1024 matches found
Command injection
The Puppet Communications Protocol PCP Broker incorrectly validates message header sizes. An attacker could use this to crash the PCP Broker, preventing commands from being sent to agents. This is resolved in Puppet Enterprise 2016.4.3 and 2016.5.2...
CVE-2016-9686
CVE-2016-9686 affects the Puppet Communications Protocol (PCP) Broker in Puppet Enterprise. The root cause is incorrect validation of message header sizes, allowing an attacker to crash the PCP Broker and prevent commands from reaching agents, resulting in a partial availability impact. The vulne...
CVE-2016-9686
The Puppet Communications Protocol PCP Broker incorrectly validates message header sizes. An attacker could use this to crash the PCP Broker, preventing commands from being sent to agents. This is resolved in Puppet Enterprise 2016.4.3 and 2016.5.2...
CVE-2016-9686
Removed by vendor...
CVE-2016-9686: Improper Input Validation
The Puppet Communications Protocol PCP Broker incorrectly validates message header sizes. An attacker could use this to crash the PCP Broker, preventing commands from being sent to agents. This is resolved in Puppet Enterprise 2016.4.3 and 2016.5.2...
PT-2017-10263
Name of the Vulnerable Software and Affected Versions Puppet Enterprise versions prior to 2016.4.3 Puppet Enterprise versions prior to 2016.5.2 Description The issue concerns the incorrect validation of message header sizes in the Puppet Communications Protocol PCP Broker. This could allow an...
Puppet Enterprise < 2016.4.0 Multiple Vulnerabilities
Puppet Enterprise is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:puppet:enterprise"; if...
Cisco Prime Collaboration Provisioning 10.6.x / 11.0.x < 11.0.0.815 Web Framework SQLi (cisco-sa-20151008-pcp)
According to its self-reported version number, the Cisco Prime Collaboration Provisioning PCP device is 10.6.x or 11.0.x prior to 11.0.0.582. It is, therefore, affected by a SQL injection vulnerability in the web framework component due to improper sanitization of user-supplied input before using...
Cisco Prime Collaboration Provisioning Web Framework Access Controls Bypass Vulnerability (cisco-sa-20150916-pcp)
According to its self-reported version number, the Cisco Prime Collaboration Provisioning device is a version prior to 11.0.0.650. It is, therefore, affected by a security bypass vulnerability in the web framework due to improper implementation of authorization and access controls. An...
SUSE Linux Enterprise Compromise Protected Information
Multiple vulnerabilities exist in the pcp package of the SUSE Linux Enterprise operating system; exploiting these vulnerabilities can lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
SUSE Linux Enterprise Compromise Protected Information
The pcp-import-mrtg2pcp package of the SUSE Linux Enterprise operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
SUSE Linux Enterprise Compromise Protected Information
The multiple vulnerabilities in the pcp-devel package of the SUSE Linux Enterprise operating system can lead to a violation of the accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...
SUSE Linux Enterprise Compromise Protected Information
Multiple vulnerabilities exist in the pcp-import-iostat2pcp package of the SUSE Linux Enterprise operating system. Exploitation of these vulnerabilities may lead to a violation of the confidentiality of protected information. These vulnerabilities can be exploited remotely...
SUSE Linux Enterprise Compromise Protected Information
The pcp-import-sheet2pcp package of the SUSE Linux Enterprise operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Remote Compromise Protected Information
Multiple vulnerabilities exist in the pcp package of the Debian GNU/Linux operating system. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
openSUSE Security Update : pcp (openSUSE-SU-2012:1036-1)
Update to pcp-3.6.5. + Fixes for security advisory CVE-2012-3418; bnc775009. + Workaround for security advisory CVE-2012-3419; bnc775010. + Fixes for security advisory CVE-2012-3420; bnc775011. + Fixes for security advisory CVE-2012-3421; bnc775013. %NASLMINLEVEL 70300 C Tenable Network Security,...
openSUSE Security Update : pcp (openSUSE-SU-2012:1081-1)
Update to pcp-3.6.5. + Fixes for security advisory CVE-2012-3418; bnc775009. + Workaround for security advisory CVE-2012-3419; bnc775010. + Fixes for security advisory CVE-2012-3420; bnc775011. + Fixes for security advisory CVE-2012-3421; bnc775013. %NASLMINLEVEL 70300 C Tenable Network Security,...
openSUSE Security Update : pcp (openSUSE-SU-2012:1079-1)
Update to pcp-3.6.5. + Fixes for security advisory CVE-2012-3418; bnc775009. + Workaround for security advisory CVE-2012-3419; bnc775010. + Fixes for security advisory CVE-2012-3420; bnc775011. + Fixes for security advisory CVE-2012-3421; bnc775013. %NASLMINLEVEL 70300 C Tenable Network Security,...
SuSE 11.2 Security Update : pcp (SAT Patch Number 7221)
pcp was updated to version 3.6.10 which fixes security issues and also brings a lot of new features. - Update to pcp-3.6.10. - Transition daemons to run under an unprivileged account. - Fixes for security advisory CVE-2012-5530: tmpfile flaws;. bnc782967 - Fix pcp1 command short-form pmlogger...
SuSE 10 Security Update : pcp (ZYPP Patch Number 8421)
pcp was updated to version 3.6.10 which fixes security issues and also brings a lot of new features. - Update to pcp-3.6.10. o Transition daemons to run under an unprivileged account. o Fixes for security advisory CVE-2012-5530: tmpfile flaws; bnc782967. o Fix pcp1 command short-form pmlogger...