Mandriva Linux Security Advisory : ipmitool (MDVSA-2011:196)

A vulnerability has been discovered and corrected in ipmitool : ipmievd as used in the ipmitool package uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file CVE-2011-4339. In Mandriva the ipmievd daemon from the ipmitool...

CentOS 6 : ipmitool (CESA-2011:1814)

An updated ipmitool package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update

An updated rhev-hypervisor6 package that fixes one security issue and two bugs is now available. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

CVE-2011-4339

ipmievd aka the IPMI event daemon in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux RHEL 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this fil...

CVE-2011-4339

OpenIPMI’s ipmievd daemon (as used by ipmitool 1.8.11 on RHEL6, Debian, Fedora 16 and other products) creates a world-writable ipmievd.pid (0666), enabling a local user to kill arbitrary processes. CVE-2011-4339 is cited across multiple advisories (e.g., MiracleLinux AXSA entries, Oracle Linux RH...

CVE-2010-4339

Cross-site scripting XSS vulnerability in Hypermail 2.2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted From address, which is not properly handled when indexing messages...

CVE-2010-4339

CVE-2010-4339 affects Hypermail 2.2.0 with a Cross-site scripting (XSS) vulnerability caused by improper handling of the From address during message indexing. Remote attackers can inject arbitrary web script or HTML via a crafted From header. The established records identify the vulnerability as ...

CVE-2010-4339

Cross-site scripting XSS vulnerability in Hypermail 2.2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted From address, which is not properly handled when indexing messages...

FreeBSD Ports: openoffice.org

The remote host is missing an update to the system as announced in the referenced advisory. VID c97d7a37-2233-11df-96dd-001b2134ef46 OpenVAS Vulnerability Test $ Description: Auto generated from VID c97d7a37-2233-11df-96dd-001b2134ef46 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

FreeBSD Ports: openoffice.org

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

OpenOffice < 3.2 Multiple Vulnerabilities

Binary data 5339.prm...

RHEL 4 : Solaris client in Satellite Server (RHSA-2008:0264)

Red Hat Network Satellite Server version 5.0.2 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server Solaris client components. This update has been rated as having moderate security impact by the Red Hat Security Response Team. This...

CVE-2009-4339

CVE-2009-4339 describes an SQL injection vulnerability in the TYPO3 Subscription extension mf_subscription 0.2.2, allowing remote attackers to execute arbitrary SQL commands via unknown vectors. The connected documents provide the vulnerability description and CVSS metrics but do not include vend...

SLES9: Security update for bind

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: bind bind-utils For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015338 within...

SLES9: Security update for bind

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: bind bind-utils For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015338 within...

Solaris Update for kernel 120011-14

Check for the Version of kernel OpenVAS Vulnerability Test Solaris Update for kernel 120011-14 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Solaris Update for pkg utilities 114568-26

Check for the Version of pkg utilities OpenVAS Vulnerability Test Solaris Update for pkg utilities 114568-26 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Solaris Update for bootconfchk 123376-01

Check for the Version of bootconfchk OpenVAS Vulnerability Test Solaris Update for bootconfchk 123376-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Solaris Update for bootconfchk 123377-01

Check for the Version of bootconfchk OpenVAS Vulnerability Test Solaris Update for bootconfchk 123377-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Solaris Update for bootconfchk 123377-01

Check for the Version of bootconfchk OpenVAS Vulnerability Test Solaris Update for bootconfchk 123377-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...