Ubuntu: Security Advisory (USN-778-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-2607

CVE-2008-2607 concerns Oracle Database Advanced Queuing (SYS.DBMS_AQELM). The CVE entry notes an unspecified vulnerability in Oracle Database versions 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 with remote authenticated attack vectors related to SYS.DBMS_AQELM. The public material refer...

Debian Security Advisory DSA 1018-1 (kernel-source-2.4.27)

The remote host is missing an update to kernel-source-2.4.27 announced via advisory DSA 1018-1. For details on the issues addressed with this update, please visit the referenced security advisories. OpenVAS Vulnerability Test $Id: deb10181.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description:...

Debian: Security Advisory (DSA-1018-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 10 Security Update : cron (cron-1440)

A missing check on the return value of setuid in vixie-cron could be used by a local user to gain root privileges by exhausting resource limits and waiting for a cronjob to trigger. This is tracked by the Mitre CVE ID CVE-2006-2607. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CVE-2007-2607

LaVague 0.3 and earlier suffers a PHP remote file inclusion in views/print/printbar.php, exploitable via a URL in the views_path parameter. Connected sources confirm this vulnerability type (RFI) and cite an impact consistent with arbitrary code execution on affected installations. The issue is t...

Important: Red Hat Security Advisory: vixie-cron security update

Updated vixie-cron packages that fix a privilege escalation issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The vixie-cron package contains the Vixie version of cron. Cron is a standard UNIX daemon that runs specified...

CVE-2006-2607

docommand.c in Vixie cron vixie-cron 4.1 does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits, as originally demonstrated by a program that exceeds the process limits as defined in...

CVE-2006-2607

CVE-2006-2607 refers to a local privilege escalation in vixie-cron 4.1 where do_command.c does not check the return value of setuid(), potentially allowing a root gain if setuid() fails (e.g., PAM limits or resource limits). Connected advisories confirm this vulnerability and document patches/ups...

[SECURITY] [DSA 1018-2] New Linux kernel 2.4.27 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1018-2 [email protected] http://www.debian.org/security/ Dann Frazier, Simon Horman April 5th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1018-1] New Linux kernel 2.4.27 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1018-1 [email protected] http://www.debian.org/security/ Dann Frazier, Simon Horman March 26th, 2006 http://www.debian.org/security/faq -...

CVE-2005-3965

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-2607. Reason: This candidate is a duplicate of CVE-2004-2607. Notes: All CVE users should reference CVE-2004-2607 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-3965

CVE-2005-3965 is marked as a duplicate of CVE-2004-2607 (Rejected reason in description). Connected documents confirm CVE-2004-2607 exists and describes a numeric casting discrepancy in sdla_xfer for Linux kernels (2.6.x up to 2.6.5 and 2.4 up to 2.4.29-rc1) that can allow local users to read ker...

CVE-2004-2607

A numeric casting discrepancy in sdlaxfer in Linux kernel 2.6.x up to 2.6.5 and 2.4 up to 2.4.29-rc1 allows local users to read portions of kernel memory via a large len argument, which is received as an int but cast to a short, which prevents a read loop from filling a buffer...