SLES11: Security update for open-iscsi

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: open-iscsi More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at http://download.novell.com/patch/finder/ V...

SLES11: Security update for open-iscsi

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: open-iscsi More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references. SPDX-FileCopyrightText: 200...

openSUSE 10 Security Update : open-iscsi (open-iscsi-6454)

The iscsidiscovery tool created predictable temporary files which potentially allowed attackers to overwrite system files CVE-2009-1297 . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

SuSE 11 Security Update : open-iscsi (SAT Patch Number 1240)

The iscsidiscovery tool created predictable temporary files which potentially allowed attackers to overwrite system files. CVE-2009-1297 Also some non-security bugs have been fixed : - synchronize startup settings - fix daemon segfault with CHAP %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

SuSE 10 Security Update : open-iscsi (ZYPP Patch Number 6455)

The iscsidiscovery tool created predictable temporary files which potentially allowed attackers to overwrite system files. CVE-2009-1297 Also several non-security bugs have been fixed : - don't fail init script if discovery fails - print correct ipconfig mask for dhcp - synchronize startup settin...

openSUSE Security Update : open-iscsi (open-iscsi-1238)

The iscsidiscovery tool created predictable temporary files which potentially allowed attackers to overwrite system files CVE-2009-1297 . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : open-iscsi (open-iscsi-1238)

The iscsidiscovery tool created predictable temporary files which potentially allowed attackers to overwrite system files CVE-2009-1297 . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Debian Security Advisory DSA 1314-1 (open-iscsi)

The remote host is missing an update to open-iscsi announced via advisory DSA 1314-1. OpenVAS Vulnerability Test $Id: deb13141.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1314-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1314-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 2606)

This kernel update fixes the following security problems : - The ftdisio driver allowed local users to cause a denial of service memory consumption by writing more data to the serial port than the hardware can handle, which causes the data to be queued. This requires this driver to be loaded, whi...

SuSE 10 Security Update : open-iscsi (ZYPP Patch Number 4035)

This update fixes some possible vulnerabilities in the open-iscsi daemon. CVE-2007-3099 / CVE-2007-3100 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29533;...

Fedora 7 : iscsi-initiator-utils-6.2.0.865-0.0.fc7 (2007-0543)

This update to iscsi-initiator-utils is a rebase to the upstream open-iscsi-2.0-865 release. This release include two security fixes, bug fixes and new features. The tools in this release use a different db format, but the tools are able to read old and new formats. If you want to use the new...

openSUSE 10 Security Update : open-iscsi (open-iscsi-4034)

This update fixes insecure privileges and credential verification with the iscsi daemon. CVE-2007-3099, CVE-2007-3100 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update open-iscsi-4034. The text...

Debian DSA-1314-1 : open-iscsi - several vulnerabilities

Several local and remote vulnerabilities have been discovered in open-iscsi, a transport-independent iSCSI implementation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3099 Olaf Kirch discovered that due to a programming error access to the...

Multiple open-iscsi security vulnerabilities

Invalid implementation of internal sockets and semaphores access...

[SECURITY] [DSA 1314-1] New open-iscsi packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1314-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 19th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1314-1] New open-iscsi packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1314-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 19th, 2007 http://www.debian.org/security/faq -...

DSA-1314-1 open-iscsi

Bulletin has no description...

CVE-2007-3099

usr/mgmtipc.c in iscsid in open-iscsi iscsi-initiator-utils before 2.0-865 checks the client's UID on the listening AFLOCAL socket instead of the new connection, which allows remote attackers to access the management interface and cause a denial of service iscsid exit or iSCSI connection loss...

CVE-2007-3100

usr/log.c in iscsid in open-iscsi iscsi-initiator-utils before 2.0-865 uses a semaphore with insecure permissions world-writable/world-readable for managing log messages using shared memory, which allows local users to cause a denial of service hang by grabbing the semaphore...