SOL16871 - logrotate vulnerability CVE-2011-1155

Note: As of February 17, 2015, AskF5 Security Advisory articles include the Severity value. Security Advisory articles published before this date do not list a Severity value. Recommended Action If the previous table lists a version in the Versions known to be not vulnerable column, you can...

SOL16869 - logrotate vulnerability CVE-2011-1098

Note: As of February 17, 2015, AskF5 Security Advisory articles include the Severity value. Security Advisory articles published before this date do not list a Severity value. Recommended Action If the previous table lists a version in the Versions known to be not vulnerable column, you can...

SOL16870 - logrotate vulnerability CVE-2011-1154

Vulnerability Recommended Actions If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are currently running, or if the table does not...

Vulnerabilities of the Gentoo Linux operating system, which allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

Multiple vulnerabilities in the logrotate package up to version 3.8.0 of the Gentoo Linux operating system. Exploitation of these vulnerabilities may lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...

The vulnerability of the Red Hat Linux operating system allows attackers to compromise the integrity of protected information.

The vulnerability of the logrotate-3.5.2 package for the Red Hat Linux operating system can lead to a breach of the integrity of protected information. This vulnerability can be exploited locally...

Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the logrotate-3.7.8 package of the Red Hat Enterprise Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...

Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities of the logrotate-debuginfo-3.7.8 package for the Red Hat Enterprise Linux operating system may lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of these vulnerabilities can occur locally...

Moderate: Red Hat Security Advisory: python-django-horizon and python-django-openstack-auth update

Updated python-django-horizon and python-django-openstack-auth packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux OpenStack Platform 5.0 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security...

Updated privoxy package fixes security vulnerability

The logrotate configuration of the privoxy package did not function properly, causing its log files not to be rotated. The log files could potentially fill up the disk...

MGASA-2014-0463 Updated privoxy package fixes security vulnerability

The logrotate configuration of the privoxy package did not function properly, causing its log files not to be rotated. The log files could potentially fill up the disk...

openSUSE Security Update : squid (openSUSE-SU-2014:1144-1)

This update fixes the following security issues and bugs with squid : A denial of Service in Range header processing was fixed that could be used by proxy users to crash squid. CVE-2014-3609 Also the following bugs were fixed : - bnc894840: removed unnecessary 'sharedscripts' in squid's logrotate...

openSUSE Security Update : - logrotate (openSUSE-SU-2014:0923-1)

update logrotate config file after switch to systemd bnc878788 - added 'reload' capability which was lost during switch from sysvinit to systemd - privoxy-3.0.16-networkmanager.systemd.patch: update Networkmanager dispatcher to reload config of privoxy with systemd bnc862339 %NASLMINLEVEL 70300 C...

Linux Kernel 2.6.13 <= 2.6.17.4 - prctl() Local Root Exploit (logrotate)

No description provided by source. / $Id: raptorprctl2.c,v 1.3 2006/07/18 13:16:45 raptor Exp $ raptorprctl2.c - Linux 2.6.x suiddumpable2 logrotate Copyright c 2006 Marco Ivaldi [email protected] The suiddumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 befo...

openSUSE Security Update : squid (openSUSE-SU-2013:1436-1)

This squid update includes several security fixes and minor changes. - squid-2.7.x-bnc829084-CVE-2013-4115-BOrequesthandling. diff Squid advisory SQUID-20132, CVE-2013-4115, bnc829084 Specially crafted http requests can trigger a buffer overflow when squid attempts to resolve an overly long...

openSUSE Security Update : squid3 (openSUSE-SU-2013:1441-1)

This squid3 update includes several security fixes and minor changes. - squid-3.1.x-bnc829084-CVE-2013-4115-BOrequesthandling. diff Squid advisory SQUID-20132, CVE-2013-4115, bnc829084 Specially crafted http requests can trigger a buffer overflow when squid attempts to resolve an overly long...

openSUSE Security Update : squidGuard (openSUSE-SU-2010:0460-1)

Two buffer overflows in squidGard were fixed : CVE-2009-3700: Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote attackers to cause a denial of service application hang or loss of blocking functionality via a long URL with many / slash characters, related to 'emergency mode.'...

openSUSE Security Update : logrotate (openSUSE-SU-2011:0536-1)

This update for logrotate provides the following fixes : - The shredfile function in logrotate might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostna...

openSUSE Security Update : squid (openSUSE-SU-2013:1435-1)

This squid update includes several security fixes and minor changes. - squid-3.2.x-11823-bnc829084-CVE-2013-4115.diff fixes a buffer overflow involving very long hostnames. bnc829084 CVE-2013-4115 - squid-3.2.x-11823-bnc830319-CVE-2013-4123.diff fixes problems identifying a port number as specifi...

openSUSE Security Update : logrotate (openSUSE-SU-2011:0536-1)

This update for logrotate provides the following fixes : dbg114-logrotate-4580 logrotate-4580 newupdateinfo The shredfile function in logrotate might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a filename that is...

openSUSE Security Update : freeradius-server (openSUSE-SU-2013:0137-1)

fix for CVE-2011-4966 bnc797313 freeradius-server-CVE-2011-4966.patch - fixed a bug in the logrotate script bnc797292 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-37. The text...