CVE-2020-13867

Open-iSCSI targetcli-fb through 2.1.52 has weak permissions for /etc/target and for the backup directory and backup files...

CVE-2020-13867

Open-iSCSI targetcli-fb through 2.1.52 has weak permissions for /etc/target and for the backup directory and backup files...

CVE-2020-13867

Open-iSCSI targetcli-fb through 2.1.52 has weak permissions for /etc/target and for the backup directory and backup files...

EulerOS 2.0 SP3 : iscsi-initiator-utils (EulerOS-SA-2019-2596)

According to the version of the iscsi-initiator-utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio server to abort or potentially execut...

Open-iSCSI Buffer Overflow Vulnerability

Open-iSCSI is an open source iSCSI Small Computer System Interface tool based on the Linux platform. A buffer overflow vulnerability exists in the 'processiscsidbroadcast' function of the iscsiuio/src/unix/iscsidipc.c file in Open-iSCSI 2.0.875 and earlier versions, which stems from the program...

CVE-2017-17840

An issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio server to abort or potentially execute code by sending messages with incorrect lengths, which due to lack of checking can lead to buffer overflows, and result in aborts with overflow checking enabled or...

CVE-2017-17840

An issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio server to abort or potentially execute code by sending messages with incorrect lengths, which due to lack of checking can lead to buffer overflows, and result in aborts with overflow checking enabled or...

CVE-2017-17840

An issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio server to abort or potentially execute code by sending messages with incorrect lengths, which due to lack of checking can lead to buffer overflows, and result in aborts with overflow checking enabled or...

CVE-2017-17840

An issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio server to abort or potentially execute code by sending messages with incorrect lengths, which due to lack of checking can lead to buffer overflows, and result in aborts with overflow checking enabled or...

Buffer overflow

An issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio server to abort or potentially execute code by sending messages with incorrect lengths, which due to lack of checking can lead to buffer overflows, and result in aborts with overflow checking enabled or...

UBUNTU-CVE-2017-17840

An issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio server to abort or potentially execute code by sending messages with incorrect lengths, which due to lack of checking can lead to buffer overflows, and result in aborts with overflow checking enabled or...

CVE-2017-17840

An issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio server to abort or potentially execute code by sending messages with incorrect lengths, which due to lack of checking can lead to buffer overflows, and result in aborts with overflow checking enabled or...

CVE-2017-17840

CVE-2017-17840 : In Open-iSCSI up to 2.0.875, the iscsiuio server (process_iscsid_broadcast in iscsiuio/src/unix/iscsid_ipc.c) does not validate the payload length before a write, enabling a local attacker to cause a buffer overflow and potentially abort or execute code. Public details describe t...

CVE-2017-17840

An issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio server to abort or potentially execute code by sending messages with incorrect lengths, which due to lack of checking can lead to buffer overflows, and result in aborts with overflow checking enabled or...

CVE-2017-17840

An issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio server to abort or potentially execute code by sending messages with incorrect lengths, which due to lack of checking can lead to buffer overflows, and result in aborts with overflow checking enabled or...

Vulnerabilities of the Debian GNU/Linux operating system that allow a local malicious individual to compromise the accessibility of protected information

Multiple vulnerabilities in the open-iscsi package of the Debian GNU/Linux operating system; exploiting these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited by local malicious actors...

Mandriva Linux Security Advisory : open-iscsi (MDVSA-2013:109)

Updated open-iscsi package fixes security vulnerability : Colin Watson discovered that iscsidiscovery in Open-iSCSI did not safely create temporary files. A local attacker could exploit this to overwrite arbitrary files with root privileges CVE-2009-1297. %NASLMINLEVEL 70300 C Tenable Network...

Scientific Linux Security Update : iscsi-initiator-utils on SL5.x i386/x86_64

Olaf Kirch discovered two flaws in open-iscsi. A local attacker could use these flaws to cause the server daemon to stop responding, leading to a denial of service. CVE-2007-3099, CVE-2007-3100. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

Ubuntu Update for open-iscsi USN-1235-1

Ubuntu Update for Linux kernel vulnerabilities USN-1235-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12351.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for open-iscsi USN-1235-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net...

Ubuntu 8.04 LTS : open-iscsi vulnerability (USN-1235-1)

Colin Watson discovered that iscsidiscovery in Open-iSCSI did not safely create temporary files. A local attacker could exploit this to to overwrite arbitrary files with root privileges. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...