Important: Red Hat Security Advisory: jbossas security update

An update for JBoss Enterprise Application Platform 5.1.2 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which giv...

Pop star KE$HA twitter Hacked

Pop star KE$HA twitter Hacked Pop star KE$HA has fallen victim to internet pranksters after her Twitter.com blog was hacked on Sunday. Tweet by her account : Single out in a couple hours. Ugh so fkin stressful… wish I could stay on da the beach forever." It was potentially seen by Kesha's 3.1...

CVE-2010-3389

The 1 SAPDatabase and 2 SAPInstance scripts in OCF Resource Agents aka resource-agents or cluster-agents 1.0.3 in Linux-HA place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

Directory traversal

The 1 SAPDatabase and 2 SAPInstance scripts in OCF Resource Agents aka resource-agents or cluster-agents 1.0.3 in Linux-HA place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2010-3389

The 1 SAPDatabase and 2 SAPInstance scripts in OCF Resource Agents aka resource-agents or cluster-agents 1.0.3 in Linux-HA place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2010-3389

The 1 SAPDatabase and 2 SAPInstance scripts in OCF Resource Agents aka resource-agents or cluster-agents 1.0.3 in Linux-HA place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2010-3389

CVE-2010-3389 affects the SAPDatabase and SAPInstance scripts in OCF Resource Agents (resource-agents) 1.0.3 used by Linux-HA. The vulnerability arises from placing a zero-length directory name in LD_LIBRARY_PATH, enabling a local attacker to load a Trojan horse shared library from the current wo...

CVE-2003-1588

Sun Cluster 2.2, when HA-Oracle or HA-Sybase DBMS services are used, stores database credentials in cleartext in a cluster configuration file, which allows local users to obtain sensitive information by reading this file...

CVE-2003-1588

CVE-2003-1588 affects Sun Cluster 2.2 when using HA-Oracle or HA-Sybase DBMS services. The issue is that database credentials are stored in cleartext in a cluster configuration file, allowing local users to read sensitive information from that file. The vulnerability concerns the cluster configur...

CVE-2003-1588

Sun Cluster 2.2, when HA-Oracle or HA-Sybase DBMS services are used, stores database credentials in cleartext in a cluster configuration file, which allows local users to obtain sensitive information by reading this file...

CVE-2009-4331

The Install component in IBM DB2 9.5 before FP5 and 9.7 before FP1 configures the High Availability HA scripts with incorrect file-permission and authorization settings, which has unknown impact and local attack vectors...

CVE-2009-0634

Cisco IOS Software CVE-2009-0634 involves DoS in Mobile IP NAT Traversal and Mobile IPv6. Affected releases: 12.3–12.4. Exploitation requires ICMP directed at the router, wedging input queues and causing interface outages, per Bug IDs CSCso05337/CSCsm97220. Impact: denial of service with interfac...

[EXPL] SCO UnixWare Reliant HA Local Root (Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

SCO UnixWare Reliant HA Local Root Exploit

No description provided by source. / 04/2008: public release I have'nt seen any advisory on this; possibly still not fixed. SCO UnixWare Reliant HA Local Root Exploit By qaaz / include stdio.h include stdlib.h include string.h include unistd.h include errno.h include fcntl.h define TGT1...

SCO UnixWare Reliant HA 1.1.4 - Local Privilege Escalation

SCO UnixWare Reliant HA 1.1.4 - Local Privilege Escalation / 04/2008: public release I have'nt seen any advisory on this; possibly still not fixed. SCO UnixWare Reliant HA Local Root Exploit By qaaz / include include include include include include define TGT1 "/usr/opt/reliant/bin/hvdisp" define...

SCO UnixWare Reliant HA Local Root Exploit

Exploit for sco platform in category local exploits ========================================== SCO UnixWare Reliant HA Local Root Exploit ========================================== / 04/2008: public release I have'nt seen any advisory on this; possibly still not fixed. SCO UnixWare Reliant HA Loc...

SCO UnixWare Reliant HA 1.1.4 - Local Privilege Escalation

/ 04/2008: public release I have'nt seen any advisory on this; possibly still not fixed. SCO UnixWare Reliant HA Local Root Exploit By qaaz / include include include include include include define TGT1 "/usr/opt/reliant/bin/hvdisp" define TGT2 "/usr/opt/reliant/bin/rcvm" define DIR "bin" define B...

CVE-2007-4205

XHA Linux-HA on the BlueCat Networks Adonis DNS/DHCP Appliance 5.0.2.8 allows remote attackers to cause a denial of service heartbeat control process crash via a UDP packet to port 694. NOTE: this may be the same as CVE-2006-3121...

Denial of service

XHA Linux-HA on the BlueCat Networks Adonis DNS/DHCP Appliance 5.0.2.8 allows remote attackers to cause a denial of service heartbeat control process crash via a UDP packet to port 694. NOTE: this may be the same as CVE-2006-3121...

CVE-2007-4205

CVE-2007-4205 affects XHA (Linux-HA) on the BlueCat Networks Adonis DNS/DHCP Appliance 5.0.2.8. The issue allows a remote attacker to trigger a denial-of-service by sending a UDP packet to port 694, crashing the heartbeat control process. The description notes this may be the same vulnerability a...