CVE-2007-3373

daemon.c in cman redhat-cluster-suite before 20070622 does not clear a buffer for reading requests, which might allow local users to obtain sensitive information from previous requests...

CVE-2007-3373

CVE-2007-3373 affects daemon.c in cman (redhat-cluster-suite) prior to 20070622, where a buffer is not cleared when reading requests. This may allow local users to obtain sensitive information from previous requests. The NVD entry lists a Medium base score (5.0) with Network attack vector and Low...

Redhat Linux cluster service multiple security vulnerabilities

Uninitialized memory, buffer oveflows...

[email protected], [email protected]

=========================================================== Ubuntu Security Notice USN-476-1 June 22, 2007 redhat-cluster-suite vulnerability https://launchpad.net/bugs/121780 =========================================================== A security issue affects the following Ubuntu releases: Ubunt...

USN-476-1: redhat-cluster-suite vulnerability

Fabio Massimo Di Nitto discovered that cman did not correctly validate the size of client messages. A local user could send a specially crafted message and execute arbitrary code with cluster manager privileges or crash the manager, leading to a denial of service...

Sun Cluster软件本地拒绝服务漏洞

Sun Cluster将Solaris操作环境推广到一种集群操作系统。 Sun Cluster的实现上存在漏洞，本地攻击者可能利用此漏洞导致拒绝服务。 如果Sun Cluster节点上的特权用户为当前集群的成员的话，就能够破坏同一层集群节点的内存中数据结构，这可能导致系统忙碌和/或破坏同一层节点上的数据，影响应用程序的吞吐量或最终用户的数据或应用程序的可用性，具体取决于Sun Cluster的配置方式。 如果触发上述漏洞，可能出现数据破坏和sendmondo忙碌，栈追踪类似于： genunix:cdevioctl did:didioctl specfs:specioctl pxfs:vo...

Code injection

Unspecified vulnerability in Sun Cluster 3.1 and Solaris Cluster 3.2 before 20070424 allows remote authenticated users, operating from a different cluster node, to cause a denial of service data corruption or sendmondo panic via unspecified vectors, as demonstrated by EMC Symcli backup software...

CVE-2007-2267

Unspecified vulnerability in Sun Cluster 3.1 and Solaris Cluster 3.2 before 20070424 allows remote authenticated users, operating from a different cluster node, to cause a denial of service data corruption or sendmondo panic via unspecified vectors, as demonstrated by EMC Symcli backup software...

CVE-2007-2267

Unspecified vulnerability in Sun Cluster 3.1 and Solaris Cluster 3.2 before 20070424 allows remote authenticated users, operating from a different cluster node, to cause a denial of service data corruption or sendmondo panic via unspecified vectors, as demonstrated by EMC Symcli backup software...

CVE-2007-2267

CVE-2007-2267 describes an unspecified vulnerability in Sun Cluster 3.1 and Solaris Cluster 3.2 before 20070424 that allows remote authenticated users from another cluster node to trigger a denial of service (data corruption or send_mondo panic). Public references note the vulnerability as part o...

PT-2007-2856 · Conga · Conga

Name of the Vulnerable Software and Affected Versions: conga affected versions not specified Description: The issue concerns the luci server component in conga, where the password is preserved between page loads for the Add System/Cluster task flow. This is done by storing the password in the Val...

Is backup required?

Do you need Backup? Introduction. Main features of backup. Risks. RAID. cluster systems. Shadow copy. Version control systems. Application level recovery. Backup security. Cluster systems A cluster is several computers nodes functioning as a single system that can work even if one of the nodes...

Is backup required?

Do you need Backup? Introduction. Main features of backup. Risks. RAID. Cluster systems. Shadow copy. Version control systems. Application level recovery. Backup security. The introduction of any technology is associated with costs and risks in one way or another. This applies to backup as much a...

Solaris 9 (i386) : 124721-02

The remote host is missing Sun Security Patch number 124721-02 Sun Cluster 3.0/3.1/3.1x86: HA-PostgreSQL patch. Date this patch was last updated by Sun : Tue Jun 26 06:01:23 MDT 2007 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has...

Solaris 10 (i386) : 124721-02

The remote host is missing Sun Security Patch number 124721-02 Sun Cluster 3.0/3.1/3.1x86: HA-PostgreSQL patch. Date this patch was last updated by Sun : Tue Jun 26 06:01:23 MDT 2007 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 @DEPRECATED@ This script has...

DEBIAN-CVE-2006-5873

Buffer overflow in the clusterprocessheartbeat function in cluster.c in layer 2 tunneling protocol network server l2tpns before 2.1.21 allows remote attackers to cause a denial of service via a large heartbeat packet...

TORQUE: Insecure temporary file creation

Background TORQUE is a resource manager providing control over batch jobs and distributed compute nodes. Description TORQUE creates temporary files with predictable names. Please note that the TORQUE package shipped in Gentoo Portage is not vulnerable in the default configuration. Only systems wi...

Solaris 5.6 (sparc) : 109208-21

Sun Cluster 2.2: Framework/Comm Patch. Date this patch was last updated by Sun : Jan/28/04 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.6 (sparc) : 108034-03

Sun Cluster 2.2: HA-Tivoli Patch. Date this patch was last updated by Sun : Feb/21/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.8 (sparc) : 111338-01

Sun Cluster 2.2: HA-Informix Patch. Date this patch was last updated by Sun : Jul/23/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...