[SECURITY] [DSA 1973-1] New glibc packages fix information disclosure

------------------------------------------------------------------------ Debian Security Advisory DSA-1973-1 [email protected] http://www.debian.org/security/ Aurelien Jarno January 19, 2010 http://www.debian.org/security/faq -...

CVE-2010-0015

nis/nssnis/nis-pwd.c in the GNU C Library aka glibc or libc6 2.7 and Embedded GLIBC EGLIBC 2.10.2 adds information from the passwd.adjunct.byname map to entries in the passwd map, which allows remote attackers to obtain the encrypted passwords of NIS accounts by calling the getpwnam function...

DEBIAN-CVE-2010-0015

nis/nssnis/nis-pwd.c in the GNU C Library aka glibc or libc6 2.7 and Embedded GLIBC EGLIBC 2.10.2 adds information from the passwd.adjunct.byname map to entries in the passwd map, which allows remote attackers to obtain the encrypted passwords of NIS accounts by calling the getpwnam function...

CVE-2010-0015

CVE-2010-0015 affects the GNU C Library (glibc) and Embedded GLIBC (EGLIBC): in glibc 2.7 and EGLIBC 2.10.2, the NIS path (passwd.adjunct.byname) can cause getpwnam() to reveal encrypted NIS passwords. The connected advisories (Ubuntu USN-1396-1, SUSE patches) document this vulnerability and prov...

CVE-2010-0015

nis/nssnis/nis-pwd.c in the GNU C Library aka glibc or libc6 2.7 and Embedded GLIBC EGLIBC 2.10.2 adds information from the passwd.adjunct.byname map to entries in the passwd map, which allows remote attackers to obtain the encrypted passwords of NIS accounts by calling the getpwnam function...

CVE-2010-0015

nis/nssnis/nis-pwd.c in the GNU C Library aka glibc or libc6 2.7 and Embedded GLIBC EGLIBC 2.10.2 adds information from the passwd.adjunct.byname map to entries in the passwd map, which allows remote attackers to obtain the encrypted passwords of NIS accounts by calling the getpwnam function...

CentOS 5 : xen (CESA-2008:0892)

Updated xen packages that resolve a couple of security issues and fix a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The xen packages contain tools for managing the virtual machine monit...

SLES9: Security update for glibc and timezone

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: glibc glibc-devel glibc-html glibc-i18ndata glibc-info glibc-locale glibc-profile nscd timezone More details may also be found by searching for keyword 50619...

SLES9: Security update for glibc and timezone

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: glibc glibc-devel glibc-html glibc-i18ndata glibc-info glibc-locale glibc-profile nscd timezone More details may also be found by searching for keyword 50619...

SecurityReason: glibc x<=2.10.1 stdio/strfmon.c Multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 glibc x=2.10.1 stdio/strfmon.c Multiple vulnerabilities Author: Maksymilian Arciemowicz http://SecurityReason.com Date: - - Dis.: 10.03.2008 - - Pub.: 17.09.2009 CVE: CVE-2008-1391 Risk: High Affected Software tested 27.08.2009: - - Fedora 11 - -...

GNU glibc 2.x - strfmon() Integer Overflow

GNU glibc 2.x - strfmon Integer Overflow source: https://www.securityfocus.com/bid/36443/info GNU glibc is prone to an integer-overflow weakness. An attacker can exploit this issue through other applications such as PHP to execute arbitrary code within the context of the affected application...

GNU glibc 2.x - 'strfmon()' Integer Overflow

source: https://www.securityfocus.com/bid/36443/info GNU glibc is prone to an integer-overflow weakness. An attacker can exploit this issue through other applications such as PHP to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a...

MDVA-2009:116 : glibc

New glibc release to fix some issues found in glibc 2.8 present in Mandriva 2009.0: - ulimitULSETFSIZE does not return the integer part of the new file size limit divided by 512 http://linuxtesting.org/results/report?num=S0167, Mandriva bug 51685 - When including pthread.h and using...

GNU glibc - Timezone Parsing Remote Integer Overflow

GNU glibc - Timezone Parsing Remote Integer Overflow // source: https://www.securityfocus.com/bid/50898/info GNU glibc is prone to an remote integer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running an application that use...

GNU glibc - Timezone Parsing Remote Integer Overflow

// source: https://www.securityfocus.com/bid/50898/info GNU glibc is prone to an remote integer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running an application that uses the affected library. include include include inclu...

Security fix for the ALT Linux 7 package strongswan version 4.2.14-alt1

May 13, 2009 Michael Shigorin 4.2.14-alt1 - 4.2.14 fixes CVE-2009-0790: DoS against dead peer detection code - fixed FTBFS with glibc-2.9 - appled vendor patch fixing invalid IKE state issue...

Security fix for the ALT Linux 5 package strongswan version 4.2.14-alt1

May 13, 2009 Michael Shigorin 4.2.14-alt1 - 4.2.14 fixes CVE-2009-0790: DoS against dead peer detection code - fixed FTBFS with glibc-2.9 - appled vendor patch fixing invalid IKE state issue...

Security fix for the ALT Linux 6 package strongswan version 4.2.14-alt1

May 13, 2009 Michael Shigorin 4.2.14-alt1 - 4.2.14 fixes CVE-2009-0790: DoS against dead peer detection code - fixed FTBFS with glibc-2.9 - appled vendor patch fixing invalid IKE state issue...

CVE-2009-1515

Heap-based buffer overflow in the cdfreadsat function in src/cdf.c in Christos Zoulas file 5.00 allows user-assisted remote attackers to execute arbitrary code via a crafted compound document file, as demonstrated by a .msi, .doc, or .mpp file. NOTE: some of these details are obtained from third...

MDVA-2009:017 : glibc

regexp.h header shipped with glibc 2.8, in Mandriva Linux 2009, had an error which caused the build of programs using the regexp compile function to fail. This update addresses the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...