SUSE-SU-2016:1343-1 Security update for salt

salt was updated to fix one security issue. This security issue was fixed: - CVE-2016-3176: Insecure configuration of PAM external authentication service. Authenticating were able to specify the PAM service bsc972436...

SOL20911042 - OpenSSH vulnerability CVE-2015-8325

This previously described configuration is not the default configuration, and is a very unlikely sshd configuration on Red Hat Enterprise Linux. Note the following: The default sshd configuration uses UseLogin=no. In Red Hat Enterprise Linux 6 and 7, configurations with UseLogin=yes do not work i...

CVE-2015-8325

The dosetupenv function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pamenvironment files in user home directories, allows local users to gain privileges by triggering a crafted environment for the /bin/login program, as...

Default credentials

Juniper Junos OS before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D15, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D35, 13.3 before 13.3R6, 14.1 before 14.1R5, 14.1X50 before 14.1X50-D105, 14.1X51 before 14.1X51-D70, 14.1X53...

CentOS Update for samba4 CESA-2014:0383 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for samba and samba3x RHSA-2014:0330-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Scientific Linux Security Update : samba and samba3x on SL5.x, SL6.x i386/srpm/x86_64 (20140325)

It was found that certain Samba configurations did not enforce the password lockout mechanism. A remote attacker could use this flaw to perform password guessing attacks on Samba user accounts. Note: this flaw only affected Samba when deployed as a Primary Domain Controller. CVE-2013-4496 A flaw...

Moderate: Red Hat Security Advisory: samba and samba3x security update

Updated samba3x and samba packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6 respectively. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

Scientific Linux Security Update : 389-ds-base on SL6.x i386/x86_64 (20130311)

A flaw was found in the way LDAPv3 control data was handled by 389 Directory Server. If a malicious user were able to bind to the directory even anonymously and send an LDAP request containing crafted LDAPv3 control data, they could cause the server to crash, denying service to the directory...

389-ds-base security and bug fix update

1.2.11.15-12 - Resolves: Bug 910994 - PamConfig schema not updated during upgrade - Resolves: Bug 910995 - Valgrind reports memleak in modifyupdatelastmodifiedattr - Resolves: Bug 910996 - DS returns error 20 when replacing values of a multi-valued attribute only when replication is enabled -...

Medium: pam

Issue Overview: A stack-based buffer overflow flaw was found in the way the pamenv module parsed users' "/.pamenvironment" files. If an application's PAM configuration contained "userreadenv=1" this is not the default, a local attacker could use this flaw to crash the application or, possibly,...

RedHat Update for pam RHSA-2013:0521-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RHEL 5 : conga (RHSA-2007:0640)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:0640 advisory. The Conga package is a web-based administration tool for remote cluster and storage management. A flaw was found in ricci during a code audit. A remo...

Mandrake Linux Security Advisory : sudo (MDKSA-2001:024-1)

A buffer overflow exists in the sudo program which could be used by an attacker to obtain higher privileges. sudo is a program used to delegate superuser privileges to ordinary users and only for specific commands. Update : The sudo package for 7.1 used the system-auth facility of newer pam...

Scientific Linux Security Update : conga on SL5.x i386/x86_64

A flaw was found in ricci during a code audit. A remote attacker who is able to connect to ricci could cause ricci to temporarily refuse additional connections, a denial of service CVE-2007-4136. Fixes in this updated package include : - The nodename is now set for manual fencing. - The node log ...

Scientific Linux Security Update : wireshark on SL3.x, SL4.x, SL5.x i386/x86_64

Multiple buffer overflow flaws were found in Wireshark. If Wireshark read a malformed packet off a network, it could crash or, possibly, execute arbitrary code as the user running Wireshark. CVE-2008-3146 Several denial of service flaws were found in Wireshark. Wireshark could crash or stop...

Low: Red Hat Security Advisory: vixie-cron security, bug fix, and enhancement update

An updated vixie-cron package that fixes one security issue, several bugs, and adds one enhancement is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which...

CVE-2011-5054

Technical details for CVE-2011-5054 are not publicly available in the provided connected documents. Monitor for updates. The description here reiterates a PAM-related issue involving kcheckpass but no further specifics are included.

Fedora 13 : quagga-0.99.18-1.fc13 (2011-3916)

Wed Mar 23 2011 Jiri Skala - 0.99.18-1 - fixes 689852 - CVE-2010-1674 CVE-2010-1675 quagga various flaws - fixes 689763 - updated to latest upstream version 0.99.18 - Tue Aug 31 2010 Jiri Skala - 0.99.17-1 - update to latest upstream - fixes 628981 - CVE-2010-2948 and CVE-2010-2949 - Fri Jun 11...

MDKA-2007:067 : rsh

The rsh-server package contained incorrect PAM authentication configuration files that prevented clients from being able to access the server. The updated package contains corrected versions of these configuration files and allows correct access to the server. %NASLMINLEVEL 999999 @DEPRECATED@ Th...