Solarwinds LEM 6.3.1 Management Shell Arbitrary File Read Vulnerability

The management shell on Solarwinds Log and Event Manager Virtual Appliance version 6.3.1 allows the end user to edit the MOTD banner displayed during SSH logon. The editor provided for this is nano. This editor has a keyboard mapped function which lets the user import a file from the local file...

Command Injection

Salt is vulnerable to command injection. It does not properly sanitize the input arguments from the disk usage command, leading to a command injection vulnerability...

Packet Capture Utility: Stenographer

Stenographer is a full-packet-capture utility for buffering packets to disk for intrusion detection and incident response purposes. It provides a high-performance implementation of NIC-to-disk packet writing, handles deleting those files as disk fills up, and provides methods for reading back...

Portable Penetration Testing Distribution for Windows: PentestBox

PentestBox is not like other Penetration Testing Distributions which runs on virtual machines. It is created because more than 70% of penetration testing distributions users uses windows and provides an efficient platform for Penetration Testing on windows. It provides all security tools as a...

Red Hat RHQ Content Fragment Upload Security Bypass Vulnerability

Red Hat RHQ is a set of Red Hat Red Hat of the United States, JBoss middleware program in the enterprise management solution. The program provides management, monitoring and alerting capabilities. A security vulnerability exists in Red Hat RHQ that stems from the program's failure to properly...

Debian DLA-158-1 : request-tracker3.8 security update

Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system. The Common Vulnerabilities and Exposures project identifies the following problems : CVE-2014-9472 Christian Loos discovered a remote denial of service vulnerability, exploitable via th...

Request Tracker Remote Denial of Service Vulnerability

Best Practical Solutions Request Tracker RT is an enterprise-grade, open source issue tracking system from Best Practical Solutions in the United States. The system has Bug tracking , customer service , customized workflow and other features . A denial of service vulnerability exists in Best...

KDirStat: Arbitrary command execution

Background KDirStat is a graphical disk usage utility for KDE. Description Missing escape of executable shell command in KDirStat can be used to insert malicious shell commands. Impact A local attacker could possibly execute arbitrary shell command with the privileges of the process. Workaround...

[SECURITY] Fedora 19 Update: k4dirstat-2.7.0-0.14.20101010git6c0a9e6.fc19

KDirStat KDE Directory Statistics is a utility program that sums up disk usage for directory trees - very much like the Unix 'du' command. It can also help you clean up used space. K4DirStat is the port to KDE4...

[SECURITY] Fedora 20 Update: k4dirstat-2.7.0-0.14.20101010git6c0a9e6.fc20

KDirStat KDE Directory Statistics is a utility program that sums up disk usage for directory trees - very much like the Unix 'du' command. It can also help you clean up used space. K4DirStat is the port to KDE4...

Scientific Linux Security Update : net-snmp on SL6.x i386/x86_64 (20140324)

A buffer overflow flaw was found in the way the decodeicmpmsg function in the ICMP-MIB implementation processed Internet Control Message Protocol ICMP message statistics reported in the /proc/net/snmp file. A remote attacker could send a message for each ICMP message type, which could potentially...

RedHat Update for net-snmp RHSA-2014:0321-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for net-snmp CESA-2014:0321 centos6

Check for the Version of net-snmp OpenVAS Vulnerability Test CentOS Update for net-snmp CESA-2014:0321 centos6 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

net security update

CentOS Errata and Security Advisory CESA-2014:0321 Updated net-snmp packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System...

PT-2014-2798

Name of the Vulnerable Software and Affected Versions OpenStack Compute Nova versions Folsom through Havana Description The issue allows local users to cause a denial of service, specifically host file system disk consumption, via a compressed QCOW2 image. This is due to the incomplete verificati...

Keystone: denial of service through invalid token requests

OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2 and earlier allows remote attackers to cause a denial of service disk consumption via many invalid token requests that trigger excessive generation of log entries...

CentOS Update for quota CESA-2013:0120 centos5

Check for the Version of quota OpenVAS Vulnerability Test CentOS Update for quota CESA-2013:0120 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS Update for quota CESA-2013:0120 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS 5 : quota (CESA-2013:0120)

An updated quota package that fixes one security issue and multiple bugs is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Low: Red Hat Security Advisory: quota security and bug fix update

An updated quota package that fixes one security issue and multiple bugs is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...