8553 matches found
Solaris Update Manager / Sun Patch Cluster Symlink Attack
Symlink attack with Solaris Update manager and Sun Patch Cluster Larry W. Cashdollar Vapid Labs http://vapid.dhs.org 1/24/2010 With the GUI Sun Update Manager being used to install patches on a system local users can easily run scripts and create symlinks in an attempt to clobber files and...
RedHat Piranha Virtual Server Package passwd.php3 Arbitrary Command Execution
$Id: piranhapasswdexec.rb 8497 2010-02-14 20:27:24Z patrickw $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
CVE-2003-1588
Sun Cluster 2.2, when HA-Oracle or HA-Sybase DBMS services are used, stores database credentials in cleartext in a cluster configuration file, which allows local users to obtain sensitive information by reading this file...
CVE-2003-1588
CVE-2003-1588 affects Sun Cluster 2.2 when using HA-Oracle or HA-Sybase DBMS services. The issue is that database credentials are stored in cleartext in a cluster configuration file, allowing local users to read sensitive information from that file. The vulnerability concerns the cluster configur...
CVE-2003-1588
Sun Cluster 2.2, when HA-Oracle or HA-Sybase DBMS services are used, stores database credentials in cleartext in a cluster configuration file, which allows local users to obtain sensitive information by reading this file...
HP-UX PHSS_40230 : HP Enterprise Cluster Master Toolkit (ECMT) running on HP-UX, Local Unauthorized Access (HPSBUX02464 SSRT090210 rev.1)
s700800 11.31 ECMT B.05.00 patch : A potential security vulnerability has been identified on HP Enterprise Cluster Master Toolkit ECMT version B.05.00 running on HP-UX. This vulnerability could be exploited by local users to gain unauthorized access. %NASLMINLEVEL 70300 C Tenable Network Security...
HP-UX PHSS_40229 : HP Enterprise Cluster Master Toolkit (ECMT) running on HP-UX, Local Unauthorized Access (HPSBUX02464 SSRT090210 rev.1)
s700800 11.23 ECMT B.05.00 patch : A potential security vulnerability has been identified on HP Enterprise Cluster Master Toolkit ECMT version B.05.00 running on HP-UX. This vulnerability could be exploited by local users to gain unauthorized access. %NASLMINLEVEL 70300 C Tenable Network Security...
Code injection
Unspecified vulnerability in HP Enterprise Cluster Master Toolkit ECMT B.05.00 on HP-UX B.11.23 11i v2 and HP-UX B.11.31 11i v3 allows local users to gain access to an Oracle or Sybase database via unknown vectors...
CVE-2009-4184
Unspecified vulnerability in HP Enterprise Cluster Master Toolkit ECMT B.05.00 on HP-UX B.11.23 11i v2 and HP-UX B.11.31 11i v3 allows local users to gain access to an Oracle or Sybase database via unknown vectors...
CVE-2009-4184
Unspecified vulnerability in HP Enterprise Cluster Master Toolkit ECMT B.05.00 on HP-UX B.11.23 11i v2 and HP-UX B.11.31 11i v3 allows local users to gain access to an Oracle or Sybase database via unknown vectors...
CVE-2009-4184
HP Enterprise Cluster Master Toolkit (ECMT) B.05.00 on HP-UX B.11.23 (11i v2) and B.11.31 (11i v3) is affected by CVE-2009-4184, a local vulnerability that could allow an unprivileged user to gain unauthorized access to Oracle or Sybase databases via unspecified vectors. HP’s security bulletin HP...
HP Enterprise Cluster Master Toolkit privilege escalation
No description provided...
CentOS 5 : rgmanager (CESA-2009:1339)
An updated rgmanager package that fixes multiple security issues, various bugs, and adds enhancements is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. The rgmanager package contains the Red Hat Resourc...
CentOS 5 : kernel (CESA-2008:0612)
Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...
CentOS 5 : cman (CESA-2009:1341)
Updated cman packages that fix several security issues, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. The Cluster Manager cman utility provides services for...
Ubuntu: Security Advisory (USN-875-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[Suspected Spam][oCERT-2009-019] Ganeti path sanitization errors
2009-019 Ganeti path sanitization errors Description: Ganeti, an open source virtualisation manager, suffers from an input validation bug that poses a security risk. The vulnerability applies to the commands submitted, either locally via gnt- commands or remotely via the HTTP API, to the machine...
Ubuntu 6.06 LTS / 8.04 LTS / 8.10 : redhat-cluster, redhat-cluster-suite vulnerabilities (USN-875-1)
Multiple insecure temporary file handling vulnerabilities were discovered in Red Hat Cluster. A local attacker could exploit these to overwrite arbitrary local files via symlinks. CVE-2008-4192, CVE-2008-4579, CVE-2008-4580, CVE-2008-6552 It was discovered that CMAN did not properly handle...
[SECURITY] [DSA-1959-1] New ganeti packages fix arbitrary command execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1959-1 [email protected] http://www.debian.org/security/ Raphael Geissert December 19, 2009 http://www.debian.org/security/faq -...
