multipath-tools: World-writeable socket

Background multipath-tools are used to drive the Device Mapper multipathing driver. Description multipath-tools uses world-writable permissions for the socket file /var/run/multipathd.sock. Impact Local users could send arbitrary commands to the multipath daemon, causing cluster failures and data...

CVE-2010-0883

Unspecified vulnerability in the Sun Cluster component in Oracle Sun Product Suite 3.1 and 3.2 allows local users to affect confidentiality via unknown vectors related to Data Service for Oracle E-Business Suite, a different vulnerability than CVE-2010-0884...

CVE-2010-0884

Unspecified vulnerability in the Sun Cluster component in Oracle Sun Product Suite 3.1 and 3.2 allows local users to affect confidentiality via unknown vectors related to Data Service for Oracle E-Business Suite, a different vulnerability than CVE-2010-0883...

Spoofing

Unspecified vulnerability in the Sun Cluster component in Oracle Sun Product Suite 3.1 and 3.2 allows local users to affect confidentiality via unknown vectors related to Data Service for Oracle E-Business Suite, a different vulnerability than CVE-2010-0884...

Spoofing

Unspecified vulnerability in the Sun Cluster component in Oracle Sun Product Suite 3.1 and 3.2 allows local users to affect confidentiality via unknown vectors related to Data Service for Oracle E-Business Suite, a different vulnerability than CVE-2010-0883...

CVE-2010-0884

Unspecified vulnerability in the Sun Cluster component in Oracle Sun Product Suite 3.1 and 3.2 allows local users to affect confidentiality via unknown vectors related to Data Service for Oracle E-Business Suite, a different vulnerability than CVE-2010-0883...

CVE-2010-0884

CVE-2010-0884 is described as an unspecified vulnerability in the Sun Cluster component of Oracle Sun Product Suite 3.1/3.2 affecting confidentiality via unknown vectors in the Data Service for Oracle E-Business Suite. Connected Nessus/NASL data reference Solaris patches (e.g., 126049-07 for Sola...

CVE-2010-0883

CVE-2010-0883 concerns Sun Cluster in Oracle Sun Product Suite 3.1/3.2. Affected are Solaris/Sun Cluster environments, with references tying this CVE to Data Service for Oracle E-Business Suite. The connected Nessus entries indicate Solaris 8/9/10 patches (e.g., 143047-02, 143048-02, 143049-02; 1...

CVE-2010-0883

Unspecified vulnerability in the Sun Cluster component in Oracle Sun Product Suite 3.1 and 3.2 allows local users to affect confidentiality via unknown vectors related to Data Service for Oracle E-Business Suite, a different vulnerability than CVE-2010-0884...

Sun Update with 16 Fixes Coming Next Week

Oracle has moved Solaris onto its quarterly security patch schedule, meaning users of the Sun Microsystems operating system will now know months in advance when they will be getting security updates. The next Critical Patch Update is due on Tuesday. The update will include 16 security fixes for S...

RedHat Update for squid RHSA-2010:0221-04

Check for the Version of squid OpenVAS Vulnerability Test RedHat Update for squid RHSA-2010:0221-04 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Symlink attack with Solaris Update manager and Sun Patch Cluster

Symlink attack with Solaris Update manager and Sun Patch Cluster Larry W. Cashdollar Vapid Labs http://vapid.dhs.org 1/24/2010 With the GUI Sun Update Manager being used to install patches on a system local users can easily run scripts and create symlinks in an attempt to clobber files and...

Solaris Update manager and Sun Patch Cluster symlink vulnerability

Exploit for solaris platform in category local exploits ================================================================== Solaris Update manager and Sun Patch Cluster symlink vulnerability ================================================================== Symlink attack with Solaris Update manag...

Solaris Update Manager / Sun Patch Cluster Symlink Attack

Symlink attack with Solaris Update manager and Sun Patch Cluster Larry W. Cashdollar Vapid Labs http://vapid.dhs.org 1/24/2010 With the GUI Sun Update Manager being used to install patches on a system local users can easily run scripts and create symlinks in an attempt to clobber files and...

RedHat Piranha Virtual Server Package passwd.php3 Arbitrary Command Execution

$Id: piranhapasswdexec.rb 8497 2010-02-14 20:27:24Z patrickw $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2003-1588

Sun Cluster 2.2, when HA-Oracle or HA-Sybase DBMS services are used, stores database credentials in cleartext in a cluster configuration file, which allows local users to obtain sensitive information by reading this file...

CVE-2003-1588

Sun Cluster 2.2, when HA-Oracle or HA-Sybase DBMS services are used, stores database credentials in cleartext in a cluster configuration file, which allows local users to obtain sensitive information by reading this file...

CVE-2003-1588

CVE-2003-1588 affects Sun Cluster 2.2 when using HA-Oracle or HA-Sybase DBMS services. The issue is that database credentials are stored in cleartext in a cluster configuration file, allowing local users to read sensitive information from that file. The vulnerability concerns the cluster configur...

HP-UX PHSS_40230 : HP Enterprise Cluster Master Toolkit (ECMT) running on HP-UX, Local Unauthorized Access (HPSBUX02464 SSRT090210 rev.1)

s700800 11.31 ECMT B.05.00 patch : A potential security vulnerability has been identified on HP Enterprise Cluster Master Toolkit ECMT version B.05.00 running on HP-UX. This vulnerability could be exploited by local users to gain unauthorized access. %NASLMINLEVEL 70300 C Tenable Network Security...

HP-UX PHSS_40229 : HP Enterprise Cluster Master Toolkit (ECMT) running on HP-UX, Local Unauthorized Access (HPSBUX02464 SSRT090210 rev.1)

s700800 11.23 ECMT B.05.00 patch : A potential security vulnerability has been identified on HP Enterprise Cluster Master Toolkit ECMT version B.05.00 running on HP-UX. This vulnerability could be exploited by local users to gain unauthorized access. %NASLMINLEVEL 70300 C Tenable Network Security...