Fedora Update for cifs-utils FEDORA-2012-10421

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for cifs-utils FEDORA-2012-6257

Check for the Version of cifs-utils OpenVAS Vulnerability Test Fedora Update for cifs-utils FEDORA-2012-6257 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CVE-2012-1586

mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message...

Design/Logic Flaw

mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message...

CVE-2012-1586

mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message...

CVE-2012-1586

CVE-2012-1586 affects mount.cifs in cifs-utils 2.6, enabling local users to infer the existence of arbitrary files/directories via the path in the second argument through error messages. The issue is cited across multiple advisories (SUSE, openSUSE, OpenVAS/Nessus feeds, MiracleLinux AXSA:2012-59...

CVE-2012-1586

mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message...

CVE-2012-1586

mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message...

CVE-2012-1586: Exposure of Sensitive Information to an Unauthorized Actor

mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message...

Fedora 17 : ecryptfs-utils-99-1.fc17 (2012-11069)

updated to ecryptfs-utils 99 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 16 : ecryptfs-utils-99-1.fc16 (2012-11049)

updated to ecryptfs-utils 99 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora Update for ecryptfs-utils FEDORA-2012-11049

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for cifs-utils MDVSA-2012:069 (cifs-utils)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for cifs-utils MDVSA-2012:069 (cifs-utils)

Check for the Version of cifs-utils OpenVAS Vulnerability Test Mandriva Update for cifs-utils MDVSA-2012:069 cifs-utils Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Scientific Linux Security Update : bluez-libs and bluez-utils on SL4.x, SL5.x i386/x86_64

An input validation flaw was found in the Bluetooth Session Description Protocol SDP packet parser used by the Bluez Bluetooth utilities. A Bluetooth device with an already-established trust relationship, or a local user registering a service record via a UNIX socket or D-Bus interface, could cau...

Scientific Linux Security Update : shadow-utils on SL4.x i386/x86_64

A flaw was found in the useradd tool in shadow-utils. A new user's mailbox, when created, could have random permissions for a short period. This could allow a local attacker to read or modify the mailbox. CVE-2006-1174 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C...

Scientific Linux Security Update : cifs-utils on SL6.x i386/x86_64 (20120620)

The cifs-utils package contains tools for mounting and managing shares on Linux using the SMB/CIFS protocol. The CIFS shares can be used as standard Linux file systems. A file existence disclosure flaw was found in mount.cifs. If the tool was installed with the setuid bit set, a local attacker...

Scientific Linux Security Update : nfs-utils on SL5.x i386/x86_64

It was discovered that nfs-utils did not use tcpwrappers correctly. Certain hosts access rules defined in '/etc/hosts.allow' and '/etc/hosts.deny' may not have been honored, possibly allowing remote attackers to bypass intended access restrictions. CVE-2008-4552 This updated package also fixes th...

Scientific Linux Security Update : scsi-target-utils on SL5.x i386/x86_64

Multiple buffer overflow flaws were found in scsi-target-utils' tgtd daemon. A remote attacker could trigger these flaws by sending a carefully-crafted Internet Storage Name Service iSNS request, causing the tgtd daemon to crash. CVE-2010-2221 All running scsi-target-utils services must be...

Scientific Linux Security Update : nfs-utils on SL5.x i386/x86_64

A flaw was found in the nfs-utils package build. The nfs-utils package was missing TCP wrappers support, which could result in an administrator believing they had access restrictions enabled when they did not. CVE-2008-1376 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...