28 matches found
EUVD-2007-3896
Malware in sbrugna...
[SECURITY] Fedora 40 Update: needrestart-3.8-1.fc40
needrestart checks which daemons need to be restarted after library upgrades. It is inspired by checkrestart from the debian-goodies package...
Ubuntu: Security Advisory (USN-6714-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-27635
debmany in debian-goodies 0.88.1 allows attackers to execute arbitrary shell commands because of an eval call via a crafted .deb file. The path is shown to the user before execution...
DEBIAN-CVE-2023-27635
debmany in debian-goodies 0.88.1 allows attackers to execute arbitrary shell commands because of an eval call via a crafted .deb file. The path is shown to the user before execution...
CVE-2023-27635
debmany in debian-goodies 0.88.1 allows attackers to execute arbitrary shell commands because of an eval call via a crafted .deb file. The path is shown to the user before execution...
CVE-2023-27635
CVE-2023-27635 affects debmany in Debian Goodies 0.88.1. The root cause is an eval call that allows an attacker to execute arbitrary shell commands via a crafted .deb file, with the file path shown to the user before execution. This yields a local attack vector with user interaction required (per...
CVE-2023-27635
debmany in debian-goodies 0.88.1 allows attackers to execute arbitrary shell commands because of an eval call via a crafted .deb file. The path is shown to the user before execution...
PT-2023-1670
Name of the Vulnerable Software and Affected Versions debian-goodies version 0.88.1 Description The issue is related to the debmany function in the debian-goodies package, which allows attackers to execute arbitrary shell commands due to an eval call. This can be achieved via a crafted .deb file...
Debian DLA-33-1 : openssl security update
Detailed descriptions of the vulnerabilities can be found at: https://www.openssl.org/news/secadv/20140806.txt It's important that you upgrade the libssl0.9.8 package and not just the openssl package. All applications linked to openssl need to be restarted. You can use the 'checkrestart' tool fro...
Debian DSA-2998-1 : openssl - security update
Multiple vulnerabilities have been identified in OpenSSL, a Secure Sockets Layer toolkit, that may result in denial of service application crash, large memory consumption, information leak, protocol downgrade. Additionally, a buffer overrun affecting only applications explicitly set up for SRP ha...
DSA-2125-1 openssl - buffer overflow
Bulletin has no description...
DSA-2116-1 freetype - integer overflow
Bulletin has no description...
Ubuntu: Security Advisory (USN-526-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu Update for debian-goodies vulnerability USN-526-1
Ubuntu Update for Linux kernel vulnerabilities USN-526-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5261.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for debian-goodies vulnerability USN-526-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Debian: Security Advisory (DSA-1527-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1527-1 : debian-goodies - insufficient input sanitising
Thomas de Grenier de Latour discovered that the checkrestart tool in the debian-goodies suite of utilities, allowed local users to gain privileges via shell metacharacters in the name of the executable file for a running process. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...
debian-goodies Scripts shell characters vulnerabilities
Shell characters problem via process names in checkrestart utility...
[SECURITY] [DSA 1527-1] New debian-goodies packages fix privilege escalation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1527-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 24, 2008 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1527-1] New debian-goodies packages fix privilege escalation
------------------------------------------------------------------------ Debian Security Advisory DSA-1527-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 24, 2008 http://www.debian.org/security/faq -...