129 matches found
[SECURITY] [DSA 2761-1] puppet security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2761-1 [email protected] http://www.debian.org/security/ Raphael Geissert September 19, 2013 http://www.debian.org/security/faq -...
DSA-2761-1 puppet - several
Bulletin has no description...
CVE-2013-4956
Puppet Module Tool PMT, as used in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet Enterprise 2.8.x before 2.8.3 and 3.0.x before 3.0.1, installs modules with weak permissions if those permissions were used when the modules were originally built, which might allow local users to rea...
CVE-2013-4956
CVE-2013-4761 and CVE-2013-4956 affect Puppet and Puppet Enterprise. The resource_type service flaw could allow a local attacker to cause the Puppet Master to load arbitrary Ruby code from the master filesystem, given access to the Puppet Master. Puppet Module Tool (PMT) can install modules with ...
Ubuntu: Security Advisory (USN-1928-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu Update for puppet USN-1928-1
Check for the Version of puppet OpenVAS Vulnerability Test $Id: gbubuntuUSN19281.nasl 7958 2017-12-01 06:47:47Z santu $ Ubuntu Update for puppet USN-1928-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...
Ubuntu 12.04 LTS / 12.10 / 13.04 : puppet vulnerabilities (USN-1928-1)
It was discovered that Puppet incorrectly handled the resourcetype service. A local attacker on the master could use this issue to execute arbitrary Ruby files. CVE-2013-4761 It was discovered that Puppet incorrectly handled permissions on the modules it installed. Modules could be installed with...
NFR Agent Heap Overflow (CVE-2012-4956)
...
CVE-2012-4956
CVE-2012-4956 affects Novell File Reporter 1.0.2; NFRAgent.exe suffers a heap-based buffer overflow triggered by a large number of VOL elements in an SRS record, enabling remote code execution. Public references in connected documents confirm related exploit activity: CIRCL sightings point to a M...
CVE-2011-4956
Cross-site scripting XSS vulnerability in WordPress before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2011-4956
WordPress is affected by CVE-2011-4956: an XSS vulnerability in versions prior to 3.1.1 that allows remote attackers to inject arbitrary script or HTML via unspecified vectors. The issue is documented across multiple sources (NVD entry CVE-2011-4956 and related advisories) and has been addressed ...
CVE-2011-4956
Cross-site scripting XSS vulnerability in WordPress before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Gentoo Security Advisory GLSA 201201-11 (fwbuilder)
The remote host is missing updates announced in advisory GLSA 201201-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2010-4956
Cross-site scripting XSS vulnerability in the Questionnaire kequestionnaire extension before 2.2.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-4956
CVE-2010-4956 is a cross‑site scripting (XSS) vulnerability in the TYPO3 extension ke_questionnaire (pre-2.2.3). The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the questionnaire component. Connected sources confirm the affected version range as...
SuSE 11.1 Security Update : ecryptfs-utils (SAT Patch Number 4956)
This update of ecryptfs-utils fixes several security problems : - Race condition when checking mountpoint during mount. CVE-2011-1831 - Race condition when checking mountpoint during unmount. CVE-2011-1832 - Race condition when checking source during mount. CVE-2011-1833 - Improper mtab handling...
CVE-2009-4956
CVE-2009-4956 is an XSS vulnerability in TYPO3's Visitor Tracking (ws_stats) extension prior to 0.1.2. Reported vulnerability allows remote attackers to inject arbitrary script/HTML through unspecified vectors, potentially executing code in a victim’s browser without authentication. The issue aff...
ModSecurity Detection
Binary data 4956.prm...
