23 matches found
CVE-2009-0242
gmetad in Ganglia 3.1.1, when supporting multiple requests per connection on an interactive port, allows remote attackers to cause a denial of service via a request to the gmetad service with a path that does not exist, which causes Ganglia to 1 perform excessive CPU computation and 2 send the...
SUSE CVE-2009-0241
Stack-based buffer overflow in the processpath function in gmetad/server.c in Ganglia 3.1.1 allows remote attackers to cause a denial of service crash via a request to the gmetad service with a long pathname...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the gmetad package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Ganglia gmetad <= 3.0.6 'process_path()' Remote Stack Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33299/info Ganglia is prone to a remote stack-based buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied input. Attackers can leverage this issue to execute arbitra...
openSUSE 10 Security Update : ganglia-monitor-core (ganglia-monitor-core-6259)
A stack-based buffer overflow in ganglia's buffer processpath function has been fixed. CVE-2009-0241 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
Ganglia gmetad process_path()函数远程栈溢出漏洞
BUGTRAQ ID: 33299 Ganglia是一个开源项目，为高性能计算系统（例如集群和网格）提供了一个免费的可扩展分布式监控系统。 Ganglia的gmetad/server.c文件中的processpath函数没有执行边界检查，如果远程攻击者向gmetad服务提交的请求中路径单元长于strncpy调用写入到无效内存位置服务的长度的话，就可以触发栈溢出，导致执行任意代码。 Ganglia 3.1.1 Ganglia ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Debian: Security Advisory (DSA-1710-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 1710-1 (ganglia-monitor-core)
The remote host is missing an update to ganglia-monitor-core announced via advisory DSA 1710-1. OpenVAS Vulnerability Test $Id: deb17101.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1710-1 ganglia-monitor-core Authors: Thomas Reinke Copyright: Copyright ...
ganglia cluster monitoring tool buffer overflow
gmetad buffer overflow...
[SECURITY] [DSA 1710-1] New ganglia-monitor-core packages fix remote code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1710-1 [email protected] http://www.debian.org/security/ Steffen Joeris January 25, 2009 http://www.debian.org/security/faq -...
Debian DSA-1710-1 : ganglia-monitor-core - buffer overflow
Spike Spiegel discovered a stack-based buffer overflow in gmetad, the meta-daemon for the ganglia cluster monitoring toolkit, which could be triggered via a request with long path names and might enable arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...
[SECURITY] [DSA 1710-1] New ganglia-monitor-core packages fix remote code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1710-1 [email protected] http://www.debian.org/security/ Steffen Joeris January 25, 2009 http://www.debian.org/security/faq -...
CVE-2009-0241
Stack-based buffer overflow in the processpath function in gmetad/server.c in Ganglia 3.1.1 allows remote attackers to cause a denial of service crash via a request to the gmetad service with a long pathname...
CVE-2009-0242
Rejected reason: gmetad in Ganglia 3.1.1, when supporting multiple requests per connection on an interactive port, allows remote attackers to cause a denial of service via a request to the gmetad service with a path that does not exist, which causes Ganglia to 1 perform excessive CPU computation...
CVE-2009-0241
Stack-based buffer overflow in the processpath function in gmetad/server.c in Ganglia 3.1.1 allows remote attackers to cause a denial of service crash via a request to the gmetad service with a long pathname...
CVE-2009-0241
Stack-based buffer overflow in the processpath function in gmetad/server.c in Ganglia 3.1.1 allows remote attackers to cause a denial of service crash via a request to the gmetad service with a long pathname...
CVE-2009-0241
Stack-based buffer overflow in the processpath function in gmetad/server.c in Ganglia 3.1.1 allows remote attackers to cause a denial of service crash via a request to the gmetad service with a long pathname...
CVE-2009-0242
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2009-0241
Summary (CVE-2009-0241): A stack-based buffer overflow in Ganglia 3.1.1’s gmetad/server.c process_path() handling of long pathnames can be exploited remotely. Documented impact ranges from crashing the gmetad service (denial of service) to, in some advisories, potential arbitrary code execution i...
CVE-2009-0241
Stack-based buffer overflow in the processpath function in gmetad/server.c in Ganglia 3.1.1 allows remote attackers to cause a denial of service crash via a request to the gmetad service with a long pathname...