474 matches found
CVE-2009-4261
Ganeti CVE-2009-4261 affects the iallocator framework with path sanitization errors in Ganeti versions 1.2.4–1.2.8, 2.0.0–2.0.4, and 2.1.0 before 2.1.0~rc2. The vulnerability allows (1) remote attackers to execute arbitrary programs via a crafted external script name through the HTTP remote API (...
CVE-2009-4261
Multiple directory traversal vulnerabilities in the iallocator framework in Ganeti 1.2.4 through 1.2.8, 2.0.0 through 2.0.4, and 2.1.0 before 2.1.0rc2 allow 1 remote attackers to execute arbitrary programs via a crafted external script name supplied through the HTTP remote API RAPI and allow 2...
[Suspected Spam][oCERT-2009-019] Ganeti path sanitization errors
2009-019 Ganeti path sanitization errors Description: Ganeti, an open source virtualisation manager, suffers from an input validation bug that poses a security risk. The vulnerability applies to the commands submitted, either locally via gnt- commands or remotely via the HTTP API, to the machine...
FreeBSD Security Advisory (FreeBSD-SA-06:16.smbfs.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:16.smbfs.asc ADV FreeBSD-SA-06:16.smbfs.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft...
FreeBSD Security Advisory (FreeBSD-SA-06:16.smbfs.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:16.smbfs.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
TorrentFlux2.1.txt
Dorkfire.com Security Advisory Discovered By: [email protected] Type of problem: Directory Traversal Software: TorrentFlux 2.1 Software Description: TorrentFlux is a FREE PHP based Torrent client that runs on a web server. Manage all of your Torrent downloads through a convenient web interface...
puma10.txt
+-------------------------------------------------------------------- + + PUMA 1.0 RC 2 config.php Remote File Inclusion + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/415/org/PUMA1.0RC2config.phpRFI.htm + +-------------------------------------------------------------------- + +...
DSA-846-1 cpio - several
Bulletin has no description...
Moderate: Red Hat Security Advisory: rsync security update
An updated rsync package that fixes a path sanitizing bug is now available. The rsync program synchronizes files over a network. Versions of rsync up to and including version 2.6.2 contain a path sanitization issue. This issue could allow an attacker to read or write files outside of the rsync...
RHEL 2.1 / 3 : rsync (RHSA-2004:436)
An updated rsync package that fixes a path sanitizing bug is now available. The rsync program synchronizes files over a network. Versions of rsync up to and including version 2.6.2 contain a path sanitization issue. This issue could allow an attacker to read or write files outside of the rsync...
Mandrake Linux Security Advisory : rsync (MDKSA-2004:042)
Rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, allows remote attackers to write files outside of the module's path. The updated packages provide a patched rsync to correct this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
DEBIAN-CVE-2004-0426
rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows remote attackers to write files outside of the module's path...
Important: Red Hat Security Advisory: rsync security update
An updated rsync package that fixes a directory traversal security flaw is now available. Rsync is a program for synchronizing files over a network. Rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot. This could allow a remote attacker to wri...