GLSA-201605-05 : Linux-PAM: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201605-05 Linux-PAM: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Linux-PAM. Please review the CVE identifiers referenced below for details. Impact : Remote attackers could cause Denial of Service,...

Oracle: Security Advisory (ELSA-2008-0364)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2013-2583)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624,...

Design/Logic Flaw

Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624,...

Design/Logic Flaw

Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624,...

Design/Logic Flaw

Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624,...

Design/Logic Flaw

Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2626,...

CVE-2015-2583

Oracle Berkeley DB Data Store component (versions 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35) contains an unspecified local vulnerability affecting confidentiality, integrity, and availability via unknown vectors. This CVE-2015-2583 description distinguishes it from related CVEs; however,...

Ubuntu: Security Advisory (USN-2583-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for pam FEDORA-2014-16350

Check the version of pam SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868616";...

CVE-2012-2583

CVE-2012-2583 involves a stored XSS in the WordPress plugin Mini Mail Dashboard Widget (version 1.42). Connected sources confirm the attack vector is crafted content in the body of an email that is rendered by the plugin, exploiting insufficient input sanitization to execute arbitrary scripts in ...

SuSE 11.3 Security Update : pam (SAT Patch Number 9119)

This update changes the broken default behavior of pampwhistory to not enforce checks when the root user requests password changes. In order to enforce pwhistory checks on the root user, the 'enforceforroot' parameter needs to be set for the pampwhistory.so module. This pam update fixes the...

CVE-2014-2583

Multiple directory traversal vulnerabilities in pamtimestamp.c in the pamtimestamp module for Linux-PAM aka pam 1.1.8 allow local users to create arbitrary files or possibly bypass authentication via a .. dot dot in the 1 PAMRUSER value to the getruser function or 2 PAMTTY value to the checktty...

CVE-2014-2583

CVE-2014-2583 is a vulnerability in the pam_timestamp module of Linux-PAM (pam) 1.1.8 where a crafted ".." in PAM_RUSER or PAM_TTY to format_timestamp_name enables local users to create arbitrary files or potentially bypass authentication via directory traversal in pam_timestamp.c (get_ruser/chec...

Linux-PAM "pam_timestamp"模块目录遍历漏洞

CVE ID:CVE-2014-2583 Linux-PAM是一款基于Linux的插入式验证模块。 通过PAMRUSER和PAMTTY传递的输入在用于创建文件时缺少校验，允许攻击者利用漏洞通过特制的PAMRUSER或PAMTTY值来绕过验证或创建任意文件。 0 Linux-PAM 1.x 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： https://git.fedorahosted.org/cgit/linux-pam.git/commit/?id=Linux-PAM-118-32-g9dcead8...

Fedora Update for mingw-gnutls FEDORA-2014-2583

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-2583

creationtimestamp| type| source ---|---|--- 2013-12-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/30020...

Oracle Linux 6 : Unbreakable Enterprise Kernel (ELSA-2013-2583)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2583 advisory. - HID: pantherlord: validate output report details Kees Cook Orabug: 17841973 CVE-2013-2892 - HID: zeroplus: validate output report details Kees Cook...

Debian: Security Advisory (DSA-2583-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...