10 matches found
SUSE CVE-2014-9091
Icecast before 2.4.0 does not change the supplementary group privileges when is configured, which allows local users to gain privileges via unspecified vectors...
Fedora Update for icecast FEDORA-2014-16435
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GLSA-201412-38 : Icecast: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201412-38 Icecast: Multiple Vulnerabilities Two vulnerabilities have been discovered in Icecast: Icecast does not properly handle shared file descriptors CVE-2014-9018 Supplementary group privileges are not changed CVE-2014-9091...
Fedora 20 : icecast-2.4.1-1.fc20 (2014-16394)
fix CVE-2014-9091 1168146, 1168147, 1168148, 1168149 fix CVE-2014-9018 1165880, 1165882, 1165883, 1165885 enabled fully hardened build 954320 - update new to release v2.4.1 1101950 - added doc-subpkg Note that Tenable Network Security has extracted the preceding description block directly from th...
Fedora 19 : icecast-2.4.1-1.fc19 (2014-16483)
fix CVE-2014-9091 1168146, 1168147, 1168148, 1168149 fix CVE-2014-9018 1165880, 1165882, 1165883, 1165885 enabled fully hardened build 954320 - update new to release v2.4.1 1101950 - added doc-subpkg Note that Tenable Network Security has extracted the preceding description block directly from th...
Fedora 21 : icecast-2.4.1-1.fc21 (2014-16435)
fix CVE-2014-9091 1168146, 1168147, 1168148, 1168149 fix CVE-2014-9018 1165880, 1165882, 1165883, 1165885 enabled fully hardened build 954320 - update new to release v2.4.1 1101950 - added doc-subpkg Note that Tenable Network Security has extracted the preceding description block directly from th...
Fedora Update for icecast FEDORA-2014-16394
Check the version of icecast SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868602";...
Fedora Update for icecast FEDORA-2014-16483
Check the version of icecast SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868599";...
CVE-2014-9091
CVE-2014-9091 affects Icecast prior to 2.4.0, where supplementary group privileges are not changed when is configured, enabling a local attacker to gain privileges. The issue is documented in GLSA 201412-38 and Gentoo/OpenVAS advisories, which indicate local escalation/privilege information expo...
openSUSE Security Update : icecast (openSUSE-SU-2014:1591-1)
icecast was updated to fix two security issues. These security issues were fixed : - Supplementary groups were not overriden CVE-2014-9091. - Possible leak of on-connect scripts CVE-2014-9018. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...