Debian Security Advisory DSA 1406-1 (horde3)

The remote host is missing an update to horde3 announced via advisory DSA 1406-1. OpenVAS Vulnerability Test $Id: deb14061.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1406-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 024-1 (cron)

The remote host is missing an update to cron announced via advisory DSA 024-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-6418

The libdspam7-drv-mysql cron job in Debian GNU/Linux includes the MySQL dspam database password in a command line argument, which might allow local users to read the password by listing the process and its arguments...

CVE-2007-6418

CVE-2007-6418 (Debian - dspam): The Debian-provided CRON script for dspam uses the MySQL backend and exposes the dspam password on the command line, enabling a local attacker to read the password and potentially access the dspam database (e-mails, etc.). The issue is fixed in Debian etch via dspa...

CVE-2007-6418

The libdspam7-drv-mysql cron job in Debian GNU/Linux includes the MySQL dspam database password in a command line argument, which might allow local users to read the password by listing the process and its arguments...

SuSE 10 Security Update : cron (ZYPP Patch Number 3093)

By setting hard links to /etc/crontab users were able to prevent cron from running scheduled jobs. CVE-2007-1856 A re-emerged symlink bug allowed users to edit the crontab of other users. CVE-2005-1038 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

SuSE 10 Security Update : cron (ZYPP Patch Number 3831)

By setting hard links to /etc/crontab users were able to prevent cron from running scheduled jobs. CVE-2007-1856 A re-emerged symlink bug allowed users to edit the crontab of other users. CVE-2005-1038 This is a reissue of the SLES10 update after Service Pack 1, since Service Pack 1 merge lost so...

Send ICMP Nasty Garbage (sing) Append File Logrotate Exploit

No description provided by source. / sing file append exploit by bannedit 12/05/2007 The original reporter of this issue included an example session which added an account to the machine. The method for this exploit is slightly different and much more quiet. Although it relies upon logrotate for...

sendicmp-append.txt

/ sing file append exploit by bannedit 12/05/2007 The original reporter of this issue included an example session which added an account to the machine. The method for this exploit is slightly different and much more quiet. Although it relies upon logrotate for help. This could easily be modified...

Mandrake Linux Security Advisory : vixie-cron (MDKSA-2007:234)

Raphael Marichez discovered a denial of service bug in how vixie-cron verifies crontab file integrity. A local user with the ability to create a hardlink to /etc/crontab could prevent vixie-cron from executing certain system cron jobs. The updated packages have been patched to correct this issue...

VMware Workstation and Player: Multiple vulnerabilities

Background VMware Workstation is a virtual machine for developers and system administrators. VMware Player is a freeware virtualization software that can run guests produced by other VMware products. Description Multiple vulnerabilities have been discovered in several VMware products. Neel Mehta...

Debian DSA-1406-1 : horde3 - several vulnerabilities

Several remote vulnerabilities have been discovered in the Horde web application framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-3548 Moritz Naumann discovered that Horde allows remote attackers to inject arbitrary web script or HTML in t...

[SECURITY] [DSA 1406-1] New horde3 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1406-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 9th, 2007 http://www.debian.org/security/faq -...

DSA-1406-1 horde3 - several vulnerabilities

Bulletin has no description...

Fedora 7 : moodle-1.8.2-1.fc7 (2007-1445)

Upgrade to 1.8.2, Security fixes for 247582. Also corrects bug 245750, cron job problem. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

openSUSE 10 Security Update : cron (cron-3092)

By setting hard links to /etc/crontab users were able to prevent cron from running scheduled jobs CVE-2007-1856. A re-emerged symlink bug allowed users to edit the crontab of other users CVE-2005-1038. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

openSUSE 10 Security Update : pam_ssh (pam_ssh-3024)

If you are using pamssh for authentication, 'cron' would crash when trying to execute jobs. This update fixes this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update pamssh-3024. The tex...

openSUSE 10 Security Update : cron (cron-1440)

A missing check on the return value of setuid in vixie-cron could be used by a local user to gain root privileges by exhausting resource limits and waiting for a cronjob to trigger. This is tracked by the Mitre CVE ID CVE-2006-2607. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

HP-UX Security Patch : PHCO_24702

cumulative crontab/at/cron patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26237; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/11";...

HP-UX Security Patch : PHCO_27141

cumulative crontab/at/cron patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26254; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/11";...