OSSEC 2.8.1 Local Root Escalation

Fix for CVE-2015-3222 which allows for root escalation via syscheck - https://github.com/ossec/ossec-hids/releases/tag/2.8.2 Affected versions: 2.7 - 2.8.1 Beginning is OSSEC 2.7 d88cf1c9 a feature was added to syscheck, which is the daemon that monitors file changes on a system, called...

IT-Grundschutz M4.344: Überwachung von Windows-Systemen ab Windows Vista und Windows Server 2008

IT-Grundschutz M4.344: Überwachung von Windows-Systemen ab Windows Vista und Windows Server 2008 Stand: 15. Ergänzungslieferung 15. EL. OpenVAS Vulnerability Test $Id: GSHBM4344.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 15. EL, Maßnahme 4.344 Authors: Thomas Rotter Copyright: Copyrig...

MMonit 3.3.2 - Cross-Site Request Forgery

MMonit 3.3.2 - Cross-Site Request Forgery Vulnerability title: M/Monit CSRF Author: Dolev Farhi Contact: dolevf at openflare dot com @dolevff Application: M/Monit 3.2.2 Date: 13.9.2014 Relevant CVEs: N/A Vulnerable version: CSRF PoC for M/monit input type="hidden...

RedHat Linux 5.1 xosview Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/362/info xosview is an X11 system monitoring application that ships with RedHat 5.1 installed setuid root. A buffer overflow vulnerability was found in Xrm.cc, the offending code listed below: char userrfilename1024;...

SEC Consult SA-20140521-0 :: Multiple critical vulnerabilities in CoSoSys Endpoint Protector 4

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory 20140521-0 ======================================================================= title: Multiple vulnerabilities product: CoSoSys Endpoint Protector 4 vulnerable version: all - except issue 1 fixed...

Moo0 File Monitor - Monitor file access easily

Moo0 File Monitor lets you easily monitor the file access activities on your system. Have you ever wondered what's going on with your disk system behind your watch? Why the disk is busy? What's scratching your HDD? You may find them out using this simple program. Download Moo0 File Monitor...

Icinga cgi/cgiutils.c和cgi/status.c缓冲区溢出漏洞

CVE ID:CVE-2014-2386 Icinga是一款系统监控服务程序。 Icinga cgi/cgiutils.c和cgi/status.c存在边界错误，允许攻击者利用漏洞进行缓冲区溢出攻击，可使应用程序崩溃或执行任意代码。 0 Icinga 1.x Icinga 1.11.1, 1.10.4或1.9.6版本已修复该漏洞，建议用户下载使用： https://www.icinga.org...

Fedora Update for monitorix FEDORA-2013-22649

Check for the Version of monitorix OpenVAS Vulnerability Test Fedora Update for monitorix FEDORA-2013-22649 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Fedora Update for monitorix FEDORA-2013-21927

Check for the Version of monitorix OpenVAS Vulnerability Test Fedora Update for monitorix FEDORA-2013-21927 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Moderate: Red Hat Security Advisory: jasperreports-server-pro security, bug fix, and enhancement update

An updated jasperreports-server-pro package that fixes two security issues, several bugs, and adds various enhancements is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Fedora Update for monitorix FEDORA-2013-22011

Check for the Version of monitorix OpenVAS Vulnerability Test Fedora Update for monitorix FEDORA-2013-22011 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Fedora Update for monitorix FEDORA-2013-22677

Check for the Version of monitorix OpenVAS Vulnerability Test Fedora Update for monitorix FEDORA-2013-22677 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

[SECURITY] Fedora 20 Update: monitorix-3.3.1-1.fc20

Monitorix is a free, open source, lightweight system monitoring tool design ed to monitor as many services and system resources as possible. It has been created to be used under production Linux/UNIX servers, but due to its simplicity and small size may also be used on embedded devices as well...

[SECURITY] Fedora 20 Update: monitorix-3.4.0-1.fc20

Monitorix is a free, open source, lightweight system monitoring tool design ed to monitor as many services and system resources as possible. It has been created to be used under production Linux/UNIX servers, but due to its simplicity and small size may also be used on embedded devices as well...

Fedora Update for monitorix FEDORA-2013-21998

Check for the Version of monitorix OpenVAS Vulnerability Test Fedora Update for monitorix FEDORA-2013-21998 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

[SECURITY] Fedora 19 Update: monitorix-3.3.1-1.fc19

Monitorix is a free, open source, lightweight system monitoring tool design ed to monitor as many services and system resources as possible. It has been created to be used under production Linux/UNIX servers, but due to its simplicity and small size may also be used on embedded devices as well...

Lightweight System Monitoring: Monitorix

Lightweight System Monitoring Monitorix is a free, open source, lightweight system monitoring tool designed to monitor as many services and system resources as possible. It has been created to be used under production Linux/UNIX servers, but due to its simplicity and small size can be used on...

[OMENS v1.17] The framework for distributing Actionable Intelligence

OMENS Object Monitor for Enhanced Network Security was born out of the intrusion and intrusion attempts analysis that I have been doing over many years. I consistently run into intrusion attempts that existing IDS systems have difficulty detecting. OMENS is my attempt to better detect and...

Scientific Linux Security Update : sysstat on SL5.x i386/x86_64

The sysstat package contains a set of utilities which enable system monitoring of disks, network, and other I/O activity. It was found that the sysstat initscript created a temporary file in an insecure way. A local attacker could use this flaw to create arbitrary files via a symbolic link attack...

CentOS Update for sysstat CESA-2011:1005 centos5 x86_64

Check for the Version of sysstat OpenVAS Vulnerability Test CentOS Update for sysstat CESA-2011:1005 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...