262 matches found
CVE-2019-9929
Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions...
CVE-2019-9929
CVE-2019-9929 concerns Northern.tech CFEngine Enterprise 3.12.1 with insecure permissions. The connected sources consistently describe the issue as an insecure-permissions vulnerability for CFEngine Enterprise 3.12.1. The available documentation does not specify the exact vulnerable file, compone...
CVE-2019-9929
Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions...
CVE-2019-9929
Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions...
PT-2019-19943
Name of the Vulnerable Software and Affected Versions CFEngine Enterprise version 3.12.1 Description The issue is related to insecure permissions in the software. Recommendations For version 3.12.1, update to a version that addresses the insecure permissions issue...
CVE-2019-9929: Insertion of Sensitive Information into Log File
Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions...
Debian GNU/Linux Data Compromise
The cfengine package of the Debian GNU/Linux operating system has multiple vulnerabilities that, if exploited, could lead to the compromise of protected information. These vulnerabilities can be exploited by local malicious individuals...
Debian GNU/Linux Data Compromise
The cfengine-doc package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to the compromise of protected information. These vulnerabilities can be exploited by local malicious individuals...
Gentoo Linux Remote Compromise
The multiple vulnerabilities in the cfengine package up to version 2.1.7 inclusive of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
CFEngine 2.0.x CFServD Transaction Packet Buffer Overrun Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/8699/info cfengine is prone to a stack-based buffer overrun vulnerability. This issue may be exploited by remote attackers who can send malicious transaction packets to cfservd. This issue is due to insufficient bounds...
CFEngine 2.0.x CFServD Transaction Packet Buffer Overrun Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/8699/info cfengine is prone to a stack-based buffer overrun vulnerability. This issue may be exploited by remote attackers who can send malicious transaction packets to cfservd. This issue is due to insufficient bounds...
GNU CFEngine 2.0.x/2.1 AuthenticationDialogue Remote Heap Based Buffer Overrun Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/10899/info GNU cfengine cfservd is reported prone to a remote heap-based buffer overrun vulnerability. The vulnerability presents itself in the cfengine cfservd AuthenticationDialogue function. The issue exists due to a...
GNU Cfengine 2.-2.0.3 - Remote Stack Overflow Exploit
No description provided by source. !/usr/bin/perl -s kokaninATdtors.net / cfengine2-2.0.3 from freebsd ports 26/sep/2003. forking portbind shellcode port=0xb0ef45295 by eSDee bug discovered by nick cleaton, tested on FreeBSD 4.8-RELEASE use IO::Socket; if!$ARGV1 print usage: ./DSR-cfengine.pl hos...
Mandrake Linux Security Advisory : cfengine (MDKSA-2000:061)
The GNU cfengine is an abstract programming language for system administrators of large heterogeneous networks, used for maintenance and administration. There are a number of string format vulnerabilities in syslog calls that can be abused to either make the cfengine program segfault and die or t...
MDVA-2009:165 : cfengine
The 'recurse' keyword in any editfile action trigger the following warning, for each file found: cfengine:hostname: Unknown action in editing of file XYZ. This update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...
Gentoo Security Advisory GLSA 200408-08 (Cfengine)
The remote host is missing updates announced in advisory GLSA 200408-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200408-08 (Cfengine)
The remote host is missing updates announced in advisory GLSA 200408-08. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD Ports: cfengine
The remote host is missing an update to the system as announced in the referenced advisory. VID 8688d5cd-328c-11da-a263-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: cfengine
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
GV PostScript Viewer Remote Buffer overflow Exploit
No description provided by source. / gv postscript viewer exploit , infamous42md AT hotpop DOT com run of the mill bof. spawns a remote shell on port 7000. woopty doo. if someone has been able to exploit the heap overflow in cfengine, please email me and teach me something. after days of pain i'v...