autofs security update

CentOS Errata and Security Advisory CESA-2015:1344 Updated autofs packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS...

RHEL 6 : autofs (RHSA-2015:1344)

Updated autofs packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

RedHat Update for autofs RHSA-2015:1344-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED12 / SLES12 Security Update : autofs (SUSE-SU-2015:1020-1)

autofs was updated to fix one security issue. This security issue was fixed : - CVE-2014-8169: Prevent potential privilege escalation via interpreter load path for program-based automount maps bnc917977. The update package also includes non-security fixes. See advisory for details. Note that...

CVE-2014-8169

automount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's USER and HOME environment variable values instead of the values for the user used to run the mapped program, which allows local users to gain privileges via a Trojan horse program in the user home...

CVE-2014-8169

CVE-2014-8169 affects the autofs (automounter) component: when a program map uses interpreted languages, it can cause the interpreter to inherit the calling user’s USER and HOME environment variables, enabling local privilege escalation. The issue has been addressed across multiple distributions:...

SUSE-SU-2015:1020-1 Security update for autofs

autofs was updated to fix one security issue. This security issue was fixed: - CVE-2014-8169: Prevent potential privilege escalation via interpreter load path for program-based automount maps bnc917977. These non-security issues were fixed: - Dont pass sloppy option for other than nfs mounts...

SuSE 10 Security Update : bind (ZYPP Patch Number 8169)

The following issue has been fixed : - Records with zero length rdata field could have crashed named or disclosed portions of memory to clients. CVE-2012-1667 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc...

Fedora Core 10 FEDORA-2009-8169 (Django)

The remote host is missing an update to Django announced via advisory FEDORA-2009-8169. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

kernel: r8169: fix crash when large packets are received

Buffer overflow in the RTL8169 NIC driver drivers/net/r8169.c in the Linux kernel before 2.6.30 allows remote attackers to cause a denial of service kernel memory corruption and crash via a long packet...

Mandriva Linux Security Advisory : kernel (MDVSA-2008:109)

A vulnerability was discovered and corrected in the Linux 2.6 kernel : The bdxioctlpriv function in the tehuti driver tehuti.c in Linux kernel 2.6.x before 2.6.25.1 does not properly check certain information related to register size, which has unspecified impact and local attack vectors, probabl...

HP-UX Security patch : PHNE_8169

The remote host is missing HP-UX Security Patch number PHNE8169 . Vulnerability with incoming ICMP Echo Request ping packets %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16800;...