CVE-2015-8020: Exposure of Sensitive Information to an Unauthorized Actor

Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized information disclosure...

MS15-058: Description of the nonsecurity update for SQL Server 2014 Service Pack 1 GDR: July 14, 2015

MS15-058: Description of the nonsecurity update for SQL Server 2014 Service Pack 1 GDR: July 14, 2015 Summary Microsoft has released security bulletin MS15-058. However, Microsoft SQL Server 2014 Service Pack 1 is not affected by the vulnerabilities that are discussed in this bulletin. But, it is...

Code injection

NetApp Clustered Data ONTAP before 8.2.4P4 and 8.3.x before 8.3.2P2 allows remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors...

CVE-2016-3064

NetApp Clustered Data ONTAP before 8.2.4P4 and 8.3.x before 8.3.2P2 allows remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors...

PT-2016-5350

Name of the Vulnerable Software and Affected Versions NetApp Clustered Data ONTAP versions prior to 8.2.4P4 NetApp Clustered Data ONTAP versions 8.3.x prior to 8.3.2P2 Description The issue allows remote authenticated users to obtain sensitive cluster and tenant information via unspecified vector...

CVE-2016-3064: Exposure of Sensitive Information to an Unauthorized Actor

NetApp Clustered Data ONTAP before 8.2.4P4 and 8.3.x before 8.3.2P2 allows remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:1696-1)

The SUSE Linux Enterprise 12 SP1 kernel was updated to 3.12.59 to receive various security and bugfixes. Main feature additions : - Improved support for Clustered File System CephFS, fate318586. - Addition of kGraft patches now produces logging messages to simplify auditing fate317827. The...

NetApp MetroCluster Tiebreaker for clustered Data ONTAP Information Disclosure Vulnerability

NetApp Clustered Data ONTAP is a set of storage operating system for clustered mode from the American company NetApp. An information disclosure vulnerability exists in NetApp MetroCluster Tiebreaker for clustered Data ONTAP, which allows remote attackers to submit a special request to obtain...

NetApp Clustered Data ONTAP Information Disclosure Vulnerability

NetApp Clustered Data ONTAP is a set of storage operating system for clustered mode from American NetApp. The system supports users to enhance the performance of enterprise applications and improve data center flexibility and so on. An information disclosure vulnerability exists in NetApp Cluster...

SUSE-SU-2016:1937-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP1 RT kernel was updated to 3.12.61 to receive various security and bugfixes. Main feature additions: - Improved support for Clustered File System CephFS, fate318586. The following security bugs were fixed: - CVE-2014-9717: fs/namespace.c in the Linux kernel processe...

SUSE-SU-2016:1696-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP1 kernel was updated to 3.12.59 to receive various security and bugfixes. Main feature additions: - Improved support for Clustered File System CephFS, fate318586. - Addition of kGraft patches now produces logging messages to simplify auditing fate317827. The followi...

The vulnerability of the operating system for Clustered Data ONTAP storage systems allows a attacker to obtain confidential information or replace servers.

The vulnerability of the Clustered Data ONTAP operating system exists due to the lack of verification of X.509 certificate checks for the TLS server. Exploiting this vulnerability allows a malicious actor to replace the server remotely or obtain confidential information using a specially crafted...

CVE-2016-1563

NetApp Clustered Data ONTAP 8.3.1 does not properly verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2016-1563

NetApp Clustered Data ONTAP 8.3.1 does not properly verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2016-1645

Name of the Vulnerable Software and Affected Versions NetApp Clustered Data ONTAP version 8.3.1 Description The issue arises from the improper verification of X.509 certificates from TLS servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2016-1563: Improper Input Validation

NetApp Clustered Data ONTAP 8.3.1 does not properly verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

[SECURITY] [DSA 3426-2] ctdb regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3426-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 03, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3426-2] ctdb regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3426-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 03, 2016 https://www.debian.org/security/faq -...

SGI Advanced Linux Environment 3.0,SGI IRIX <= 6.5.4,SGI UNICOS <= 10.0 6 arrayd.auth Default Configuration Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/530/exploit The SGI Array Services provide a mechanism to simplify administering and managing an array of clustered systems. The arrayd1m program is part of the arrayservices5 and is known as the array services daemon. Th...

rgmanager: Privilege escalation

Background rgmanager is a clustered resource group manager. Description A vulnerability has been discovered in rgmanager. Please review the CVE identifier referenced below for details. Impact A local attacker could gain escalated privileges. Workaround There is no known workaround at this time...