EUVD-2023-52693

Malicious code in bioql PyPI...

Fedora 40 : tacacs (2023-a219299297)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-a219299297 advisory. Automatic update for tacacs-F4.0.4.28.7fb20231005g4fdf178-1.fc40. Changelog Thu Oct 5 2023 Davide Cavalca - F4.0.4.28.7fb20231005g4fdf178-1 - Update to git...

GLSA-202402-13 : TACACS+: Remote Code Execution

The remote host is affected by the vulnerability described in GLSA-202402-13 TACACS+: Remote Code Execution - A lack of input validation exists in tacplus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allows an attacker who can control the username, rem-addr, or NAC...

Fedora 39 : tacacs (2023-96c21ed09c)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-96c21ed09c advisory. Update to git snapshot 4fdf178 for CVE-2023-45239; Fixes: RHBZ2242402 Tenable has extracted the preceding description block directly from the Fedora security...

Fedora: Security Advisory for tacacs (FEDORA-2023-96c21ed09c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-45239

creationtimestamp| type| source ---|---|--- 2023-10-06 22:13:53+00:00| seen| https://t.me/cibsecurity/71762...

CVE-2023-45239

The CVE-2023-45239 entry concerns tac_plus, a TACACS+ daemon. A lack of input validation prior to commit 4fdf178 allows an attacker who can control the username, rem-addr, or NAC address sent to tac_plus to inject shell commands when pre- or post-authorization commands are enabled, enabling remot...

CVE-2023-45239

A lack of input validation exists in tacplus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allows an attacker who can control the username, rem-addr, or NAC address sent to tacplus to inject shell commands and gain remote code execution on the tacplus server...

Fedora 38 : tacacs (2023-6f9e904861)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-6f9e904861 advisory. Update to git snapshot 4fdf178 for CVE-2023-45239; Fixes: RHBZ2242402 Tenable has extracted the preceding description block directly from the Fedora security...