Lucene search
+L

2891 matches found

OSV
OSV
added 2008/04/24 5:5 a.m.7 views

CVE-2008-1926

Argument injection vulnerability in login login-utils/login.c in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."...

6.6AI score
Exploits0References15
OSV
OSV
added 2008/04/24 5:5 a.m.3 views

DEBIAN-CVE-2008-1926

Argument injection vulnerability in login login-utils/login.c in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."...

7.5CVSS7.2AI score0.03866EPSS
Exploits1References1
Cvelist
Cvelist
added 2008/04/23 5:0 p.m.38 views

CVE-2008-1926

Argument injection vulnerability in login login-utils/login.c in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."...

6.6AI score0.03866EPSS
Exploits1References15
CVE
CVE
added 2008/04/23 5:0 p.m.88 views

CVE-2008-1926

The CVE-2008-1926 issue is a log-injection vulnerability in util-linux-ng (login-utils/login.c) that allows a remote attacker to modify parts of audit logs (via an addr= in login name). It affects util-linux-ng up to 2.14 and has been addressed by Red Hat/CentOS advisories RHSA-2009:0981 and rela...

7.5CVSS6.6AI score0.03866EPSS
Exploits1References15Affected Software1
Debian CVE
Debian CVE
added 2008/04/23 5:0 p.m.76 views

CVE-2008-1926

Argument injection vulnerability in login login-utils/login.c in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."...

7.5CVSS5.2AI score0.03866EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2008/04/23 12:0 a.m.7 views

PT-2008-3453 · Util Linux Ng +1 · Util-Linux-Ng +1

Name of the Vulnerable Software and Affected Versions: util-linux-ng versions 2.14 and earlier Description: The issue allows remote attackers to modify log events, making it easier to hide activities. This is achieved by injecting arguments into the login process, demonstrated by appending an...

7.5CVSS6.2AI score0.03866EPSS
Exploits1References21
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.22 views

Debian Security Advisory DSA 823-1 (util-linux)

The remote host is missing an update to util-linux announced via advisory DSA 823-1. David Watson discoverd a bug in mount as provided by util-linux and other packages such as loop-aes-utils that allows local users to bypass filesystem access restrictions by re-mounting it read-only. For the old...

7.2CVSS0.3AI score0.00426EPSS
Exploits0
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.31 views

Debian Security Advisory DSA 1450-1 (util-linux)

The remote host is missing an update to util-linux announced via advisory DSA 1450-1. OpenVAS Vulnerability Test $Id: deb14501.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1450-1 util-linux Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

6.9CVSS0.6AI score0.0044EPSS
Exploits0
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.35 views

Debian Security Advisory DSA 1011-1 (kernel-patch-vserver, util-vserver)

The remote host is missing an update to kernel-patch-vserver, util-vserver announced via advisory DSA 1011-1. Several vulnerabilities have been discovered in the Debian vserver support for Linux. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-4347 Bjø...

7.5CVSS0.6AI score0.02094EPSS
Exploits0
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.17 views

Debian: Security Advisory (DSA-1450-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS6.6AI score0.0044EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.15 views

Debian: Security Advisory (DSA-1011-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.1AI score0.02094EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.19 views

Debian: Security Advisory (DSA-823-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS6.7AI score0.00426EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2008/01/07 12:0 a.m.25 views

Debian DSA-1450-1 : util-linux - programming error

It was discovered that util-linux, miscellaneous system utilities, didn't drop privileged user and group permissions in the correct order in the mount and umount commands. This could potentially allow a local user to gain additional privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

7.2CVSS5.3AI score0.0044EPSS
Exploits0References2
securityvulns
securityvulns
added 2008/01/06 12:0 a.m.63 views

[SECURITY] [DSA 1450-1] New util-linux packages fix programming error

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1450-1 [email protected] http://www.debian.org/security/ Steve Kemp January 05, 2008 http://www.debian.org/security/faq -...

6.9CVSS0.3AI score0.0044EPSS
Exploits0
securityvulns
securityvulns
added 2008/01/06 12:0 a.m.43 views

loop-aes-utils / util-linux privilege escalation

Group privileges are not properly dropped...

6.9CVSS2.5AI score0.0044EPSS
Exploits0References2Affected Software2
Debian
Debian
added 2008/01/05 3:10 p.m.33 views

[SECURITY] [DSA 1450-1] New util-linux packages fix programming error

------------------------------------------------------------------------ Debian Security Advisory DSA-1450-1 [email protected] http://www.debian.org/security/ Steve Kemp January 05, 2008 http://www.debian.org/security/faq -...

7.2CVSS5.7AI score0.0044EPSS
Exploits0
OSV
OSV
added 2008/01/05 12:0 a.m.25 views

DSA-1450-1 util-linux privilege escalation

Bulletin has no description...

7.2CVSS5.9AI score0.0044EPSS
Exploits0
Oracle linux
Oracle linux
added 2007/11/16 12:0 a.m.24 views

Moderate: util-linux security update

2.11y-31.24 - fix 324431 - CVE-2007-5191 util-linux mount doesn't drop privileges properly when calling helpers...

6.9CVSS3.2AI score0.0044EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2007/11/16 12:0 a.m.33 views

RHEL 3 / 4 / 5 : util-linux (RHSA-2007:0969)

Updated util-linux packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The util-linux package contains a large variety of low-level system utilities that...

7.2CVSS5.3AI score0.0044EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2007/11/15 4:7 p.m.35 views

Moderate: Red Hat Security Advisory: util-linux security update

Updated util-linux packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The util-linux package contains a large variety of low-level system utilities that...

7.2CVSS5.7AI score0.0044EPSS
Exploits0References2
Rows per page
Query Builder