8557 matches found
DEBIAN-CVE-2010-2526
The cluster logical volume manager daemon clvmd in lvm2-cluster in LVM2 before 2.02.72, as used in Red Hat Global File System GFS and other products, does not verify client credentials upon a socket connection, which allows local users to cause a denial of service daemon exit or logical-volume...
Design/Logic Flaw
The cluster logical volume manager daemon clvmd in lvm2-cluster in LVM2 before 2.02.72, as used in Red Hat Global File System GFS and other products, does not verify client credentials upon a socket connection, which allows local users to cause a denial of service daemon exit or logical-volume...
CVE-2010-2526
CVE-2010-2526 affects the cluster logical volume manager daemon (clvmd) in LVM2-cluster (LVM2) before 2.02.72 . The issue arises because clvmd does not verify credentials of clients over its control socket, enabling local users to issue crafted commands that can cause the daemon to exit, or to ac...
CVE-2010-2526
The cluster logical volume manager daemon clvmd in lvm2-cluster in LVM2 before 2.02.72, as used in Red Hat Global File System GFS and other products, does not verify client credentials upon a socket connection, which allows local users to cause a denial of service daemon exit or logical-volume...
CentOS 5 : lvm2-cluster (CESA-2010:0567)
An updated lvm2-cluster package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...
lvm2 security update
CentOS Errata and Security Advisory CESA-2010:0567 An updated lvm2-cluster package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS...
Moderate: Red Hat Security Advisory: lvm2-cluster security update
An updated lvm2-cluster package that fixes one security issue is now available for Red Hat Global File System for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...
lvm2-cluster: insecurity when communicating between lvm2 and clvmd
The cluster logical volume manager daemon clvmd in lvm2-cluster in LVM2 before 2.02.72, as used in Red Hat Global File System GFS and other products, does not verify client credentials upon a socket connection, which allows local users to cause a denial of service daemon exit or logical-volume...
Moderate: Red Hat Security Advisory: lvm2-cluster security update
An updated lvm2-cluster package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...
lvm2-cluster: insecurity when communicating between lvm2 and clvmd
The cluster logical volume manager daemon clvmd in lvm2-cluster in LVM2 before 2.02.72, as used in Red Hat Global File System GFS and other products, does not verify client credentials upon a socket connection, which allows local users to cause a denial of service daemon exit or logical-volume...
lvm2-cluster security update
2.02.56-el55.4 - CVE-2010-2526: Fix insecurity when communicating between lvm2 and clvmd. Resolves: 616044...
multipath-tools: World-writeable socket
Background multipath-tools are used to drive the Device Mapper multipathing driver. Description multipath-tools uses world-writable permissions for the socket file /var/run/multipathd.sock. Impact Local users could send arbitrary commands to the multipath daemon, causing cluster failures and data...
CVE-2010-0883
Unspecified vulnerability in the Sun Cluster component in Oracle Sun Product Suite 3.1 and 3.2 allows local users to affect confidentiality via unknown vectors related to Data Service for Oracle E-Business Suite, a different vulnerability than CVE-2010-0884...
CVE-2010-0884
Unspecified vulnerability in the Sun Cluster component in Oracle Sun Product Suite 3.1 and 3.2 allows local users to affect confidentiality via unknown vectors related to Data Service for Oracle E-Business Suite, a different vulnerability than CVE-2010-0883...
Spoofing
Unspecified vulnerability in the Sun Cluster component in Oracle Sun Product Suite 3.1 and 3.2 allows local users to affect confidentiality via unknown vectors related to Data Service for Oracle E-Business Suite, a different vulnerability than CVE-2010-0884...
Spoofing
Unspecified vulnerability in the Sun Cluster component in Oracle Sun Product Suite 3.1 and 3.2 allows local users to affect confidentiality via unknown vectors related to Data Service for Oracle E-Business Suite, a different vulnerability than CVE-2010-0883...
CVE-2010-0884
Unspecified vulnerability in the Sun Cluster component in Oracle Sun Product Suite 3.1 and 3.2 allows local users to affect confidentiality via unknown vectors related to Data Service for Oracle E-Business Suite, a different vulnerability than CVE-2010-0883...
CVE-2010-0884
CVE-2010-0884 is described as an unspecified vulnerability in the Sun Cluster component of Oracle Sun Product Suite 3.1/3.2 affecting confidentiality via unknown vectors in the Data Service for Oracle E-Business Suite. Connected Nessus/NASL data reference Solaris patches (e.g., 126049-07 for Sola...
CVE-2010-0883
CVE-2010-0883 concerns Sun Cluster in Oracle Sun Product Suite 3.1/3.2. Affected are Solaris/Sun Cluster environments, with references tying this CVE to Data Service for Oracle E-Business Suite. The connected Nessus entries indicate Solaris 8/9/10 patches (e.g., 143047-02, 143048-02, 143049-02; 1...
CVE-2010-0883
Unspecified vulnerability in the Sun Cluster component in Oracle Sun Product Suite 3.1 and 3.2 allows local users to affect confidentiality via unknown vectors related to Data Service for Oracle E-Business Suite, a different vulnerability than CVE-2010-0884...