OPENSUSE-SU-2025:15336-1 cmctl-2.3.0-1.1 on GA media

These are all security issues fixed in the cmctl-2.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

cmctl-2.2.0-1.1 on GA media (moderate)

cmctl-2.2.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15039-1 Rating: moderate Cross-References: CVE-2024-40635 CVSS scores: CVE-2024-40635 SUSE : 4.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

OPENSUSE-SU-2025:15039-1 cmctl-2.2.0-1.1 on GA media

These are all security issues fixed in the cmctl-2.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: flux-source-controller, helm-docs, flux-helm-controller, tw, flux, k9s, zot, kubescape, trivy, cilium-cli, cluster-api-helm-controller, chart-testing, eksctl, kots, rancher-helm, pluto, zarf, helm-operator, k8ssandra-client, chartmuseum, helm-push, cert-manager-cmctl...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: flux-source-controller, helm-docs, flux-helm-controller, tw, flux, k9s, zot, kubescape, trivy, cilium-cli, cluster-api-helm-controller, chart-testing, eksctl, kots, rancher-helm, pluto, zarf, helm-operator, k8ssandra-client, chartmuseum, helm-push, cert-manager-cmctl...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: trivy, zarf, k9s, flux, helm-push, cert-manager-cmctl, flux-helm-controller, helm-operator-fips, cluster-api-helm-controller-fips, cert-manager-cmctl-fips, helm-docs, zot, consul-k8s, kuma, chartmuseum, tw, harbor, rancher-helm, flux-helm-controller-fips, kubescape,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: helm-docs, wave, flux-kustomize-controller, grafana-mimir, crossplane-provider-keycloak, wire-go, cass-operator, kbld, crossplane-provider-azure-storage, controller-gen, aws-flb-firehose, sonobuoy, influx, conftest, kubernetes-dashboard, nginx-prometheus-exporter,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: helm-docs, wave, flux-kustomize-controller, grafana-mimir, crossplane-provider-keycloak, wire-go, cass-operator, kbld, crossplane-provider-azure-storage, controller-gen, aws-flb-firehose, sonobuoy, influx, conftest, kubernetes-dashboard, nginx-prometheus-exporter,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: flux-source-controller, grype, docker-cli-buildx, flux-helm-controller, kaniko, wolfictl, fuse-overlayfs-snapshotter, newrelic-infrastructure-agent, syft, rancher-fleet, xeol, docker-compose, nerdctl, spegel, kargo, melange, zot, kubescape, osv-scanner, trivy, dagger...

GHSA-R4PG-VG54-WXX4 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, step-issuer, cert-manager-istio-csr, cert-exporter, aws-privateca-issuer, cert-manager-cmctl...

OPENSUSE-SU-2024:13905-1 cmctl-1.14.5-1.1 on GA media

These are all security issues fixed in the cmctl-1.14.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13376-1 cmctl-1.13.2-1.1 on GA media

These are all security issues fixed in the cmctl-1.13.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12603-1 cmctl-1.10.2-1.1 on GA media

These are all security issues fixed in the cmctl-1.10.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13778-1 cmctl-1.14.4-1.1 on GA media

These are all security issues fixed in the cmctl-1.14.4-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2000-1180

The CVE-2000-1180 entry describes a buffer overflow in the cmctl utility of Oracle 8.1.5 Connection Manager Control. The vulnerability is triggered by a long command line argument, allowing local attackers to gain privileges (local privilege escalation). The available sources describe the affecte...

Локальная дырка в Oracle 8 (cmctl buffer overflow)

Переполнение буфера в cmctl позволяет получить euid=oracle и egid=dba...

Oracle 8.x - cmctl Buffer Overflow

/ source: https://www.securityfocus.com/bid/1968/info cmctl is the Connection Control Manager, part of the Oracle 8i installation. A vulnerability exists that can allow elevation of privileges. The problem occurs in the way cmctl handles the user-supplied command line arguments. The string...

Oracle 8.x - cmctl Buffer Overflow

Oracle 8.x - cmctl Buffer Overflow / source: https://www.securityfocus.com/bid/1968/info cmctl is the Connection Control Manager, part of the Oracle 8i installation. A vulnerability exists that can allow elevation of privileges. The problem occurs in the way cmctl handles the user-supplied comman...

cmctl_exp

! /usr/bin/ksh cmctl is installed setuid to Oracle by default. See BugTraq ID 170 and Oracle bug id 701297 and 714293. This script will create a setuid Oracle shell, /tmp/.sh redirect environment variables export ORACLEHOME=/tmp export ORAHOME=/tmp mkdir /tmp/bin chmod a+rx /tmp/bin create cmadmi...