RedHat Update for bind RHSA-2008:0300-02

Check for the Version of bind OpenVAS Vulnerability Test RedHat Update for bind RHSA-2008:0300-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Moderate: Red Hat Security Advisory: rhpki security and bug fix update

Updated pkisetup, rhpki-common, rhpki-ca, rhpki-kra, rhpki-ocsp, rhpki-tks, and rhpki-tps and rhpki-util for Solaris 9 packages that fix various security issues and several bugs are now available for Red Hat Certificate System 7.2. This update has been rated as having moderate security impact by...

CVE-2008-5690

The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv01 through snv104, allows local users to cause a denial of service authentication failure via unspecified vectors related to incorrect cache file permissions, and lack of credential storage by the...

Design/Logic Flaw

The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv01 through snv104, allows local users to cause a denial of service authentication failure via unspecified vectors related to incorrect cache file permissions, and lack of credential storage by the...

CVE-2008-5690

The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv01 through snv104, allows local users to cause a denial of service authentication failure via unspecified vectors related to incorrect cache file permissions, and lack of credential storage by the...

Perl symbolic links race conditions

File::Path::rmtree unsecurely changes file permissions, creating race condiotns for symbolic links manipulation...

CVE-2008-4413

Unspecified vulnerability in HP System Management Homepage SMH 2.2.6 and earlier on HP-UX B.11.11 and B.11.23, and SMH 2.2.6 and 2.2.8 and earlier on HP-UX B.11.23 and B.11.31, allows local users to gain "unauthorized access" via unknown vectors, possibly related to temporary file permissions...

Code injection

Unspecified vulnerability in HP System Management Homepage SMH 2.2.6 and earlier on HP-UX B.11.11 and B.11.23, and SMH 2.2.6 and 2.2.8 and earlier on HP-UX B.11.23 and B.11.31, allows local users to gain "unauthorized access" via unknown vectors, possibly related to temporary file permissions...

CVE-2008-4413

Unspecified vulnerability in HP System Management Homepage SMH 2.2.6 and earlier on HP-UX B.11.11 and B.11.23, and SMH 2.2.6 and 2.2.8 and earlier on HP-UX B.11.23 and B.11.31, allows local users to gain "unauthorized access" via unknown vectors, possibly related to temporary file permissions...

CVE-2008-4870

dovecot 1.0.7 in Red Hat Enterprise Linux RHEL 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the sslkeypassword parameter value...

SA-2008-054 - Plugin Manager - Access bypass

The Plugin Manager module provides the methods and graphical interfaces needed to automatically install new modules and themes from the Drupal.org website. An oversight in the menu permissions code allows any user to uninstall and remove modules installed with the Plugin Manager. This risk is onl...

Gentoo Security Advisory GLSA 200511-06 (fetchmail)

The remote host is missing updates announced in advisory GLSA 200511-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-3609

The kernel in Apple Mac OS X 10.5 through 10.5.4 does not properly flush cached credentials during recycling aka purging of a vnode, which might allow local users to bypass the intended read or write permissions of a file...

Design/Logic Flaw

The kernel in Apple Mac OS X 10.5 through 10.5.4 does not properly flush cached credentials during recycling aka purging of a vnode, which might allow local users to bypass the intended read or write permissions of a file...

CVE-2008-3609

The kernel in Apple Mac OS X 10.5 through 10.5.4 does not properly flush cached credentials during recycling aka purging of a vnode, which might allow local users to bypass the intended read or write permissions of a file...

FreeBSD Security Advisory (FreeBSD-SA-05:14.bzip2.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:14.bzip2.asc ADV FreeBSD-SA-05:14.bzip2.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft...

CVE-2008-3789

Samba 3.2.0 uses weak permissions 0666 for the 1 groupmapping.tdb and 2 groupmapping.ldb files, which allows local users to modify the membership of Unix groups...

CVE-2008-3789

Samba 3.2.0 uses weak permissions 0666 for the 1 groupmapping.tdb and 2 groupmapping.ldb files, which allows local users to modify the membership of Unix groups...

Ingres database server multiple security vulnerabilities

Weak file permissions, insecure shared library loading, buffer overflow in different utilities...

CVE-2008-3356

verifydb in Ingres 2.6, Ingres 2006 release 1 aka 9.0.4, and Ingres 2006 release 2 aka 9.1.0 on Linux and other Unix platforms sets the ownership or permissions of an iivdb.log file without verifying that it is the application's own log file, which allows local users to overwrite arbitrary files ...