RedHat Piranha Virtual Server Package - 'passwd.php3' Arbitrary Command Execution (Metasploit)

$Id: piranhapasswdexec.rb 10729 2010-10-18 15:41:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Windows故障切换集群不安全文件权限漏洞（MS10-086）

BUGTRAQ ID: 43818 CVE ID: CVE-2010-3223 Microsoft Windows是微软发布的非常流行的操作系统。 Failover Cluster Manager用户界面处理共享集群磁盘权限的方式存在篡改漏洞，起因是Failover Cluster Manager在向集群添加磁盘时使用了不安全的默认权限。当管理员向共享集群添加磁盘时，Failover Cluster Manager对共享的集群磁盘设置权限的方式允许非授权用户获得对故障切换集群磁盘上的管理共享的读写/删除访问。 Microsoft Windows Server 2008 R2 临时解决方法...

Moderate: Red Hat Security Advisory: Red Hat Enterprise MRG Messaging and Grid Version 1.3

Updated packages that fix two security issues, several bugs, and add multiple enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise MRG Messaging and Grid for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as havi...

qpid: crash on receipt of invalid AMQP data

The Cluster::deliveredEvent function in cluster/Cluster.cpp in Apache Qpid, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote attackers to cause a denial of service daemon crash and cluster outage via invalid AMQP data...

qpid: crash on receipt of invalid AMQP data

The Cluster::deliveredEvent function in cluster/Cluster.cpp in Apache Qpid, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote attackers to cause a denial of service daemon crash and cluster outage via invalid AMQP data...

Moderate: Red Hat Security Advisory: Red Hat Enterprise MRG Messaging and Grid Version 1.3

Updated packages that fix two security issues, several bugs, and add multiple enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise MRG Messaging and Grid for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as havi...

CVE-2010-3223

The user interface in Microsoft Cluster Service MSCS in Microsoft Windows Server 2008 R2 does not properly set administrative-share permissions for new cluster disks that are shared as part of a failover cluster, which allows remote attackers to read or modify data on these disks via requests to...

Design/Logic Flaw

The user interface in Microsoft Cluster Service MSCS in Microsoft Windows Server 2008 R2 does not properly set administrative-share permissions for new cluster disks that are shared as part of a failover cluster, which allows remote attackers to read or modify data on these disks via requests to...

CVE-2010-3223

The CVE-2010-3223 issue affects Microsoft Windows Server 2008 R2 in a failover cluster. The Failover Cluster Manager (MSCS) UI sets permissions on administrative shares of new shared cluster disks using unsecured default ACLs, potentially allowing unauthorized users to read, modify, or delete dat...

CVE-2010-3223

The user interface in Microsoft Cluster Service MSCS in Microsoft Windows Server 2008 R2 does not properly set administrative-share permissions for new cluster disks that are shared as part of a failover cluster, which allows remote attackers to read or modify data on these disks via requests to...

Microsoft Security Bulletin MS10-086 - Moderate Vulnerability in Windows Shared Cluster Disks Could Allow Tampering (2294255)

Microsoft Security Bulletin MS10-086 - Moderate Vulnerability in Windows Shared Cluster Disks Could Allow Tampering 2294255 Published: October 12, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Windows Server 2008 R2 whe...

MS10-086: Vulnerability in Windows Shared Cluster Disks Could Allow Tampering (2294255)

The remote Windows 2008 R2 host has a data tampering vulnerability. When the host is used as a shared failover cluster, the Failover Cluster Manager uses insecure default permissions when adding disks to a cluster. This allows unauthorized read, write, and delete access to the administrative shar...

Microsoft Windows 2008 Shared Cluster Disks weak permissions

Everyone:Full Control permissions is granted on new disks by default...

Microsoft Windows OpenType Font (OTF) Format Driver CVE-2010-2741 Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. Attackers may exploit this issue to execute arbitrary code with kernel-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Failed exploit attempts...

Debian: Security Advisory (DSA-2095-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2095-1 (lvm2)

The remote host is missing an update to lvm2 announced via advisory DSA 2095-1. OpenVAS Vulnerability Test $Id: deb20951.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2095-1 lvm2 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

USN-1001-1: LVM2 vulnerability

The cluster logical volume manager daemon clvmd in LVM2 did not correctly validate credentials. A local user could use this flaw to manipulate logical volumes without root privileges and cause a denial of service in the cluster...

Fedora 12 : lvm2-2.02.72-4.fc12 (2010-12250)

This update addresses a security problem when using the clustered LVM daemon clvmd from the package lvm2-cluster on systems where you have non-root users. The lvm2 package on its own is not vulnerable to this problem but if you are using lvm2-cluster you must update both together. Further details...

Denial of Service (DoS) Vulnerability in JP1/Desktop Navigation Built-in Database

Overview When JP1/Desktop Navigation used in a cluster environment receives unexpected data, the built-in database process and unit abend, which may cause the management server service to fall into a denial of service DoS condition. Impact A remote attacker could cause a denial of service DoS...

Fedora 13 : lvm2-2.02.73-2.fc13 / udisks-1.0.1-4.fc13 (2010-13708)

This update addresses a security problem when using the clustered LVM daemon clvmd from the package lvm2-cluster on systems where you have non-root users. The lvm2 package on its own is not vulnerable to this problem but if you are using lvm2-cluster you must update both together. Further details...