Fedora 8 : librapi-0.11-1.fc8 / librra-0.11-1.fc8 / libsynce-0.11-2.fc8 / odccm-0.11-1.fc8 / etc (2008-0680)

The remote Fedora host is missing one or more security updates : librra-0.11-1.fc8 : - Wed Jan 9 2008 Andreas Bierfert - 0.11-1 - version upgrade - Fri Dec 21 2007 Andreas Bierfert - 0.10.0-2 - rework BR - Wed May 9 2007 Aurelien Bompard 0.10.0-1 - version 0.10.0 synce-serial-0.11-1.fc8 : - Wed J...

[SECURITY] Fedora 8 Update: synce-serial-0.11-1.fc8

Synce-serial is part of the SynCE project: http://www.synce.org This module contains helper scripts for setting up a serial connection for use with SynCE. They are basically wrappers around pppd: synce-serial-config - Use this to select serial port and IP addresses synce-serial-start - Use this t...

[SECURITY] Fedora 8 Update: synce-kpm-0.11-3.fc8

SynCE-KPM stands for SynCE KDE PDA Manager and aims to be an application to manage WM5/WM6 PDA devices from Linux...

[SECURITY] Fedora 8 Update: synce-gnome-0.11-2.fc8

SynCE-GNOME is currently just a buzzword for an idea that eventually, will encapsulate multiple applications into one applet. At the moment, SynCE-GNOME as we know it only displays nice libnotify messages when a devi ce is connected or disconnected, and it prompts for a password if one is requi r...

[SECURITY] Fedora 8 Update: synce-sync-engine-0.11-6.fc8

Synce synchronization engine for use with libopensync...

[SECURITY] Fedora 8 Update: librra-0.11-1.fc8

RRA is part of the SynCE project: http://www.synce.org...

[SECURITY] Fedora 8 Update: synce-gnomevfs-0.11-1.fc8

This is a gnome-vfs module that enables access to the Windows CE or Pocket PC file system through the gnome-vfs functions...

CVE-2007-6703

Unspecified vulnerability in vdccm before 0.10.1 in SynCE SynCE-dccm might allow attackers to cause a denial of service via unspecified vectors...

CVE-2007-6703

Unspecified vulnerability in vdccm before 0.10.1 in SynCE SynCE-dccm might allow attackers to cause a denial of service via unspecified vectors...

CVE-2008-1136

The Utils::runScripts function in src/utils.cpp in vdccm 0.92 through 0.10.0 in SynCE SynCE-dccm allows remote attackers to execute arbitrary commands via shell metacharacters in a certain string to TCP port 5679...

Code injection

The Utils::runScripts function in src/utils.cpp in vdccm 0.92 through 0.10.0 in SynCE SynCE-dccm allows remote attackers to execute arbitrary commands via shell metacharacters in a certain string to TCP port 5679...

Design/Logic Flaw

Unspecified vulnerability in vdccm before 0.10.1 in SynCE SynCE-dccm might allow attackers to cause a denial of service via unspecified vectors...

CVE-2007-6703

Unspecified vulnerability in vdccm before 0.10.1 in SynCE SynCE-dccm might allow attackers to cause a denial of service via unspecified vectors...

CVE-2008-1136

The CVE-2008-1136 entry affects SynCE-dccm (vdccm) versions 0.92 through 0.10.0. The vulnerability resides in Utils::runScripts (src/utils.cpp), where a string processed and sent to TCP port 5679 can be tainted by shell metacharacters, permitting remote command execution. This is a remote, networ...

CVE-2007-6703

CVE-2007-6703 affects vdccm (SynCE-dccm) prior to 0.10.1. The vulnerability is described as an unspecified denial-of-service by SynCE-dccm with high impact (confidentiality, integrity, and availability) per NVD CVSS 2.0 vector. Connected advisories (SUSE, Red Hat, Fedora OpenVAS entries) confirm ...

CORE-2007-1106: SynCE Remote Command Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies – CoreLabs Advisory http://www.coresecurity.com/corelabs SynCE Remote Command Injection Advisory Information Title: SynCE Remote Command Injection Advisory ID: CORE-2007-1106 Advisory URL:...

SynCE shell characters vulnerability

Shell characters vulnerability on external application execution...

SynCE 0.92 - vdccm Daemon Remote Command Injection

SynCE 0.92 - vdccm Daemon Remote Command Injection source: https://www.securityfocus.com/bid/27178/info SynCE is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Attackers can exploit this issue to execute arbitrary commands in th...

SynCE Remote Command Injection

SynCE Remote Command Injection Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Advisory Information Title: SynCE Remote Command Injection Advisory ID: CORE-2007-1106 Advisory URL: http://www.coresecurity.com/?action=item&id=2070 Date published: 2008-01-07 Date...

Core Security Technologies Advisory 2007.1106

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies – CoreLabs Advisory http://www.coresecurity.com/corelabs SynCE Remote Command Injection Advisory Information Title: SynCE Remote Command Injection Advisory ID: CORE-2007-1106 Advisory URL:...