6327 matches found
Fedora Core 3 : gftp-2.0.18-0.FC3 (2005-309)
Fri Feb 18 2005 Warren Togami 2.0.18-0.FC3 - FC3 including CVE-2005-0372 - Thu Feb 10 2005 Warren Togami 2.0.18-1 - 2.0.18 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...
SUSE Security Announcement: kernel multiple security problems (SUSE-SA:2005:050)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUSE Security Announcement Package: kernel Announcement ID: SUSE-SA:2005:050 Date: Thu, 01 Sep 2005 14:00:00 +0000 Affected Products: 9.1, 9.2, 9.3 SUSE Linux Enterprise Server 9 Novell Linux Desktop 9 Vulnerability Type: denial of service, local...
Fedora Core 3 : gaim-1.5.0-1.fc3 (2005-750)
http://gaim.sourceforge.net/ Please see the Changelog details and security information at the upstream Gaim Project site. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...
Fedora Core 4 : vim-6.3.086-0.fc4 (2005-737)
CVE-2005-2368 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...
Fedora Core 4 : rpm-4.4.1-22 (2005-565)
This update corrects security problem CVE-2005-2096. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
CVE-2002-1672
Webmin 0.92, when installed from an RPM, creates /var/webmin with insecure permissions world readable, which could allow local users to read the root user's cookie-based authentication credentials and possibly hijack the root user's session using the credentials...
Berlios GPSD 1.91-1 < 2.7-2 - Format String
require 'msf/core' class Metasploit3 'Berlios GPSD Format String Vulnerability', 'Description' = %q This module exploits a format string vulnerability in the Berlios GPSD server. This vulnerability was discovered by Kevin Finisterre. , 'Author' = 'Yann Senotier ' , 'License' = MSFLICENSE, 'Versio...
CVE-2003-1156: Undefined Security Weakness
Java Runtime Environment JRE and Software Development Kit SDK 1.4.2 through 1.4.202 allows local users to overwrite arbitrary files via a symlink attack on 1 unpack.log, as created by the unpack program, or 2 .mailcap1 and .mime.types1, as created by the RPM program...
insecure user account lam-runtime-7.0.6-2mdk rpm
Serverity: HIGH I found a bug when lam-runtime-7.0.6-2mdk is installed it creates a new user/group with insecure permissions. BUG: user "mpi" is created without a password which can be used to compromise a system. rpm -qf /var/lib/mpi/testmpi.lam lam-runtime-7.0.6-2mdk FIX: Either lock the accoun...
[SA13635] Rpm Finder "web()" Buffer Overflow and Insecure File Creation
TITLE: Rpm Finder "web" Buffer Overflow and Insecure File Creation SECUNIA ADVISORY ID: SA13635 VERIFY ADVISORY: http://secunia.com/advisories/13635/ CRITICAL: Moderately critical IMPACT: Privilege escalation, System access WHERE: From remote SOFTWARE: Rosiello Rpm Finder rpf 1.x...
Fedora Core 2 : cups-1.1.20-11.6 (2004-337)
A problem with PDF handling was discovered by Chris Evans, and has been fixed. The Common Vulnerabilities and Exposures project www.mitre.org has assigned the name CVE-2004-0888 to this issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedor...
Mandrake Linux Security Advisory : libneon (MDKSA-2004:049)
It was discovered that in portions of neon, sscanf is used in an unsafe manner. This will result in an overflow of a static heap variable. The updated packages provide a patched libneon to correct these problems. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...
CVE-2003-1034
The CVE-2003-1034 issue affects SAP DB 7.x when installed as an RPM: the dbmsrv and lserver binaries are created with world-writable permissions, enabling local users to modify these executables and escalate privileges. This is a local privilege escalation vulnerability due to insufficient file p...
CVE-2003-1034
The RPM installation of SAP DB 7.x creates the 1 dbmsrv or 2 lserver programs with world-writable permissions, which allows local users to gain privileges by modifying those programs...
CVE-2003-0546
up2date 3.0.7 and 3.1.23 does not properly verify RPM GPG signatures, which could allow remote attackers to cause unsigned packages to be installed from the Red Hat Network, if that network is compromised...
CVE-2003-0546
up2date 3.0.7 and 3.1.23 does not properly verify RPM GPG signatures, which could allow remote attackers to cause unsigned packages to be installed from the Red Hat Network, if that network is compromised...
CVE-2003-0546
CVE-2003-0546 affects up2date 3.0.7 and 3.1.23, which do not properly verify RPM GPG signatures. This could let remote attackers install unsigned packages from the Red Hat Network if that network is compromised. The CVSS base score is 7.5 (HIGH). Exploitation details are not provided in the suppl...
CVE-2003-0546: Undefined Security Weakness
up2date 3.0.7 and 3.1.23 does not properly verify RPM GPG signatures, which could allow remote attackers to cause unsigned packages to be installed from the Red Hat Network, if that network is compromised...
CVE-2002-2204
The default --checksig setting in RPM Package Manager 4.0.4 checks that a package's signature is valid without listing who signed it, which can allow remote attackers to make it appear that a malicious package comes from a trusted source...
CVE-2001-0923
CVE-2001-0923 affects RPM Package Manager 4.0.x through 4.0.2.x and allows an attacker to execute arbitrary code via corrupted data in an RPM file when the file is queried. The NVD/CVE entries provide the vulnerability description and a CVSS v2 base score of 7.2 (HIGH) with LOCAL attack vector, b...