72 matches found
CVE-2008-6285
creationtimestamp| type| source ---|---|--- 2008-11-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7284...
CentOS 4 : autofs5 (CESA-2007:1177)
Updated autofs5 technology preview packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The autofs utility controls the operation of the automount daemon, which...
Fedora 8 : autofs-5.0.2-24 (2007-4707)
Fri Dec 21 2007 Ian Kent - 5.0.2-24 - Bug 426400: CVE-2007-6285 autofs default doesn't set nodev in /net f8 - use mount option 'nodev' for '-hosts' map unless 'dev' is explicily specified. - Tue Dec 18 2007 Ian Kent - 5.0.2-22 - Bug 397591 SELinux is preventing /sbin/rpc.statd rpcdt 'search' to...
RHEL 4 : autofs5 (RHSA-2007:1177)
Updated autofs5 technology preview packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The autofs utility controls the operation of the automount daemon, which...
Fedora 7 : autofs-5.0.1-31 (2007-4709)
Fri Dec 21 2007 Ian Kent - 5.0.1-31 - Bug 426399: CVE-2007-6285 autofs default doesn't set nodev in /net f7 - use mount option 'nodev' for '-hosts' map unless 'dev' is explicily specified. - Tue Dec 18 2007 Ian Kent - 5.0.1-30 - Bug 397591 SELinux is preventing /sbin/rpc.statd rpcdt 'search' to...
CVE-2007-6285
The default configuration for autofs 5 autofs5 in some Linux distributions, such as Red Hat Enterprise Linux RHEL 4 and 5, does not specify the nodev mount option for the -hosts map, which allows local users to access "important devices" by operating a remote NFS server and creating special devic...
CVE-2007-6285
CVE-2007-6285 concerns autofs5 in some Linux distros (notably RHEL4/5) where the default -hosts map lacked the nodev mount option. This allowed a local user who controls a remote NFS server to create device files on that server and potentially access important devices on the client via the defaul...
autofs5 security update
CentOS Errata and Security Advisory CESA-2007:1177 Updated autofs5 technology preview packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The autofs utility...
Important: Red Hat Security Advisory: autofs security update
Updated autofs packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The autofs utility controls the operation of the automount daemon, which automatically mounts...
Important: autofs security update
5.0.1-0.rc2.55.el5.2 - Bug 426219: CVE-2007-6285 autofs default doesn't set nodev in /net rhel-5.1.z - use mount option nodev for -hosts map unless dev is explicily specified. - Related: rhbz426219...
Important: autofs5 security update
5.0.1-0.rc2.55.el46.2 - Bugzilla Bug 426221: CVE-2007-6285 autofs default doesn't set nodev in /net rhel-4.6.z - use mount option nodev for -hosts map unless dev is explicily specified. - Related: rhbz426221...
CVE-2006-6285
CVE-2006-6285 affects Kai Blankenhorn Bitfolge (snif) up to version 1.5.2. The issue is a PHP remote file inclusion vulnerability in index.php via the externalConfig parameter, enabling arbitrary PHP code execution. Note: CVE entries and third parties dispute the vulnerability because externalCon...