DTSA-123-1 audit - buffer overflow

Bulletin has no description...

CVE-2008-1816

CVE-2008-1816 concerns Oracle Database 10.1.0.5 and 10.2.0.3 with multiple unspecified vulnerabilities, involving the Spatial component (SDO_UTIL, DB05) and the Audit component (fine-grained auditing, DB14). The documented impact is unknown and remote authenticated attack vectors are noted; Oracl...

Fedora 8 : audit-1.6.8-4.fc8 (2008-3012)

This release fixes the init script headers to not provide LSB info. This was causing audit to start too late. It also fixes a problem where saddr fields were not being decoded correctly on avc events in ausearch. This also fixes a buffer overflow in auditlogusercommand that is caught by...

Audit buffer overflow

Buffer overflow on logging...

[ MDVSA-2008:083 ] - Updated audit packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:083 http://www.mandriva.com/security/ Package : audit Date : April 9, 2008 Affected: 2008.0, 2008.1 Problem Description: Joe Nall reported a stack-based buffer overflow in Audit's log handling that could all...

[SECURITY] Fedora 8 Update: audit-1.6.8-4.fc8

The audit package contains the user space utilities for storing and searching the audit records generate by the audit subsystem in the Linux 2.6 kernel...

Linux Audit守护程序audit_log_user_command()本地栈溢出漏洞

BUGTRAQ ID: 28524 Linux Audit是用于查看Linux系统审计日志的图形工具。 Linux Audit的lib/auditlogging.c文件中的auditlogusercommand函数存在栈溢出漏洞，如果本地用户向该函数传送了超长的command参数的话，就可以触发这个溢出，导致以使用libaudit应用的权限执行任意指令。 Linux Audit Linux Audit 1.6.9 Linux Audit ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Stack overflow

Stack-based buffer overflow in the auditlogusercommand function in lib/auditlogging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a long command argument. NOTE: some of these details are obtained from third party information...

CVE-2008-1628

Stack-based buffer overflow in the auditlogusercommand function in lib/auditlogging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a long command argument. NOTE: some of these details are obtained from third party information...

CVE-2008-1628

Stack-based buffer overflow in the auditlogusercommand function in lib/auditlogging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a long command argument. NOTE: some of these details are obtained from third party information...

DEBIAN-CVE-2008-1628

Stack-based buffer overflow in the auditlogusercommand function in lib/auditlogging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a long command argument. NOTE: some of these details are obtained from third party information...

CVE-2008-1628

Stack-based buffer overflow in the auditlogusercommand function in lib/auditlogging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a long command argument. NOTE: some of these details are obtained from third party information...

CVE-2008-1628

Stack-based buffer overflow in the auditlogusercommand function in lib/auditlogging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a long command argument. NOTE: some of these details are obtained from third party information...

CVE-2008-1628

CVE-2008-1628 describes a stack-based buffer overflow in audit_log_user_command() in lib/audit_logging.c of Linux Audit before 1.7. Exploitation could allow arbitrary code execution (per multiple advisories). Affected component: audit subsystem (linux-audit utilities). Root cause: processing over...

CVE-2008-1628

Stack-based buffer overflow in the auditlogusercommand function in lib/auditlogging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a long command argument. NOTE: some of these details are obtained from third party information...

auracms-bypass.txt

!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 2.x user.php - Security Code Bypass & Add Administrator Exploit Waktu : Feb 28 2008 08:00PM Software : AuraCMS Versi : 2.0 2.1 2.2.1 http://www.r57shell.in/r57.txt? -----------------------------------...

AuraCMS 2.x - '/user.php' Security Code Bypass / Arbitrary Add Administrator

!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 2.x user.php - Security Code Bypass & Add Administrator Exploit Waktu : Feb 28 2008 08:00PM Software : AuraCMS Versi : 2.0 2.1 2.2.1 Vendor : http://www.auracms.org/ ----------------------------------...

F5 Big-IP Web管理界面审计日志HTML注入漏洞

BUGTRAQ ID: 28416 F5 BIG-IP是集成了网络流量管理、应用程序安全管理器、负载均衡等功能的多合一网络设备。 F5 BIG-IP的Web管理界面的审计日志工具存在跨站脚本漏洞。日志项未经HTML编码便直接输出，这允许攻击者创建内嵌了脚本的日志项，如果管理员查看了审计日志就会执行恶意脚本。 一种可能的攻击方式是创建在节点名中嵌入了脚本的节点对象，由于不支持的字符，创建这个节点会失败，但仍会创建审计日志；此外还可以创建特制的URL链接，该链接会生成内嵌有HTTP GET请求的日志项，因此可以远程利用这个漏洞。 F5 BigIP 9.4.3 临时解决方法：...

CVE-2008-1503

Cross-site scripting XSS vulnerability in the web management interface in F5 BIG-IP 9.4.3 allows remote attackers to inject arbitrary web script or HTML via 1 the name of a node object, or the 2 sysContact or 3 sysLocation SNMP configuration field, aka "Audit Log XSS." NOTE: these issues might be...

CVE-2008-1503

Cross-site scripting XSS vulnerability in the web management interface in F5 BIG-IP 9.4.3 allows remote attackers to inject arbitrary web script or HTML via 1 the name of a node object, or the 2 sysContact or 3 sysLocation SNMP configuration field, aka "Audit Log XSS." NOTE: these issues might be...