41 matches found
UBUNTU-CVE-2015-5186
Audit before 2.4.4 in Linux does not sanitize escape characters in filenames...
Linux Audit '/auparse/auparse.c' Security Bypass Vulnerability
Linux Audit is a set of graphical tools for viewing audit logs of Linux systems. A security bypass vulnerability exists in Linux Audit. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...
Oracle Linux 4 : kernel (ELSA-2008-0167)
From Red Hat Security Advisory 2008:0167 : Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kernel packages contain t...
Gentoo Security Advisory GLSA 200807-14 (audit)
The remote host is missing updates announced in advisory GLSA 200807-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200807-14 (audit)
The remote host is missing updates announced in advisory GLSA 200807-14. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GLSA-200807-14 : Linux Audit: Buffer overflow
The remote host is affected by the vulnerability described in GLSA-200807-14 Linux Audit: Buffer overflow A stack-based buffer overflow has been reported in the auditlogusercommand function in the file lib/auditlogging.c when processing overly long arguments. Impact : A local attacker could execu...
Linux Audit: Buffer overflow
Background Linux Audit is a set of userspace utilities for storing and processing auditing records. Description A stack-based buffer overflow has been reported in the auditlogusercommand function in the file lib/auditlogging.c when processing overly long arguments. Impact A local attacker could...
Linux Audit守护程序audit_log_user_command()本地栈溢出漏洞
BUGTRAQ ID: 28524 Linux Audit是用于查看Linux系统审计日志的图形工具。 Linux Audit的lib/auditlogging.c文件中的auditlogusercommand函数存在栈溢出漏洞，如果本地用户向该函数传送了超长的command参数的话，就可以触发这个溢出，导致以使用libaudit应用的权限执行任意指令。 Linux Audit Linux Audit 1.6.9 Linux Audit ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
CVE-2008-1628
Stack-based buffer overflow in the auditlogusercommand function in lib/auditlogging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a long command argument. NOTE: some of these details are obtained from third party information...
DEBIAN-CVE-2008-1628
Stack-based buffer overflow in the auditlogusercommand function in lib/auditlogging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a long command argument. NOTE: some of these details are obtained from third party information...
CVE-2008-1628
Stack-based buffer overflow in the auditlogusercommand function in lib/auditlogging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a long command argument. NOTE: some of these details are obtained from third party information...
Stack overflow
Stack-based buffer overflow in the auditlogusercommand function in lib/auditlogging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a long command argument. NOTE: some of these details are obtained from third party information...
CVE-2008-1628
Stack-based buffer overflow in the auditlogusercommand function in lib/auditlogging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a long command argument. NOTE: some of these details are obtained from third party information...
CVE-2008-1628
Stack-based buffer overflow in the auditlogusercommand function in lib/auditlogging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a long command argument. NOTE: some of these details are obtained from third party information...
CVE-2008-1628
Stack-based buffer overflow in the auditlogusercommand function in lib/auditlogging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a long command argument. NOTE: some of these details are obtained from third party information...
CVE-2008-1628
CVE-2008-1628 describes a stack-based buffer overflow in audit_log_user_command() in lib/audit_logging.c of Linux Audit before 1.7. Exploitation could allow arbitrary code execution (per multiple advisories). Affected component: audit subsystem (linux-audit utilities). Root cause: processing over...
CVE-2008-1628: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the auditlogusercommand function in lib/auditlogging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a long command argument. NOTE: some of these details are obtained from third party information...
audit logging of failed logins
Unspecified vulnerability in the linuxauditrecordevent function in OpenSSH 4.3p2, as used on Fedora Core 6 and possibly other systems, allows remote attackers to write arbitrary characters to an audit log via a crafted username. NOTE: some of these details are obtained from third party informatio...
audit logging of failed logins
Unspecified vulnerability in the linuxauditrecordevent function in OpenSSH 4.3p2, as used on Fedora Core 6 and possibly other systems, allows remote attackers to write arbitrary characters to an audit log via a crafted username. NOTE: some of these details are obtained from third party informatio...
audit logging of failed logins
Unspecified vulnerability in the linuxauditrecordevent function in OpenSSH 4.3p2, as used on Fedora Core 6 and possibly other systems, allows remote attackers to write arbitrary characters to an audit log via a crafted username. NOTE: some of these details are obtained from third party informatio...