Debian: Security Advisory (DLA-1615-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 1615-1] nagios3 security update

Package : nagios3 Version : 3.5.1.dfsg-2+deb8u1 CVE ID : CVE-2013-7108 CVE-2013-7205 CVE-2014-1878 CVE-2016-9566 CVE-2018-18245 Debian Bug : 771466 823721 917138 Several issues were corrected in nagios3, a monitoring and management system for hosts, services and networks. CVE-2018-18245 Maximilia...

CVE-2018-7108

The CVE-2018-7108 issue affects HPE StorageWorks XP7 Automation Director (AutoDir). Versions 8.5.2-02 through before 8.6.1-00 expose a local and remote authentication bypass that can reveal user authentication information, reported under specific conditions when running a service template. This v...

HPESBST03879 rev.1 - HPE StorageWorks XP7 Automation Director (AutoDir), Local and Remote Authentication Bypass

Potential Security Impact: Local: Authentication Bypass; Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP XP7 Automation Director Software 8.5.2-02 to earlier than 8.6.1-00 HP XP7 Automation Director Software 8.5.2-02 to earlier than 8.6.1-00 HPE XP...

Security Bulletin: Vulnerabilities in nagios affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in magios. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-14312 DESCRIPTION: Nagios Core could allow a local authenticated attacker to gain elevated privileges on the system, caused by a flaw in the nagios.cfg. By...

CVE-2017-7108

CVE-2017-7108 affects Apple devices via the Wi‑Fi component (iOS before 11, tvOS before 11, watchOS before 4). The issue is a memory corruption vulnerability in the Wi‑Fi stack that could allow remote code execution in a privileged context or cause a denial of service. Apple documents this under ...

Apple updateRateSetAsyncCallback Heap Overflow Vulnerability

Exploit for macOS platform in category dos / poc Apple: Heap overflow in "updateRateSetAsyncCallback" when handling ioctl results CVE-2017-7108 Broadcom produces Wi-Fi HardMAC SoCs which are used to handle the PHY and MAC layer processing. These chips are present in both mobile devices and Wi-Fi...

Ubuntu 14.04 LTS / 16.04 LTS : Nagios regression (USN-3253-2)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3253-2 advisory. USN-3253-1 fixed vulnerabilities in Nagios. The update prevented log files from being displayed in the web interface. This update fixes the problem. W...

Ubuntu: Security Advisory (USN-3253-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS : Nagios vulnerabilities (USN-3253-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3253-1 advisory. It was discovered that Nagios incorrectly handled certain long strings. A remote authenticated attacker could use this issue to cause Nagios ...

Ubuntu: Security Advisory (USN-3253-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-7108

Huawei UMA (Unified Maintenance Audit) before V200R001C00SPC200 SPH206 suffers an information disclosure where remote authenticated users can obtain MD5 hashes of arbitrary user passwords via unspecified vectors. The advisory HWPSIRT-2016-07051 notes a fix; apply Huawei software updates to mitiga...

CVE-2015-7108

creationtimestamp| type| source ---|---|--- 2016-01-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39372...

CVE-2015-7108

The CVE-2015-7108 entry affects the Bluetooth HCI interface in Apple OS X prior to 10.11.2, where a memory corruption vulnerability in the HCI path allows local users to gain privileges or cause a denial of service. Root cause is memory corruption via unspecified vectors in the Bluetooth HCI hand...

Debian DLA-60-1 : icinga security update

Two fixes for the Classic UI : - fix off-by-one memory access in processcgivars CVE-2013-7108 - prevent possible buffer overflows in cmd.cgi CVE-2014-1878 NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to...

GLSA-201412-23 : Nagios: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201412-23 Nagios: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Nagios. Please review the CVE identifiers referenced below for details. Impact : A remote attacker may be able to execute arbitrary code,...

CVE-2014-7108

The CVE-2014-7108 entry concerns the Android app Stop Headaches and Migraines (com.StopHeadachesandMigraines) version 1.2, which does not verify X.509 certificates when establishing SSL connections. This misconfiguration enables man-in-the-middle attackers to spoof SSL servers and obtain sensitiv...

[SECURITY] [DLA 60-1] icinga security update

Package : icinga Version : 1.0.2-2+squeeze2 CVE ID : CVE-2013-7108 CVE-2014-1878 Two fixes for the Classic UI: - fix off-by-one memory access in processcgivars CVE-2013-7108 - prevent possible buffer overflows in cmd.cgi CVE-2014-1878...

DLA-60-1 icinga - security update

Bulletin has no description...

[SECURITY] [DSA 2956-1] icinga security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2956-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 11, 2014 http://www.debian.org/security/faq -...