506 matches found
FreeBSD ZFS encryption.key Disclosure Vulnerability
FreeBSD is a UNIX operating system. The FreeBSD 10.x installer supports installations on the encryption ZFS file system by default. After installing the encryption system using ZFS in versions 10.0 and 10.1, there is an incorrect permission restriction on encryption.key that allows local users to...
FreeBSD zfs weak permissions
Weak file permissions may be set during transaction replay...
FreeBSD 10.x ZFS encryption.key disclosure (CVE-2015-1415)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Advisory Information Title: FreeBSD 10.x ZFS encryption.key disclosure CVE-2015-1415 Advisory URL: https://pierrekim.github.io/advisories/CVE-2015-1415.txt.asc Date published: 2015-04-07 Vendors contacted: FreeBSD Release mode: Coordinated release...
FreeBSD weak permissions
Weak ZFS and GELI key files permissions...
FreeBSD 10.x ZFS encryption.key Disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Advisory Information Title: FreeBSD 10.x ZFS encryption.key disclosure CVE-2015-1415 Advisory URL: https://pierrekim.github.io/advisories/CVE-2015-1415.txt.asc Date published: 2015-04-07 Vendors contacted: FreeBSD Release mode: Coordinated release...
FreeBSD -- Insecure default GELI keyfile permissions
Problem Description: The default permission set by bsdinstall8 installer when configuring full disk encrypted ZFS is too open. Impact: A local attacker may be able to get a copy of the geli8 provider's keyfile which is located at a fixed location...
FreeBSD-SA-15:08.bsdinstall
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-15:08.bsdinstall Security Advisory The FreeBSD Project Topic: Insecure default GELI keyfile permissions Category: core Module: bsdinstall Announced: 2015-04-07...
Fedora 18 : lynis-1.3.6-1.fc18 (2013-22758)
1.3.6 2013-12-03 New : - Support for the dntpd time daemon - New Apache test for modules HTTP-6632 - Apache test for modevasive HTTP-6640 - Apache test for modqos HTTP-6641 - Apache test for modspamhaus HTTP-6642 - Apache test for ModSecurity HTTP-6643 - Check for installed package audit tool...
Fedora 19 : lynis-1.3.6-1.fc19 (2013-22768)
1.3.6 2013-12-03 New : - Support for the dntpd time daemon - New Apache test for modules HTTP-6632 - Apache test for modevasive HTTP-6640 - Apache test for modqos HTTP-6641 - Apache test for modspamhaus HTTP-6642 - Apache test for ModSecurity HTTP-6643 - Check for installed package audit tool...
Fedora Update for zfs-fuse FEDORA-2013-3382
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for zfs-fuse FEDORA-2013-3425
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for zfs-fuse FEDORA-2013-3425
Check for the Version of zfs-fuse OpenVAS Vulnerability Test Fedora Update for zfs-fuse FEDORA-2013-3425 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for zfs-fuse FEDORA-2013-3382
Check for the Version of zfs-fuse OpenVAS Vulnerability Test Fedora Update for zfs-fuse FEDORA-2013-3382 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora 18 : zfs-fuse-0.7.0-10.fc18 (2013-3425)
Correct executable stacks in some binaries. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora 17 : zfs-fuse-0.7.0-3.fc17 (2013-3382)
Correct executable stacks in some binaries. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
[SECURITY] Fedora 18 Update: zfs-fuse-0.7.0-10.fc18
ZFS is an advanced modern general-purpose filesystem from Sun Microsystems, originally designed for Solaris/OpenSolaris. This project is a port of ZFS to the FUSE framework for the Linux operating system...
[SECURITY] Fedora 17 Update: zfs-fuse-0.7.0-3.fc17
ZFS is an advanced modern general-purpose filesystem from Sun Microsystems, originally designed for Solaris/OpenSolaris. This project is a port of ZFS to the FUSE framework for the Linux operating system. Project home page is at http://zfs-fuse.net/...
Oracle Sun Solaris远程安全漏洞(CVE-2011-2286)
BUGTRAQ ID: 50265 CVE ID: CVE-2011-2286 Solaris是Sun Microsystems研发的计算机操作系统，已被Oracle收购。 Oracle Sun产品套装在Solaris的实现上存在远程安全漏洞，可通过NFS协议利用此漏洞影响zfs子组件。 Oracle Sun Solaris 11 Express Oracle Sun Solaris 10 Express 厂商补丁： Oracle ------ Oracle已经为此发布了一个安全公告（cpuoct2011-330135）以及相应补丁: cpuoct2011-330135：Oracle...
