openSUSE 10 Security Update : hal (hal-6085)

The dbus package used a too permissive configuration. Therefore intended access control for some services was not applied CVE-2008-4311. The new configuration denies access by default. Some dbus services may break due to this setting and need an updated configuration as well. %NASLMINLEVEL 70300 ...

openSUSE 10 Security Update : dbus-1 (dbus-1-5972)

The dbus package used a too permissive configuration. Therefore intended access control for some services was not applied CVE-2008-4311. The new configuration denies access by default. Some dbus services may break due to this setting and need an updated configuration as well. %NASLMINLEVEL 70300 ...

openSUSE 10 Security Update : hal (hal-6037)

The dbus package used a too permissive configuration. Therefore intended access control for some services was not applied CVE-2008-4311. The new configuration denies access by default. Some dbus services may break due to this setting and need an updated configuration as well. %NASLMINLEVEL 70300 ...

Fedora Update for dbus FEDORA-2008-10907

Check for the Version of dbus OpenVAS Vulnerability Test Fedora Update for dbus FEDORA-2008-10907 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora Update for dbus FEDORA-2008-10733

Check for the Version of dbus OpenVAS Vulnerability Test Fedora Update for dbus FEDORA-2008-10733 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora Update for dbus FEDORA-2008-10733

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2008-4311

The default configuration of system.conf in D-Bus aka DBus before 1.2.6 omits the sendtype attribute in certain rules, which allows local users to bypass intended access restrictions by 1 sending messages, related to sendrequestedreply; and possibly 2 receiving messages, related to...

CVE-2008-4311

The CVE-2008-4311 issue affects D‑Bus (dbus) before 1.2.6 where the default system.conf rule set omits the send_type attribute. This can allow local users to bypass access controls by manipulating send_requested_reply (and potentially receive_requested_reply), enabling unauthorized message sendin...

Debian Security Advisory DSA 1503-2 (kernel-source-2.4.27 (2.4.27-10sarge7))

The remote host is missing an update to kernel-source-2.4.27 2.4.27-10sarge7 announced via advisory DSA 1503-2. OpenVAS Vulnerability Test $Id: deb15032.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1503-2 kernel-source-2.4.27 2.4.27-10sarge7 Authors:...

[SECURITY] [DSA 1503-1] New Linux kernel 2.4.27 packages fix several issues

------------------------------------------------------------------------ Debian Security Advisory DSA-1503 [email protected] http://www.debian.org/security/ dann frazier February 22, 2008 http://www.debian.org/security/faq -...

DSA-1503-1 kernelimage-2.4.27 - several issues

Bulletin has no description...

CVE-2007-4311

The xfersecondarypool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operations on only the first few bytes of a buffer, which might make it easier for attackers to predict the output of the random number generator, related to incorrect use of the sizeof...

BELL-CVE-2007-4311 CVE-2007-4311 does not affect BellSoft software

Bulletin has no description...

CVE-2007-4311

The CVE-2007-4311 issue affects the Linux kernel random driver (drivers/char/random.c) where reseed operations reuse only the first bytes of a buffer due to incorrect use of sizeof, reducing entropy and potentially making RNG output more predictable. It is described for Linux 2.4.x builds prior t...

CVE-2006-4311

The CVE-2006-4311 entry describes a PHP remote file inclusion in Sonium Enterprise Adressbook 0.2. The vulnerability allows an attacker to execute arbitrary PHP code by passing a crafted value to the folder parameter in multiple plugin files in the plugins directory (e.g., plugins/1_Adressbuch/de...

CVE-2006-4311

PHP remote file inclusion vulnerability in Sonium Enterprise Adressbook 0.2 allows remote attackers to execute arbitrary PHP code via the folder parameter in multiple files in the plugins directory, as demonstrated by plugins/1Adressbuch/delete.php...

CVE-2005-4311

DCForum 6.25 and earlier (and possibly DCForum+ 1.x) are affected by a Cross-site Scripting (XSS) vulnerability. The issue allows remote attackers to inject arbitrary scripts via the page parameter in dcboard.php and via unspecified search parameters. Public references indicate an XSS with a CVSS...

CVE-2005-4311

Cross-site scripting XSS vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attackers to inject arbitrary web script or HTML via 1 the page parameter in dcboard.php and 2 unspecified search parameters...