Ubuntu 8.04 LTS : open-iscsi vulnerability (USN-1235-1)

Colin Watson discovered that iscsidiscovery in Open-iSCSI did not safely create temporary files. A local attacker could exploit this to to overwrite arbitrary files with root privileges. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...

USN-1235-1: Open-iSCSI vulnerability

Colin Watson discovered that iscsidiscovery in Open-iSCSI did not safely create temporary files. A local attacker could exploit this to to overwrite arbitrary files with root privileges...

DEBIAN-CVE-2009-1297

iscsidiscovery in open-iscsi in SUSE openSUSE 10.3 through 11.1 and SUSE Linux Enterprise SLE 10 SP2 and 11, and other operating systems, allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file that has a predictable name...

CVE-2009-1297

iscsidiscovery in open-iscsi in SUSE openSUSE 10.3 through 11.1 and SUSE Linux Enterprise SLE 10 SP2 and 11, and other operating systems, allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file that has a predictable name...

CVE-2009-1297

The CVE-2009-1297 issue affects open-iscsi’s iscsi_discovery in openSUSE/OpenSUSE 10.3–11.1 and SUSE/SLE 10 SP2–11. The root cause is unsafe creation of temporary files with a predictable name, enabling a local attacker to perform a symlink attack to overwrite arbitrary files. Several advisories ...

SLES10: Security update for open-iscsi

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: open-iscsi More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ V...

SLES10: Security update for open-iscsi

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: open-iscsi More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText: 200...

SLES11: Security update for open-iscsi

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: open-iscsi More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at http://download.novell.com/patch/finder/ V...

SLES11: Security update for open-iscsi

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: open-iscsi More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references. SPDX-FileCopyrightText: 200...

openSUSE 10 Security Update : open-iscsi (open-iscsi-6454)

The iscsidiscovery tool created predictable temporary files which potentially allowed attackers to overwrite system files CVE-2009-1297 . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

SuSE 10 Security Update : open-iscsi (ZYPP Patch Number 6455)

The iscsidiscovery tool created predictable temporary files which potentially allowed attackers to overwrite system files. CVE-2009-1297 Also several non-security bugs have been fixed : - don't fail init script if discovery fails - print correct ipconfig mask for dhcp - synchronize startup settin...

SuSE 11 Security Update : open-iscsi (SAT Patch Number 1240)

The iscsidiscovery tool created predictable temporary files which potentially allowed attackers to overwrite system files. CVE-2009-1297 Also some non-security bugs have been fixed : - synchronize startup settings - fix daemon segfault with CHAP %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

openSUSE Security Update : open-iscsi (open-iscsi-1238)

The iscsidiscovery tool created predictable temporary files which potentially allowed attackers to overwrite system files CVE-2009-1297 . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : open-iscsi (open-iscsi-1238)

The iscsidiscovery tool created predictable temporary files which potentially allowed attackers to overwrite system files CVE-2009-1297 . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Debian Security Advisory DSA 1314-1 (open-iscsi)

The remote host is missing an update to open-iscsi announced via advisory DSA 1314-1. OpenVAS Vulnerability Test $Id: deb13141.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1314-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1314-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 2606)

This kernel update fixes the following security problems : - The ftdisio driver allowed local users to cause a denial of service memory consumption by writing more data to the serial port than the hardware can handle, which causes the data to be queued. This requires this driver to be loaded, whi...

SuSE 10 Security Update : open-iscsi (ZYPP Patch Number 4035)

This update fixes some possible vulnerabilities in the open-iscsi daemon. CVE-2007-3099 / CVE-2007-3100 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29533;...

Fedora 7 : iscsi-initiator-utils-6.2.0.865-0.0.fc7 (2007-0543)

This update to iscsi-initiator-utils is a rebase to the upstream open-iscsi-2.0-865 release. This release include two security fixes, bug fixes and new features. The tools in this release use a different db format, but the tools are able to read old and new formats. If you want to use the new...

openSUSE 10 Security Update : open-iscsi (open-iscsi-4034)

This update fixes insecure privileges and credential verification with the iscsi daemon. CVE-2007-3099, CVE-2007-3100 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update open-iscsi-4034. The text...