The text description of this plugin is C SUSE LLC...
Fedora Update for udisks FEDORA-2010-13708
Check for the Version of udisks OpenVAS Vulnerability Test Fedora Update for udisks FEDORA-2010-13708 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Fedora 13 : lvm2-2.02.73-2.fc13 / udisks-1.0.1-4.fc13 (2010-13708)
This update addresses a security problem when using the clustered LVM daemon clvmd from the package lvm2-cluster on systems where you have non-root users. The lvm2 package on its own is not vulnerable to this problem but if you are using lvm2-cluster you must update both together. Further details...
[SECURITY] [DSA 2095-1] New lvm2 packages fix denial of service
------------------------------------------------------------------------ Debian Security Advisory DSA-2095-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano August 23, 2010 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2095-1] New lvm2 packages fix denial of service
------------------------------------------------------------------------ Debian Security Advisory DSA-2095-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano August 23, 2010 http://www.debian.org/security/faq -...
CVE-2010-2526
The cluster logical volume manager daemon clvmd in lvm2-cluster in LVM2 before 2.02.72, as used in Red Hat Global File System GFS and other products, does not verify client credentials upon a socket connection, which allows local users to cause a denial of service daemon exit or logical-volume...
CVE-2010-2526
CVE-2010-2526 affects the cluster logical volume manager daemon (clvmd) in LVM2-cluster (LVM2) before 2.02.72 . The issue arises because clvmd does not verify credentials of clients over its control socket, enabling local users to issue crafted commands that can cause the daemon to exit, or to ac...
CentOS 5 : lvm2-cluster (CESA-2010:0567)
An updated lvm2-cluster package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...
Moderate: Red Hat Security Advisory: lvm2-cluster security update
An updated lvm2-cluster package that fixes one security issue is now available for Red Hat Global File System for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...
lvm2-cluster security update
2.02.56-el55.4 - CVE-2010-2526: Fix insecurity when communicating between lvm2 and clvmd. Resolves: 616044...
Microsoft Windows SMB2 Negotiation Protocol RCE Vulnerability
This host is missing a critical security update according to Microsoft Bulletin MS09-050. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2009-2526
The CVE-2009-2526 family affects Windows Vista (Gold, SP1, SP2) and Windows Server 2008 (Gold/SP2) SMBv2 by failing to validate fields in SMBv2 packets, causing a denial of service (infinite loop) via crafted packets to the Server service. Related CVEs (CVE-2009-2532 and CVE-2009-3103) cover SMBv...
CVE-2009-2526
Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 do not properly validate fields in SMBv2 packets, which allows remote attackers to cause a denial of service infinite loop and system hang via a crafted packet to the Server service, aka "SMBv2 Infinite Loop Vulnerability."...
Microsoft SMB Infinite Loop Denial of Service (MS09-050; CVE-2009-2526)
The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A denial of service vulnerability has been reported in the way that Microsoft Server Message Block SMB Protocol software handles specially crafted SMB version 2 SMBv2 packets. The vulnerability is due to...
MS09-050: Vulnerabilities in SMBv2 Could Allow Remote Code Execution (975517) (EDUCATEDSCHOLAR)
The remote Windows host contains a vulnerable SMBv2 implementation with the following issues : - A specially crafted SMBv2 packet can cause an infinite loop in the Server service. A remote, unauthenticated attacker can exploit this to cause a denial of service. CVE-2009-2526 - Sending a specially...
CVE-2008-2526
Cross-site scripting XSS vulnerability in the WT Gallery aka wtgallery extension 2.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-2526
The CVE-2008-2526 entry concerns the TYPO3 WT Gallery (wt_gallery) extension, affected in version 2.6.2 and earlier. The vulnerability is a Cross-site Scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected sources confirm th...
CVE-2007-2526
Heap-based buffer overflow in the ConnectAsyncEx function in VNC Viewer ActiveX control scvncctrl.dll in the SmartCode VNC Manager 3.6 allows remote attackers to execute arbitrary code via a long argument...
CVE-2007-2526
CVE-2007-2526 describes a heap-based buffer overflow in the ConnectAsyncEx function of the VNC Viewer ActiveX control (scvncctrl.dll) used by SmartCode VNC Manager 3.6, enabling remote code execution via a long argument. The connected sources confirm the vulnerable component and impact but do not...