RHEL 6 : trousers (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - trousers: tss user still has read and write access to the /etc/tcsd.conf file if tcsd is started as root...

CVE-2020-24330 affecting package trousers for versions less than 0.3.14-7

CVE-2020-24330 affecting package trousers for versions less than 0.3.14-7. A patched version of the package is available...

CVE-2020-24332 affecting package trousers for versions less than 0.3.14-7

CVE-2020-24332 affecting package trousers for versions less than 0.3.14-7. A patched version of the package is available...

CVE-2020-24331 affecting package trousers for versions less than 0.3.14-7

CVE-2020-24331 affecting package trousers for versions less than 0.3.14-7. A patched version of the package is available...

Rocky Linux 8 : trousers (RLSA-2021:1627)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:1627 advisory. - An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to drop th...

SUSE CVE-2012-0698

tcsd in TrouSerS before 0.3.10 allows remote attackers to cause a denial of service daemon crash via a crafted typeoffset value in a TCP packet to port 30003...

SUSE CVE-2019-18898

UNIX Symbolic Link Symlink Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allowed local attackers escalate privileges from user tss to root. This issue affects: SUSE Linux Enterprise Server 15 SP1 trousers versions prior to 0.3.14-6.3.1...

SUSE CVE-2020-24330

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to drop the root gid privilege when no longer needed...

SUSE CVE-2020-24331

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the tss user still has read and write access to the /etc/tcsd.conf file which contains various settings related to this daemon...

SUSE: Security Advisory (SUSE-SU-2022:2800-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:2798-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : trousers (SUSE-SU-2022:2798-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2798-1 advisory. - CVE-2020-24330: Fixed a potential tss user to root privilege escalation issue bsc1164472. Tenable has extracted the preceding description...

SUSE-SU-2022:2800-1 Security update for trousers

This update for trousers fixes the following issues: - CVE-2020-24330: Fixed a potential tss user to root privilege escalation issue bsc1164472...

SUSE-SU-2022:2798-1 Security update for trousers

This update for trousers fixes the following issues: - CVE-2020-24330: Fixed a potential tss user to root privilege escalation issue bsc1164472...

NewStart CGSL MAIN 6.02 : trousers Multiple Vulnerabilities (NS-SA-2022-0066)

The remote NewStart CGSL host, running version MAIN 6.02, has trousers packages installed that are affected by multiple vulnerabilities: - An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to drop the root g...

CVE-2020-24332 affecting package trousers for versions less than 0.3.14-7

CVE-2020-24332 affecting package trousers for versions less than 0.3.14-7. A patched version of the package is available...

CVE-2020-24331 affecting package trousers for versions less than 0.3.14-7

CVE-2020-24331 affecting package trousers for versions less than 0.3.14-7. A patched version of the package is available...

CVE-2020-24330 affecting package trousers for versions less than 0.3.14-7

CVE-2020-24330 affecting package trousers for versions less than 0.3.14-7. A patched version of the package is available...

AlmaLinux 8 : trousers (ALSA-2021:1627)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:1627 advisory. - An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to drop the...

Mageia: Security Advisory (MGASA-2021-0297)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...