CVE-2012-5964

creationtimestamp| type| source ---|---|--- 2013-02-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24455...

[SECURITY] [DSA 2615-1] libupnp4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2615-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez February 01, 2013 http://www.debian.org/security/faq -...

Portable SDK for UPnP Devices (libupnp) < 1.6.18 Multiple Stack-based Buffer Overflows RCE

According to its banner, the version of Portable SDK for UPnP Devices libupnp running on the remote host is prior to 1.6.18. It is, therefore, affected by multiple remote code execution vulnerabilities : - A stack-based buffer overflow condition exists in the uniqueservicename function within fil...

CVE-2012-5964

CVE-2012-5964 is a stack-based buffer overflow in libupnp’s unique_service_name() (ssdp_server.c) of the Portable SDK for UPnP Devices. Exploitation via a long ServiceType in a UDP packet could allow remote code execution. OpenSUSE openSUSE-SU-2013:0255-1 (and related advisories for libupnp) desc...

Scientific Linux Security Update : autofs on SL5.x i386/x86_64

There was a security issue with the default installed configuration of autofs version 5 whereby the entry for the 'hosts' map did not specify the 'nosuid' mount option. A local user with control of a remote nfs server could create a setuid root executable within an exported filesystem on the remo...

CentOS 5 : autofs (CESA-2007:1176)

Updated autofs packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The autofs utility controls the operation of the automount daemon, which automatically mounts...

CentOS 5 : autofs (CESA-2007:1128)

Updated autofs packages are now available to fix a security flaw for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The autofs utility controls the operation of the automount daemon, which automatically mounts and...

Mandriva Linux Security Advisory : autofs (MDVSA-2008:009-1)

The default behaviour of autofs 5 for the hosts map did not specify the nosuid and nodev mount options. This could allow a local user with control of a remote NFS server to create a setuid root executable on the exported filesystem of the remote NFS server. If this filesystem was mounted with the...

Mandriva Update for autofs MDVSA-2008:009-1 (autofs)

Check for the Version of autofs OpenVAS Vulnerability Test Mandriva Update for autofs MDVSA-2008:009-1 autofs Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

RedHat Update for autofs5 RHSA-2007:1129-01

Check for the Version of autofs5 OpenVAS Vulnerability Test RedHat Update for autofs5 RHSA-2007:1129-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for autofs5 RHSA-2007:1177-01

Check for the Version of autofs5 OpenVAS Vulnerability Test RedHat Update for autofs5 RHSA-2007:1177-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS Update for autofs5 CESA-2007:1177 centos4 i386

Check for the Version of autofs5 OpenVAS Vulnerability Test CentOS Update for autofs5 CESA-2007:1177 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for autofs FEDORA-2007-4707

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for autofs FEDORA-2007-4709

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for autofs FEDORA-2007-4532

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2008-5964

CVE-2008-5964 affects Social ImpressCMS prior to 1.1.1 RC1. There is a session fixation flaw: an attacker can set the PHPSESSID to hijack a web session. Impact as described: confidentiality, integrity, and availability can be partially affected; no exploitation details are provided. Remediation p...

Important: Red Hat Security Advisory: autofs security update

Updated autofs packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The autofs utility controls the operation of the automount daemon, which automatically mounts...

Fedora 7 : autofs-5.0.1-29 (2007-4469)

Thu Dec 13 2007 Ian Kent - 5.0.1-29 - Bug 421351: CVE-2007-5964 autofs defaults don't restrict suid in /net f7 - use mount option 'nosuid' for '-hosts' map unless 'suid' is explicily specified. - Wed Sep 5 2007 Ian Kent - 5.0.1-28 - add ldaps support required by schema discovery. - add back LDAP...

CVE-2007-5964

The CVE-2007-5964 issue affects autofs5 (notably in Red Hat Enterprise Linux 5 and related Oracle/CentOS variants) where the default hosts map did not apply the nosuid mount option. Root cause: /net (hosts) map mounted with suid by default, enabling a local attacker controlling a remote NFS serve...

CVE-2007-5964

The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise Linux RHEL 5, omits the nosuid option for the hosts /net filesystem map, which allows local users to gain privileges via a setuid program on a remote NFS server...