rPSA-2008-0286-1 mono

rPath Security Advisory: 2008-0286-1 Published: 2008-09-29 Products: rPath Linux 2 Rating: Major Exposure Level Classification: Remote User Deterministic Vulnerability Updated Versions: mono=conary.rpath.com@rpl:2/1.2.6-5-0.1 References: https://vulners.com/cve/CVE-2008-3906 Description: Previous...

Linux Kernel BER Decoding Remote Buffer Overflow Vulnerability

CVE-2008-1673 The Linux Kernel is prone to a remote buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successfully exploiting this issue wil...

rPSA-2008-0217-1 vsftpd

rPath Security Advisory: 2008-0217-1 Published: 2008-07-08 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Remote Non-deterministic Denial of Service Updated Versions: vsftpd=conary.rpath.com@rpl:1/2.0.3-13.4-1 rPath Issue Tracking System:...

Mercurial 'patch.py'目录遍历漏洞

BUGTRAQ ID: 30072 CVE ID：CVE-2008-2942 CNCVE ID：CNCVE-20082942 Mercurial是一款分布式的版本控制工具。 Mercurial存在输入验证错误，远程攻击者可以利用漏洞进行目录遍历攻击，可能建立或者覆盖系统文件。 目前没有详细漏洞细节提供。 rPath rPath Linux 2 Mercurial Mercurial 1.0.17 可参考如下补丁： http://www.selenic.com/hg/rev/87c704ac92d4...

rPSA-2008-0211-1 mercurial mercurial-hgk

rPath Security Advisory: 2008-0211-1 Published: 2008-07-03 Products: rPath Linux 2 Rating: Major Exposure Level Classification: Indirect User Deterministic Unauthorized Access Updated Versions: mercurial=conary.rpath.com@rpl:2/1.0.1-1-0.1 mercurial-hgk=conary.rpath.com@rpl:2/1.0.1-1-0.1 rPath Iss...

CentOS 4 : sblim (CESA-2008:0497)

Updated sblim packages that resolve a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. SBLIM stands for Standards-Based Linux Instrumentation for...

Design/Logic Flaw

Untrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux Instrumentation for Manageability sblim libraries before 1-13a.el46.1 in Red Hat Enterprise Linux RHEL 4, and before 1-31.el52.1 in RHEL 5, allows local users to gain privileges via a malicious library...

sblim security update

CentOS Errata and Security Advisory CESA-2008:0497 Updated sblim packages that resolve a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. SBLIM stan...

Important: Red Hat Security Advisory: sblim security update

Updated sblim packages that resolve a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. SBLIM stands for Standards-Based Linux Instrumentation for...

sblim security update

1.31.0.1.el52.1 - Add oracle-enterprise-release.patch 1.31.el52.1 - Remove RPATH from shared libraries in sblim-cmpi-dns,fsvol,network, nfsv3,nfsv4,samba,syslog and create appropriate record in /etc/ld.so.conf.d CVE-2008-1951 Resolves: 446859...

PT-2008-1074 · Sblim +3 · Sblim-Cmpi-Nfsv3-Test +22

Name of the Vulnerable Software and Affected Versions: sblim-cmpi-base-test versions 1.5.4 through 1.5.5 sblim-cmpi-base-devel versions 1.5.4 through 1.5.5 sblim-cmpi-fsvol-test version 1.4.4 sblim-cmpi-fsvol-devel version 1.4.4 sblim-cmpi-network-test version 1.3.8 sblim-cmpi-network-devel versi...

RHEL 4 / 5 : sblim (RHSA-2008:0497)

Updated sblim packages that resolve a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. SBLIM stands for Standards-Based Linux Instrumentation for...

vsftpd-dos.txt

!/usr/bin/perl -w vsftpd 2.0.5 FTP Server on Red Hat Enterprise Linux RHEL 5, Fedora 6 to 8, Foresight Linux, rPath Linux is prone to Denial-of-ServiceDoS vulnerability. Can be xploited by large number of CWD commands to vsftp daemon with denyfile configuration option in /etc/vsftpd/vsftpd.conf o...

openoffice.org: insecure relative RPATH in OOo 1.1.x packages

Untrusted search path vulnerability in a certain Red Hat build script for OpenOffice.org OOo 1.1.x on Red Hat Enterprise Linux RHEL 3 and 4 allows local users to gain privileges via a malicious library in the current working directory, related to incorrect quoting of the ORIGIN symbol for use in...

Important: Red Hat Security Advisory: openoffice.org security update

Updated openoffice.org packages to correct two security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop...

Design/Logic Flaw

Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux RHEL 5 and Fedora 6 through 8, and on Foresight Linux and rPath appliances, allows remote attackers to cause a denial of service memory consumption via a large number of CWD commands, as demonstrated by an...

CVE-2007-5962

Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux RHEL 5 and Fedora 6 through 8, and on Foresight Linux and rPath appliances, allows remote attackers to cause a denial of service memory consumption via a large number of CWD commands, as demonstrated by an...

CVE-2007-5962

CVE-2007-5962 describes a memory-leak vulnerability in vsftpd triggered by a large number of CWD commands when the deny_file option is set. The issue affects vsftpd 2.0.5 on Red Hat Enterprise Linux 5 and Fedora 6–8, as well as Foresight Linux and rPath appliances. Remote attackers could cause de...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the rootpw plugin in rPath Appliance Platform Agent 2 and 3 allows remote attackers to reset the root password as the administrator via a crafted URL...

CVE-2008-2140

Cross-site request forgery CSRF vulnerability in the rootpw plugin in rPath Appliance Platform Agent 2 and 3 allows remote attackers to reset the root password as the administrator via a crafted URL...