RedHat Security Advisory RHSA-2009:1321

The remote host is missing updates to nfs-utils announced in advisory RHSA-2009:1321. It was discovered that nfs-utils did not use tcpwrappers correctly. Certain hosts access rules defined in /etc/hosts.allow and /etc/hosts.deny may not have been honored, possibly allowing remote attackers to...

RedHat Security Advisory RHSA-2009:1321

The remote host is missing updates to nfs-utils announced in advisory RHSA-2009:1321. It was discovered that nfs-utils did not use tcpwrappers correctly. Certain hosts access rules defined in /etc/hosts.allow and /etc/hosts.deny may not have been honored, possibly allowing remote attackers to...

RedHat Security Advisory RHSA-2009:1337

The remote host is missing updates announced in advisory RHSA-2009:1337. The gfs2-utils package provides the user-space tools necessary to mount, create, maintain, and test GFS2 file systems. Multiple insecure temporary file use flaws were discovered in GFS2 user level utilities. A local attacker...

RedHat Security Advisory RHSA-2009:1337

The remote host is missing updates announced in advisory RHSA-2009:1337. The gfs2-utils package provides the user-space tools necessary to mount, create, maintain, and test GFS2 file systems. Multiple insecure temporary file use flaws were discovered in GFS2 user level utilities. A local attacker...

ecryptfs-utils security, bug fix, and enhancement update

75-4 - fix EOF handling 499367 - add icon to gui desktop file 75-3 - ask for password confirmation when creating openssl key 500850 - removed executable permission from ecryptfs-dot-private 500817 - ecryptfs-rewrite-file: improve of progress output 500813 - dont error out when unwrapping and addi...

Low: Red Hat Security Advisory: gfs2-utils security and bug fix update

An updated gfs2-utils package that fixes multiple security issues and various bugs is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. The gfs2-utils package provides the user-space tools necessary to...

Low: Red Hat Security Advisory: nfs-utils security and bug fix update

An updated nfs-utils package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nfs-utils package provides a daemon for the kernel NFS server and related tools. It was discovered that...

rgmanager: multiple insecure temporary file use issues

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager aka rgmanager before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on...

RHEL 5 : nfs-utils (RHSA-2009:1321)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2009:1321 advisory. The nfs-utils package provides a daemon for the kernel NFS server and related tools. It was discovered that nfs-utils did not use tcpwrappers...

RHEL 5 : gfs2-utils (RHSA-2009:1337)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2009:1337 advisory. The gfs2-utils package provides the user-space tools necessary to mount, create, maintain, and test GFS2 file systems. Multiple insecure temporary fi...

CentOS Security Advisory CESA-2009:1180 (bind)

The remote host is missing updates to bind announced in advisory CESA-2009:1180. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2009-2657

nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which allows local users to execute arbitrary commands via the device string in a -c command line option to mkfs.nilfs2...

Design/Logic Flaw

nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which allows local users to execute arbitrary commands via the device string in a -c command line option to mkfs.nilfs2...

CVE-2009-2657

Nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, enabling local users to run arbitrary commands via the device string in a -c option to mkfs.nilfs2. Affected components: nilfs-utils and related nilfs2-utils tooling. Impact: local privilege escalation. Remed...

CVE-2009-2657

nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which allows local users to execute arbitrary commands via the device string in a -c command line option to mkfs.nilfs2...

CVE-2009-2657: Undefined Security Weakness

nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which allows local users to execute arbitrary commands via the device string in a -c command line option to mkfs.nilfs2...

openSUSE Security Update : bind (bind-1146)

Specially crafted ddns update packets could trigger an exception in bind causing it to exit. The attack works if BIND is master for a zone even if ddns is not configured CVE-2009-0696. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : apache2 (apache2-330)

This updated fixes a problem in modproxyhttp that was introduced by previous security update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update apache2-330. The text description of this plugin i...

Apache APR-Utils Version Detection

This script retrieves the version of Apache APR-Utils and saves the result in KB. OpenVAS Vulnerability Test $Id: secpodapacheapr-utilsdetect.nasl 8138 2017-12-15 11:42:07Z cfischer $ Apache APR-Utils Version Detection Authors: Nikita MR Copyright: Copyright c 2009 SecPod, http://www.secpod.com...

Apache APR-Utils XML Parser Denial of Service Vulnerability

The host is installed with Apache APR-Utils and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: secpodapacheapr-utilsxmldosvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Apache APR-Utils XML Parser Denial of Service Vulnerability Authors: Nikita MR Copyright: Copyright ...