1128 matches found
pam security, bug fix, and enhancement update
0.99.6.2-3.26 - removed realtime default limits 240123 from the package as it caused regression on machines with nonexistent realtime group 0.99.6.2-3.25 - added and improved translations 219124 - adjusted the default limits for realtime users 240123 0.99.6.2-3.23 - pamunix: truncated MD5 passwor...
Code injection
Unspecified vulnerability in "Solaris Auditing" in the Basic Security Module BSM in Sun Solaris 10, when configured for auditing of networking nt events, allows local users to cause a denial of service panic via unspecified vectors...
CVE-2007-5422
Unspecified vulnerability in "Solaris Auditing" in the Basic Security Module BSM in Sun Solaris 10, when configured for auditing of networking nt events, allows local users to cause a denial of service panic via unspecified vectors...
CVE-2007-5422
Unspecified vulnerability in "Solaris Auditing" in the Basic Security Module BSM in Sun Solaris 10, when configured for auditing of networking nt events, allows local users to cause a denial of service panic via unspecified vectors...
CVE-2007-5422
CVE-2007-5422 affects Sun Solaris 10, specifically the Solaris Auditing feature within the Basic Security Module (BSM). When configured to audit networking (nt) events, a local attacker can trigger a denial-of-service (panic) via unspecified vectors. The available sources describe the affected co...
Race condition
Multiple race conditions in 1 certain rules and 2 argument copying during VM protection, in CerbNG for FreeBSD 4.8 allow local users to defeat system call interposition and possibly gain privileges or bypass auditing, as demonstrated by modifying command lines in log-exec.cb...
CVE-2007-4302
Multiple race conditions in certain system call wrappers in Generic Software Wrappers Toolkit GSWTK allow local users to defeat system call interposition and possibly gain privileges or bypass auditing...
CVE-2007-4305
Multiple race conditions in the 1 Sudo monitor mode and 2 Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing...
Race condition
Multiple race conditions in the 1 Sudo monitor mode and 2 Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing...
CVE-2007-4303
CVE-2007-4303 concerns multiple race conditions in CerbNG for FreeBSD 4.8, specifically in (1) certain rules and (2) argument copying during VM protection. The issue permits local users to defeat system call interposition and potentially gain privileges or bypass auditing, demonstrated by alterin...
CVE-2007-4302
Multiple race conditions in certain system call wrappers in Generic Software Wrappers Toolkit GSWTK allow local users to defeat system call interposition and possibly gain privileges or bypass auditing...
CVE-2007-4303
Multiple race conditions in 1 certain rules and 2 argument copying during VM protection, in CerbNG for FreeBSD 4.8 allow local users to defeat system call interposition and possibly gain privileges or bypass auditing, as demonstrated by modifying command lines in log-exec.cb...
CVE-2007-4305
CVE-2007-4305 involves multiple race conditions in the Sudo monitor mode and in Sysjail policies of Systrace on NetBSD and OpenBSD. The underlying issue allows local users to defeat system call interposition, thereby bypassing access control policy and auditing. Affected components: NetBSD/OpenBS...
CVE-2007-4302
CVE-2007-4302 concerns the Generic Software Wrappers Toolkit (GSWTK), where multiple race conditions in certain system call wrappers allow a local attacker to defeat system call interposition and potentially gain privileges or bypass auditing. The affected component is the GSWTK system call wrapp...
Systrace - Multiple System Call Wrappers Concurrency Vulnerabilities
Systrace - Multiple System Call Wrappers Concurrency Vulnerabilities source: https://www.securityfocus.com/bid/25258/info Systrace is prone to multiple concurrency vulnerabilities due to its implementation of system call wrappers. This problem can result in a race condition between a user thread...
Generic Software Wrappers Toolkit 1.6.3 (GSWTK) - Race Condition Privilege Escalation
Generic Software Wrappers Toolkit 1.6.3 GSWTK - Race Condition Privilege Escalation / source: https://www.securityfocus.com/bid/25251/info GSWKT Generic Software Wrappers Toolkit is prone to multiple concurrency vulnerabilities because of its implementation of system call wrappers. This problem c...
Centennial IP Transfer Agent Detection
The remote service appears to be an IP Transfer Agent used by Centennial Discovery, or one of its OEM versions. Discovery is an enterprise tool for network auditing and monitoring, and the IP Transfer Agent XFERWAN offers a way for client agents and the application's Control Center to communicate...
Code injection
Unspecified vulnerability in Sun Solaris 9, when Solaris Auditing BSM is enabled for file read, write, attribute modify, create, or delete audit classes, allows local users to cause a denial of service panic via unknown vectors, possibly related to the auditsavepath function...
Linux Security Auditing Tool不安全临时文件建立漏洞
Linux Security Auditing Tool是一款安全审核工具。 Linux Security Auditing Tool不安全建立临时文件，本地攻击者可以利用漏洞覆盖敏感文件，造成拒绝服务攻击。 攻击者可以利用符号链接进行攻击。目前没有详细漏洞细节提供。 Linux Security Auditing Tool 0.9.2 Gentoo Linux 目前没有解决方案提供： http://usat.sourceforge.net/...