11 matches found
EUVD-2010-0047
Malware in sbrugna...
EUVD-2015-7431
Malware in sbrugna...
AIX 6.1 TL 7 : bos.rte.security (U838721)
The remote host is missing AIX PTF U838721, which is related to the security of the package bos.rte.security. AIX could allow a local attacker to gain elevated privileges on the system, caused by an error in the getpwnam function when customer extended LDAP user filtering is configured. A local...
AIX 7.1 TL 1 : ldapauth (IV18464)
AIX could allow a local attacker to gain elevated privileges on the system, caused by an error in the getpwnam function when customer extended LDAP user filtering is configured. A local attacker could exploit this vulnerability to gain lateral or elevated privileges on the system. %NASLMINLEVEL...
Design/Logic Flaw
The getpwnam function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.1.0.10 through 2.2.1.3 does not properly interact with customer-extended LDAP user filtering, which allows local users to gain privileges via unspecified vectors...
Debian DSA-1973-1 : glibc, eglibc - information disclosure
Christoph Pleger has discovered that the GNU C Library aka glibc and its derivatives add information from the passwd.adjunct.byname map to entries in the passwd map, which allows local users to obtain the encrypted passwords of NIS accounts by calling the getpwnam function. %NASLMINLEVEL 70300 C...
Debian: Security Advisory (DSA-1973-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DSA-1973-1 glibc - information disclosure
Bulletin has no description...
CVE-2010-0015
nis/nssnis/nis-pwd.c in the GNU C Library aka glibc or libc6 2.7 and Embedded GLIBC EGLIBC 2.10.2 adds information from the passwd.adjunct.byname map to entries in the passwd map, which allows remote attackers to obtain the encrypted passwords of NIS accounts by calling the getpwnam function...
CVE-2010-0015
nis/nssnis/nis-pwd.c in the GNU C Library aka glibc or libc6 2.7 and Embedded GLIBC EGLIBC 2.10.2 adds information from the passwd.adjunct.byname map to entries in the passwd map, which allows remote attackers to obtain the encrypted passwords of NIS accounts by calling the getpwnam function...
Zabbix 1.1.41.4.2 - daemon_start Local Privilege Escalation
Zabbix 1.1.41.4.2 - daemonstart Local Privilege Escalation include include include include int main struct passwd pw; pw = getpwnam"abi"; FILE pipe; char buf25; setgidpw-pwgid; setuidpw-pwuid; printf"my gid: %d\n", getegid; printf"my uid: %d\n", getuid; pipe = popen"/usr/bin/id", "r"; while...