Arbitrary Command Execution

device-mapper-multipath is vulnerable to arbitrary command execution. It was discovered that the multipathd daemon set incorrect permissions on the socket used to communicate with command line clients. An unprivileged, local user could use this flaw to send commands to multipathd, resulting in...

Oracle Linux 5 : device-mapper-multipath (ELSA-2009-0411)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-0411 advisory. 0.4.7-23.el53.2 - Added 493401multipathdumaskfix.patch - Resolves: bz 493401 Tenable has extracted the preceding description block directly from the Oracle Linu...

Scientific Linux Security Update : device-mapper-multipath on SL4.x, SL5.x i386/x86_64

It was discovered that the multipathd daemon set incorrect permissions on the socket used to communicate with command line clients. An unprivileged, local user could use this flaw to send commands to multipathd, resulting in access disruptions to storage devices accessible via multiple paths and,...

CentOS Update for device-mapper-multipath CESA-2009:0411 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...