523 matches found
Ubuntu 9.10 / 10.04 LTS / 10.10 : shadow vulnerability (USN-1065-1)
Kees Cook discovered that some shadow utilities did not correctly validate user input. A local attacker could exploit this flaw to inject newlines into the /etc/passwd file. If the system was configured to use NIS, this could lead to existing NIS groups or users gaining or losing access to the...
USN-1065-1: shadow vulnerability
Kees Cook discovered that some shadow utilities did not correctly validate user input. A local attacker could exploit this flaw to inject newlines into the /etc/passwd file. If the system was configured to use NIS, this could lead to existing NIS groups or users gaining or losing access to the...
Mandriva Linux Security Advisory : glibc (MDVSA-2010:112)
Multiple vulnerabilities was discovered and fixed in glibc : Multiple integer overflows in the strfmon implementation in the GNU C Library aka glibc or libc6 2.10.1 and earlier allow context-dependent attackers to cause a denial of service memory consumption or application crash via a crafted...
Mandriva Linux Security Advisory : glibc (MDVSA-2010:111)
Multiple vulnerabilities was discovered and fixed in glibc : Multiple integer overflows in the strfmon implementation in the GNU C Library aka glibc or libc6 2.10.1 and earlier allow context-dependent attackers to cause a denial of service memory consumption or application crash via a crafted...
Test System if NIS Server ore Client installed
Test System if NIS Server ore Client installed. OpenVAS Vulnerability Test $Id: GSHBSSHNIS.nasl 7113 2017-09-13 06:03:30Z cfischer $ Test System if NIS Server ore Client installed Authors: Thomas Rotter Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is...
IT-Grundschutz M5.018: Einsatz der Sicherheitsmechanismen von NIS
IT-Grundschutz M5.018: Einsatz der Sicherheitsmechanismen von NIS. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95054 Diese Prüfung bezieht sich auf die 11...
Test System if NIS Server or Client is installed
Test System if NIS Server or Client is installed. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
IT-Grundschutz M5.018: Einsatz der Sicherheitsmechanismen von NIS
IT-Grundschutz M5.018: Einsatz der Sicherheitsmechanismen von NIS. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95054 Diese Prüfung bezieht sich auf die 11...
IT-Grundschutz M5.018: Einsatz der Sicherheitsmechanismen von NIS
IT-Grundschutz M5.018: Einsatz der Sicherheitsmechanismen von NIS. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95054 Diese Prüfung bezieht sich auf die 10...
IT-Grundschutz M5.018: Einsatz der Sicherheitsmechanismen von NIS
IT-Grundschutz M5.018: Einsatz der Sicherheitsmechanismen von NIS. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95054 Diese Prüfung bezieht sich auf die 10...
[SECURITY] Fedora 11 Update: nss_db-2.2-46.fc11
Nssdb is a set of C library extensions which allow Berkeley Databases to be used as a primary source of aliases, ethers, groups, hosts, networks, protocol, users, RPCs, services, and shadow passwords instead of or in addition to using flat files or NIS. Install nssdb if your flat name service fil...
Debian DSA-1973-1 : glibc, eglibc - information disclosure
Christoph Pleger has discovered that the GNU C Library aka glibc and its derivatives add information from the passwd.adjunct.byname map to entries in the passwd map, which allows local users to obtain the encrypted passwords of NIS accounts by calling the getpwnam function. %NASLMINLEVEL 70300 C...
Debian: Security Advisory (DSA-1973-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 1973-1] New glibc packages fix information disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1973-1 [email protected] http://www.debian.org/security/ Aurelien Jarno January 19, 2010 http://www.debian.org/security/faq -...
glibc getpwname information leak
Records from passwd.adjunct.byname map are added to passwd map leading to crypted NIS password disclosure...
[SECURITY] [DSA 1973-1] New glibc packages fix information disclosure
------------------------------------------------------------------------ Debian Security Advisory DSA-1973-1 [email protected] http://www.debian.org/security/ Aurelien Jarno January 19, 2010 http://www.debian.org/security/faq -...
DSA-1973-1 glibc - information disclosure
Bulletin has no description...
DEBIAN-CVE-2010-0015
nis/nssnis/nis-pwd.c in the GNU C Library aka glibc or libc6 2.7 and Embedded GLIBC EGLIBC 2.10.2 adds information from the passwd.adjunct.byname map to entries in the passwd map, which allows remote attackers to obtain the encrypted passwords of NIS accounts by calling the getpwnam function...
CVE-2010-0015
nis/nssnis/nis-pwd.c in the GNU C Library aka glibc or libc6 2.7 and Embedded GLIBC EGLIBC 2.10.2 adds information from the passwd.adjunct.byname map to entries in the passwd map, which allows remote attackers to obtain the encrypted passwords of NIS accounts by calling the getpwnam function...
CVE-2010-0015
nis/nssnis/nis-pwd.c in the GNU C Library aka glibc or libc6 2.7 and Embedded GLIBC EGLIBC 2.10.2 adds information from the passwd.adjunct.byname map to entries in the passwd map, which allows remote attackers to obtain the encrypted passwords of NIS accounts by calling the getpwnam function...