OPENSUSE-SU-2021:0058-1 Security update for cobbler

This update for cobbler fixes the following issues: - Add cobbler-tests subpackage for unit testing for openSUSE/SLE - Adds LoadModule definitions for openSUSE/SLE - Switch to new refactored auth module. - use systemctl to restart cobblerd on logfile rotation boo1169207 Mainline logrotate conf fi...

ALPINE-CVE-2020-29600

In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501...

Eldy Awstats Path Traversal Vulnerability

Eldy Awstats is Eldy personal developer of a log analysis tool applied to Web sites. The software supports analyzing Web, WAP, proxy, streaming server, FTP, mail server log files on all operating systems such as IIS 5.0 +, Apache, etc. It displays all Web statistics including: visitors, pages,...

AZL-6926 CVE-2020-24331 affecting package trousers for versions less than 0.3.14-7

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the tss user still has read and write access to the /etc/tcsd.conf file which contains various settings related to this daemon...

Icinga Arbitrary Code Execution Vulnerability

Icinga is an open source computer system and network monitoring application. Icinga suffers from an arbitrary code execution vulnerability. An attacker can make Icinga 2 run with root privileges by editing the init.conf file, which can be used to execute arbitrary code with root privileges...

Juniper Networks Junos OS Elevation of Privilege Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS. The program failed to request the root user's...

APACHE breakthrough in the Directory IP restrictions.- Vulnerability warning-the black bar safety net

Today get a site,get the background. But open get the following error. 4 0 3 Forbidden Request forbidden by administrative rules. This situation is generally not home. Or limit IP. Clear the background first is there. Because it is the ECSHOP system,the background index. php can not...

CentOS 6 : cifs-utils (CESA-2012:0902)

An updated cifs-utils package that fixes one security issue, multiple bugs, and adds various enhancements is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score,...

Hero DVD Buffer Overflow Exploit (meta)

Exploit for windows platform in category remote exploits ======================================= Hero DVD Buffer Overflow Exploit meta ======================================= .-----.--.--.--.----.----.-| | | | | | | | -| | | |||||| || By MadjiX Sec4ever.com Note: Use Backtrack! place httpd.conf i...

Fedora Core 9 FEDORA-2009-3789 (prewikka)

The remote host is missing an update to prewikka announced via advisory FEDORA-2009-3789. OpenVAS Vulnerability Test $Id: fcore20093789.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3789 prewikka Authors: Thomas Reinke Copyright: Copyright c 2009...

DEBIAN-CVE-2008-4870

dovecot 1.0.7 in Red Hat Enterprise Linux RHEL 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the sslkeypassword parameter value...