Sudo Local Information Disclosure Vulnerability

Sudo is a program developed by software developer Todd C. Miller for use on Unix-like operating systems that allows users to execute commands in a secure manner with special privileges. Sudo suffers from a local information disclosure vulnerability that could be exploited by an attacker to obtain...

Samba Security Updates Address Badlock Vulnerabilities

The Samba Team has released security updates that address vulnerabilities, collectively known as Badlock, affecting both Windows operating systems and Samba in UNIX-like platforms. Exploitation of these vulnerabilities may allow a remote attacker to take control of an affected system or create a...

EMC AutoStart ftagent Opcode 85 Subcode 33 SQL Injection (CVE-2015-0538)

A remote SQL injection vulnerability exists in EMC AutoStart. The vulnerability is due to insufficient validation of remotely supplied data within the ftagent component. A remote unauthenticated attacker can leverage this vulnerability by sending malicious requests to the ftagent process...

[SECURITY] Fedora 20 Update: dovecot-2.2.16-2.fc20

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are in their subpackages...

File Denial of Service Vulnerability (CNVD-2015-00590)

file is a tool for viewing file formats on Unix-like systems. A denial of service vulnerability exists in file 5.16 through 5.21, which allows remote attackers to launch a denial of service attack via a long string...

BSD Operating Systems vulnerable to denial-of-service (DoS)

Overview BSD operating systems contain an issue in the handling of the TCP session timer, which may lead to a denial-of-service DoS vulnerability. Hiroki Takakura reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...

Bash Environment Variable Handling Shell Command Injection Via CUPS

Added: 11/05/2014 CVE: CVE-2014-6271 BID: 70103 OSVDB: 112004 Background GNU Bash Bourne Again SHell is a command shell commonly used on Linux and Unix systems. CUPS is printing software for UNIX-like systems that allows a computer to act as a print server. Problem The Bash shell executes command...

IBM Informix Web Datablade 4.1x Page Request SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4496/info Informix is an enterprise database distributed and maintained by IBM. The Web Datablade Module for Informix SQL, dynamically generates HTML content based on Database data. Web Datablade is available for Apache,...

RedHat 6.2/7.0 Tmpwatch Arbitrary Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1785/info A vulnerability exists in tmpwatch, a utility which automates the removal of temporary files in unix-like systems. An optional component of tmpwatch, fuser, improperly handles arguments to system library calls. ...

BSD/OS 2.1,DG/UX <= 7.0,Debian Linux <= 1.3,HP-UX <= 10.34,IBM AIX <= 4.2,SGI IRIX <= 6.4,Solaris <= 2.5.1 xlock Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/224/info The xlock program is used to lock the local X display until the user supplies the correct password. A buffer overflow condition has been discovered in xlock that may allow an unauthorized user to gain root access...

[SECURITY] Fedora 19 Update: prboom-plus-2.5.1.3-3.fc19

Doom is a classic 3D shoot-em-up game. PrBoom+ is a Doom source port developed from the original PrBoom project by Andrey Budko. The target of the project is to extend the original port with features that are necessary or useful...

Fedora Update for xmp FEDORA-2013-7144

Check for the Version of xmp OpenVAS Vulnerability Test Fedora Update for xmp FEDORA-2013-7144 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

[SECURITY] Fedora 17 Update: xmp-3.4.0-11.fc17

The Extended Module Player is a modplayer for Unix-like systems that plays over 80 mainstream and obscure module formats from Amiga, Atari, Acorn, Apple IIgs and PC, including Protracker MOD, Scream Tracker 3 S3M, Fast Tracker II XM and Impulse Tracker IT files...

[SECURITY] Fedora 18 Update: xmp-3.5.0-3.fc18

The Extended Module Player is a modplayer for Unix-like systems that plays over 80 mainstream and obscure module formats from Amiga, Atari, Acorn, Apple IIgs and PC, including Protracker MOD, Scream Tracker 3 S3M, Fast Tracker II XM and Impulse Tracker IT files...

[SECURITY] Fedora 19 Update: xmp-3.5.0-3.fc19

The Extended Module Player is a modplayer for Unix-like systems that plays over 80 mainstream and obscure module formats from Amiga, Atari, Acorn, Apple IIgs and PC, including Protracker MOD, Scream Tracker 3 S3M, Fast Tracker II XM and Impulse Tracker IT files...

Snort Back Orifice Pre-Processor Buffer Overflow - Improved Performance (CVE-2005-3252)

A buffer overflow exists in Snort product. The flaw is caused by an insufficient boundary checks in the handling of Back Orifice messages. An attacker may leverage this vulnerability to execute arbitrary code in the security context of the affected product, normally root. In case of an attack whe...

ISC BIND 9 libdns Regular Expression Handling DoS

According to its self-reported version number, the remote installation of BIND can be forced to crash via memory exhaustion caused by specially crafted regular expressions. Note this vulnerability only affects Unix and Unix-like systems when the application has been compiled to include regular...

RedHat Update for dovecot RHSA-2013:0520-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Low: Red Hat Security Advisory: dovecot security and bug fix update

Updated dovecot packages that fix three security issues and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...

Fedora Update for dovecot FEDORA-2012-19752

Check for the Version of dovecot OpenVAS Vulnerability Test Fedora Update for dovecot FEDORA-2012-19752 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...