CVE-2012-3419

Performance Co-Pilot PCP before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such as proc/pid/maps and command line arguments...

CVE-2012-3420

Multiple memory leaks in Performance Co-Pilot PCP before 3.6.5 allow remote attackers to cause a denial of service memory consumption or daemon crash via a large number of PDUs with 1 a crafted context number to the DoFetch function in pmcd/src/dofetch.c or 2 a negative type value to the pmGetPDU...

DEBIAN-CVE-2012-3418

libpcp in Performance Co-Pilot PCP before 3.6.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via 1 a PDU with the numcreds field value greater than the number of actual elements to the pmDecodeCreds function in pcreds.c; 2 the string byte number value t...

CVE-2012-3419

Performance Co-Pilot PCP before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such as proc/pid/maps and command line arguments...

Integer overflow

libpcp in Performance Co-Pilot PCP before 3.6.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via 1 a PDU with the numcreds field value greater than the number of actual elements to the pmDecodeCreds function in pcreds.c; 2 the string byte number value t...

CVE-2012-3418

libpcp in Performance Co-Pilot PCP before 3.6.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via 1 a PDU with the numcreds field value greater than the number of actual elements to the pmDecodeCreds function in pcreds.c; 2 the string byte number value t...

Command injection

Performance Co-Pilot PCP before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such as proc/pid/maps and command line arguments...

Code injection

Multiple memory leaks in Performance Co-Pilot PCP before 3.6.5 allow remote attackers to cause a denial of service memory consumption or daemon crash via a large number of PDUs with 1 a crafted context number to the DoFetch function in pmcd/src/dofetch.c or 2 a negative type value to the pmGetPDU...

CVE-2012-3419

Performance Co-Pilot PCP before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such as proc/pid/maps and command line arguments...

CVE-2012-3420

CVE-2012-3420 affects Performance Co-Pilot (PCP) components prior to 3.6.5. The issue is due to memory leaks in PCP where processing a large number of PDUs can exhaust memory, or crash the daemon, via (1) a crafted context number to DoFetch (pmcd/src/dofetch.c) or (2) a negative type value to __p...

CVE-2012-3418

CVE-2012-3418 affects libpcp in Performance Co-Pilot (PCP) prior to 3.6.5. The vulnerability arises in the decoding paths (__pmDecodeCreds, __pmDecodeNameList, __pmDecodeIDList, __pmDecodeProfile, __pmDecodeResult, DecodeNameReq, __pmDecodeFetch, __pmDecodeInstanceReq, __pmDecodeText, __pmDecodeI...

CVE-2012-3421

The CVE-2012-3421 issue affects Performance Co-Pilot (PCP) libpcp: the pduread function in pdu.c does not time out stalled connections, allowing a remote attacker to cause a denial of service (pmcd hang) by sending PDUs byte by byte. Affected product/version: PCP before 3.6.5. Mitigation: upgrade...

CVE-2012-3419

CVE-2012-3419 affects Performance Co-Pilot (PCP) before 3.6.5. The vulnerability arises because PCP exposes some of the /proc filesystem, allowing remote or local entities to read sensitive information such as proc/pid/maps and command line arguments. Consequence: potential exposure of process de...

CVE-2012-3419

Performance Co-Pilot PCP before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such as proc/pid/maps and command line arguments...

Debian DSA-2533-1 : pcp - several vulnerabilities

It was discovered that Performance Co-Pilot pcp, a framework for performance monitoring, contains several vulnerabilities. - CVE-2012-3418 Multiple buffer overflows in the PCP protocol decoders can cause PCP clients and servers to crash or, potentially, execute arbitrary code while processing...

[SECURITY] [DSA 2533-1] pcp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2533-1 [email protected] http://www.debian.org/security/ Florian Weimer August 23, 2012 http://www.debian.org/security/faq -...

Fedora Update for pcp FEDORA-2012-12024

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for pcp FEDORA-2012-12024

Check for the Version of pcp OpenVAS Vulnerability Test Fedora Update for pcp FEDORA-2012-12024 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora 16 : pcp-3.6.5-1.fc16 (2012-12024)

Security and bugfix update. Security flaws fixed include CVE-2012-3418 CVE-2012-3419 CVE-2012-3420 and CVE-2012-3421 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

Fedora 17 : pcp-3.6.5-1.fc17 (2012-12076)

Security and bugfix update. Security flaws fixed include CVE-2012-3418 CVE-2012-3419 CVE-2012-3420 and CVE-2012-3421 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...