57 matches found
Fedora 15 : bcfg2-1.1.2-2.fc15 (2011-12298)
Wed Sep 07 2011 Fabian Affolter - 1.1.2-2 - Added patch to fix CVE-2011-3211 - Thu Jun 02 2011 Fabian Affolter - 1.1.2-1 - Updated to new upstream version 1.1.2 - Fixed 683239 - Mon Sep 27 2010 Jeffrey C. Ollie - 1.1.0-2 - Update to final version Note that Tenable Network Security has extracted...
[SECURITY] Fedora 15 Update: bcfg2-1.1.2-2.fc15
Bcfg2 helps system administrators produce a consistent, reproducible, and verifiable description of their environment, and offers visualization and reporting tools to aid in day-to-day administrative tasks. It is the fifth generation of configuration management tools developed in the Mathematics...
[SECURITY] Fedora 14 Update: bcfg2-1.1.2-2.fc14
Bcfg2 helps system administrators produce a consistent, reproducible, and verifiable description of their environment, and offers visualization and reporting tools to aid in day-to-day administrative tasks. It is the fifth generation of configuration management tools developed in the Mathematics...
CVE-2011-3211
The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via shell metacharacters in data received from a client...
CVE-2011-3211
The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via shell metacharacters in data received from a client...
Code injection
The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via shell metacharacters in data received from a client...
CVE-2011-3211
The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via shell metacharacters in data received from a client...
CVE-2011-3211
Removed by vendor...
CVE-2011-3211
CVE-2011-3211 affects the Bcfg2 server: versions 1.1.2 and earlier, and 1.2 prerelease, are vulnerable to remote command execution via shell metacharacters in data from a client. The root cause is improper handling of client-supplied data on the server side, allowing arbitrary commands to be exec...
CVE-2011-3211
The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via shell metacharacters in data received from a client...
PT-2011-1041
Name of the Vulnerable Software and Affected Versions Bcfg2 versions 1.1.2 and earlier Bcfg2 version 1.2 prerelease Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in data received from a client. Multiple vulnerabilities in the Bcfg2 package of...
CVE-2011-3211: Improper Input Validation
The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via shell metacharacters in data received from a client...
[SECURITY] [DSA 2302-1] bcfg2 security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-2302-1 [email protected] http://www.debian.org/security/ Nico Golde Sep 7, 2011 http://www.debian.org/security/faq -...
Debian DSA-2302-1 : bcfg2 - missing input sanitization
It has been discovered that the Bcfg2 server, a configuration management server for Bcfg2 clients, is not properly sanitizing input from Bcfg2 clients before passing it to various shell commands. This enables an attacker in control of a Bcfg2 client to execute arbitrary commands on the server wit...
[SECURITY] [DSA 2302-1] bcfg2 security update
-------------------------------------------------------------------------- Debian Security Advisory DSA-2302-1 [email protected] http://www.debian.org/security/ Nico Golde Sep 7, 2011 http://www.debian.org/security/faq - --------------------------------------------------------------------------...
