CVE-2016-5410

A flaw was found in the way firewalld allowed certain firewall configurations to be modified by unauthenticated users. Any locally logged in user could use this flaw to tamper or change firewall settings...

Scientific Linux Security Update : firewalld on SL7.x (noarch) (20161103)

The following packages have been upgraded to a newer upstream version: firewalld 0.4.3.2. Security Fixes : - A flaw was found in the way firewalld allowed certain firewall configurations to be modified by unauthenticated users. Any locally logged in user could use this flaw to tamper or change...

Oracle Linux 7 : firewalld (ELSA-2016-2597)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2597 advisory. - Fixed CVE-2016-5410 RHBZ1359296 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has n...

firewalld security, bug fix, and enhancement update

0.4.3.2-8 - Exclude firewallctl RHBZ1374799 0.4.3.2-7 - Tolerate ipv6rpfilter fail RHBZ1285769 - Fix setrules to copy the rule before extracting the table RHBZ1373260 - Translation update RHBZ1273296 - Conflict with NetworkManager 1:1.4.0-3.el7 RHBZ1366288 0.4.3.2-6 - Do not use exit code 254 for...

RHEL 7 : firewalld (RHSA-2016:2597)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:2597 advisory. firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface. The following packages have been upgrade...

RedHat Update for firewalld RHSA-2016:2597-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 24 : firewalld (2016-de55d2c2c9)

Fix CVE-2016-5410: Firewall configuration can be modified by any logged in user - firewall/server/firewalld: Make getXSettings and getLogDenied CONFIGINFO - Update AppData configuration file. - tests/firewalldrich.py: Use new import structure and FirewallClient classes - tests/firewallddirect.py:...

Rockwell Automation Allen-Bradley Stratix 5400 and 5410 Packet Corruption Vulnerability

OVERVIEW Rockwell Automation has identified a resource management vulnerability in Rockwell Automation’s Allen-Bradley Stratix 5400 and Allen-Bradley Stratix 5410 industrial networking switches. Rockwell Automation has produced a new firmware version to mitigate this vulnerability. This...

CVE-2015-5410

HP Version Control Repository Manager VCRM before 7.5.0 allows remote authenticated users to execute arbitrary code or cause a denial of service via unspecified vectors...

CVE-2015-5410

HP Version Control Repository Manager (VCRM) prior to 7.5.0 is affected by multiple vulnerabilities including CVE-2015-5410, where remote authenticated users can execute arbitrary code or cause a denial of service via unspecified vectors. The HP Security Bulletin HPSBMU03396 (rev.1, 2015-08-24) d...

CVE-2015-5410

HP Version Control Repository Manager VCRM before 7.5.0 allows remote authenticated users to execute arbitrary code or cause a denial of service via unspecified vectors...

CVE-2014-5410

The DNP3 feature on Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx A FRN controllers 7 and earlier and 1400 1766-Lxxxxx B FRN controllers before 15.001 allows remote attackers to cause a denial of service process disruption via malformed packets over 1 an Ethernet network or 2 a...

CVE-2014-5410

The CVE-2014-5410 issue affects Rockwell Automation Allen-Bradley MicroLogix 1400 Series A FRN (1766-LxxxxxA) controllers version 7 and earlier and Series B FRN controllers before 15.001, where the DNP3 feature can be abused by malformed packets over Ethernet or a serial line to cause a DoS (loss...

MySQL Server Suspicious Command Detection

Binary data 5410.prm...

CVE-2008-5410

CVE-2008-5410 concerns Solaris 10: the PK11_SESSION cache in the OpenSSL PKCS#11 engine does not maintain reference counts for operations with asymmetric keys, enabling context-dependent denial of service during RSA_sign/RSA_verify operations. The issue affects SunOS/Solaris 10 environments using...

CVE-2007-5410

CVE-2007-5410 affects the Joomla! component com_wmtrssreader (admin.wmtrssreader.php) in the webmaster-tips.net Flash RSS Reader 1.0. The vulnerability is a PHP remote file inclusion that allows an attacker to supply a URL via mosConfig_live_site to cause remote code execution. The connected docu...

CVE-2006-5410

CVE-2006-5410 is a PHP remote file inclusion vulnerability in BoonEx Dolphin 5.2. The issue affects templates/tmpl_dfl/scripts/index.php and allows an attacker to execute arbitrary PHP code by supplying a URL in the dir[inc] parameter. This results in remote code execution with partial confidenti...