12 matches found
SUSE: Security Advisory (SUSE-SU-2012:0988-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2014:1214-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Solaris Third-Party Patch Update : bash (cve_2012_3410_stack_based)
The remote Solaris system is missing necessary patches to address security updates : - Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local users to bypass intended restricted shell access via a long filename in /dev/fd, which is not properly handled...
openSUSE Security Update : bash (openSUSE-SU-2012:0898-1)
Bash was fixed to avoid a possible buffer overflow when expanding the /dev/fd prefix with e.g. the test builtin bnc770795 CVE-2012-3410 Due to FORTIFYSOURCE=2 enablement, the exploit will only abort the shell. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
Mandriva Linux Security Advisory : bash (MDVSA-2013:032)
A vulnerability was found and corrected in bash : A stack-based buffer overflow flaw was found in the way bash, the GNU Bourne Again shell, expanded certain /dev/fd file names when checking file names 'test' command and evaluating /dev/fd file names in conditinal command expressions. A remote...
[ MDVSA-2013:019 ] bash
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:019 http://www.mandriva.com/en/support/security/ Package : bash Date : April 4, 2013 Affected: Business Server 1.0 Problem Description: A vulnerability was found and corrected in bash: A stack-based buffer...
SuSE 11.1 Security Update : bash (SAT Patch Number 6541)
Parsing the /dev/fd prefix could have lead to a stack-based buffer overflow which could have been exploited by attackers to bypass security restrictions. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...
Mandriva Linux Security Advisory : bash (MDVSA-2012:128)
A vulnerability was found and corrected in bash : A stack-based buffer overflow flaw was found in the way bash, the GNU Bourne Again shell, expanded certain /dev/fd file names when checking file names 'test' command and evaluating /dev/fd file names in conditinal command expressions. A remote...
CVE-2012-3410
Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local users to bypass intended restricted shell access via a long filename in /dev/fd, which is not properly handled when expanding the /dev/fd prefix...
CVE-2012-3410
CVE-2012-3410 describes a stack-based buffer overflow in GNU Bash (lib/sh/eaccess.c) that occurs when expanding the /dev/fd prefix. Before Bash 4.2 patch 33, a long filename in /dev/fd could allow local users to bypass intended restricted shell access. The vulnerability’s impact is described as a...
Mandriva Update for bash MDVSA-2012:128 (bash)
Check for the Version of bash OpenVAS Vulnerability Test Mandriva Update for bash MDVSA-2012:128 bash Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
SuSE 10 Security Update : bash (ZYPP Patch Number 8217)
Parsing the /dev/fd prefix could have lead to a stack-based buffer overflow which could have been exploited by attackers to bypass security restrictions. CVE-2012-3410 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...