net-snmp security and bug fix update

1:5.5-41 - moved /var/lib/net-snmp fro net-snmp to net-snmp-libs package 822480 1:5.5-40 - fixed CVE-2012-2141 820100 1:5.5-39 - fixed proxying of out-of-tree GETNEXT requests 799291 1:5.5-38 - fixed snmpd crashing with many AgentX subagent 749227 - fixed SNMPv2-MIB::sysObjectID value when...

[security bulletin] HPSBUX02700 SSRT100506 rev.1 - HP-UX running VEA, Remote Denial of Service (DoS), Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02962262 Version: 1 HPSBUX02700 SSRT100506 rev.1 - HP-UX running VEA, Remote Denial of Service DoS, Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted...

CVE-2003-1575

VERITAS File System VxFS 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9 does not properly implement inheritance of default ACLs in certain circumstances related to the characteristics of a directory inode, which allows local users to bypass intended file permissio...

CVE-2003-1575

The CVE-2003-1575 entry concerns VERITAS File System (VxFS) versions 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9. The issue is an incorrect inheritance of default ACLs related to directory inode characteristics, which can allow local users to bypass intended fi...

CVE-2003-1575

VERITAS File System VxFS 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9 does not properly implement inheritance of default ACLs in certain circumstances related to the characteristics of a directory inode, which allows local users to bypass intended file permissio...

CVE-2003-1575: Undefined Security Weakness

VERITAS File System VxFS 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9 does not properly implement inheritance of default ACLs in certain circumstances related to the characteristics of a directory inode, which allows local users to bypass intended file permissio...

HP-UX Update for Veritas VxFS 3.3/3.5 HPSBUX01218

Check for the Version of Veritas VxFS 3.3/3.5 OpenVAS Vulnerability Test HP-UX Update for Veritas VxFS 3.3/3.5 HPSBUX01218 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

HP-UX Update for Veritas VxFS 3.3/3.5 HPSBUX01218

Check for the Version of Veritas VxFS 3.3/3.5 OpenVAS Vulnerability Test HP-UX Update for Veritas VxFS 3.3/3.5 HPSBUX01218 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

SECOBJADV-2008-05: Symantec Veritas Storage Foundation Arbitrary File Read Vulnerability

====================================================================== = Security Objectives Advisory SECOBJADV-2008-05 = ====================================================================== Veritas Storage Foundation Arbitrary File Read Vulnerability...

Symantec Veritas File System qioadmin本地信息泄露漏洞

BUGTRAQ ID: 31679 VERITAS File System（VxFS）是Symantec Storage Foundation套件中的文件系统组件。 VxFS的qioadmin工具中存在文件内容泄露漏洞。如果系统授权访问到系统并可以运行qioadmin工具的话，就可以向qioadmin提供任意文件名并将文件内容重新定向并dump到标准错误输出中。qioadmin工具为set-uid root，因此非特权用户可以绕过系统文件权限限制访问特权系统信息。 Symantec Veritas File System 5.x Symantec Veritas File System...

CVE-2008-4638

qioadmin in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message...

CVE-2008-3248

qiomkfile in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, does not initialize filesystem blocks during creation of a file, which allows local users to obtain sensitive information by creating and then reading file...

Code injection

qioadmin in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message...

CVE-2008-3248

CVE-2008-3248 affects Symantec Veritas File System (VxFS) within Veritas Storage Foundation. The set-UID root helper qiomkfile for the Quick I/O for Databases feature writes uninitialized filesystem memory to a dot-file during file creation, enabling local users to read portions of memory and pot...

CVE-2008-4638

CVE-2008-4638 affects Symantec Veritas Storage Foundation (VxFS) 5.0 and earlier, via the Quick I/O for Databases feature. The vulnerable component is the setuid root utility qioadmin , which can be fed an arbitrary filename and will write that file’s contents to the standard error stream, enabli...

CVE-2008-4638: Exposure of Sensitive Information to an Unauthorized Actor

qioadmin in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message...

CVE-2008-3248: Exposure of Sensitive Information to an Unauthorized Actor

qiomkfile in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, does not initialize filesystem blocks during creation of a file, which allows local users to obtain sensitive information by creating and then reading file...

HP-UX Security Patch : PHKL_33484

VxFS 3.3 Support for 1MB direct I/O %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26418; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

HP-UX Security Patch : PHKL_33355

VxFS deadlock in vxsetattr %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26417; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/11";...

HP-UX Security Patch : PHKL_34122

VxFS 3.5-ga15 Kernel Cumulative Patch 14 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26426; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...