[SECURITY] Fedora 18 Update: ypserv-2.29-1.fc18

The Network Information Service NIS is a system that provides network information login names, passwords, home directories, group information to all of the machines on a network. NIS can allow users to log in on any machine on the network, as long as the machine has the NIS client programs runnin...

Scientific Linux Security Update : ypbind on SL3.x i386/x86_64

This updated package fixes the following bugs : - after a NIS server change, for example, after a server failure, ypbind corrupted files in the '/var/yp/binding/' directory. As well, these files were not updated, possibly causing old information to be retained. In these situations, glibc attempte...

DEBIAN-CVE-2011-2716

The DHCP client udhcpc in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the 1 HOSTNAME, 2 DOMAINNAME, 3 NISDOMAIN, and 4 TFTPSERVERNAME host name options...

UBUNTU-CVE-2011-2716

The DHCP client udhcpc in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the 1 HOSTNAME, 2 DOMAINNAME, 3 NISDOMAIN, and 4 TFTPSERVERNAME host name options...

busybox: udhcpc insufficient checking of DHCP options

The DHCP client udhcpc in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the 1 HOSTNAME, 2 DOMAINNAME, 3 NISDOMAIN, and 4 TFTPSERVERNAME host name options...

Ubuntu: Security Advisory (USN-1396-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : eglibc, glibc vulnerabilities (USN-1396-1)

It was discovered that the GNU C Library did not properly handle integer overflows in the timezone handling code. An attacker could use this to possibly execute arbitrary code by convincing an application to load a maliciously constructed tzfile. CVE-2009-5029 It was discovered that the GNU C...

Ubuntu Update for eglibc USN-1396-1

Ubuntu Update for Linux kernel vulnerabilities USN-1396-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13961.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for eglibc USN-1396-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

[USN-1396-1] GNU C Library vulnerabilities

========================================================================== Ubuntu Security Notice USN-1396-1 March 09, 2012 eglibc, glibc vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivative...

USN-1396-1: GNU C Library vulnerabilities

It was discovered that the GNU C Library did not properly handle integer overflows in the timezone handling code. An attacker could use this to possibly execute arbitrary code by convincing an application to load a maliciously constructed tzfile. CVE-2009-5029 It was discovered that the GNU C...

HP-UX PHNE_30091 : HP-UX Running RPC, Remote Denial of Service (DoS) (HPSBUX01020 SSRT2384 rev.2)

s700800 11.23 NIS/NIS+ cumulative patch : A potential security vulnerability has been identified with HP-UX running RPC services, where the vulnerability may be exploited by an unauthorized remote user to create a denial of service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 11.1 Security Update : glibc (SAT Patch Number 4572)

This update fixes the following security issues found in glibc : - Specially crafted input to the fnmatch function could cause an integer overflow. CVE-2011-1071 - The output of the 'locale' command was not properly quoted. CVE-2011-1095 - Unprivileged users could read the NIS shadow database...

IT-Grundschutz M5.018: Einsatz der Sicherheitsmechanismen von NIS

IT-Grundschutz M5.018: Einsatz der Sicherheitsmechanismen von NIS. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95054 Diese Prüfung bezieht sich auf die 12...

IT-Grundschutz M5.018: Einsatz der Sicherheitsmechanismen von NIS

IT-Grundschutz M5.018: Einsatz der Sicherheitsmechanismen von NIS. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95054 Diese Prüfung bezieht sich auf die 12...

SuSE 11.1 Security Update : glibc (SAT Patch Number 4572)

This update fixes the following security issues found in glibc : - Specially crafted input to the fnmatch function could cause an integer overflow. CVE-2011-1071 - The output of the 'locale' command was not properly quoted. CVE-2011-1095 - Unprivileged users could read the NIS shadow database...

[slackware-security] shadow

New shadow packages are available for Slackware 13.1 and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/shadow-4.1.4.3-i486-1slack13.1.txz: Rebuilt. This release fixes a security issue where local users may be able to add themselves to N...

Debian Security Advisory DSA 2164-1 (shadow)

The remote host is missing an update to shadow announced via advisory DSA 2164-1. OpenVAS Vulnerability Test $Id: deb21641.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2164-1 shadow Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian: Security Advisory (DSA-2164-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2164-1 : shadow - insufficient input sanitization

Kees Cook discovered that the chfn and chsh utilities do not properly sanitize user input that includes newlines. An attacker could use this to corrupt passwd entries and may create users or groups in NIS environments. Packages in the oldstable distribution lenny are not affected by this problem...

Ubuntu Update for shadow vulnerability USN-1065-1

Ubuntu Update for Linux kernel vulnerabilities USN-1065-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10651.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for shadow vulnerability USN-1065-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...