1042 matches found
Debian Security Advisory DSA 761-2 (heartbeat)
The remote host is missing an update to heartbeat announced via advisory DSA 761-2. The security update DSA 761-1 for pdns contained a bug which caused a regression. This problem is corrected with this advisory. For completeness below please find the original advisory text: Eric Romang discovered...
Debian Security Advisory DSA 761-1 (heartbeat)
The remote host is missing an update to heartbeat announced via advisory DSA 761-1. Eric Romang discovered several insecure temporary file creations in heartbeat, the subsystem for High-Availability Linux. For the old stable distribution woody these problems have been fixed in version 0.4.9.0l-7....
Debian Security Advisory DSA 761-1 (heartbeat)
The remote host is missing an update to heartbeat announced via advisory DSA 761-1. Eric Romang discovered several insecure temporary file creations in heartbeat, the subsystem for High-Availability Linux. For the old stable distribution woody these problems have been fixed in version 0.4.9.0l-7....
Cisco IOS on Catalyst 6500 and Cisco 7600 Access Control List Bypass Vulnerability
Cisco IOS running on Catalyst 6500 and Cisco 7600 contains a vulnerability that could allow an unauthenticated, remote attacker to bypass configured ACLs. The vulnerability exists because the affected devices accept traffic to IP addresses that are reserved for use by the Ethernet Out-of-Band...
Heartbeat: Denial of service
Background Heartbeat is a component of the High-Availability Linux project. It is used to perform death-of-node detection, communications and cluster management. Description Yan Rong Ge discovered that the peelnetstring function in clnetstring.c does not validate the "length" parameter of user...
CVE-2006-3121
The peelnetstring function in clnetstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.0 before 2.0.7, allows remote attackers to cause a denial of service crash via the length parameter in a heartbeat message...
CVE-2006-3121
The peelnetstring function in clnetstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.0 before 2.0.7, allows remote attackers to cause a denial of service crash via the length parameter in a heartbeat message...
CVE-2006-3121
The peelnetstring function in clnetstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.0 before 2.0.7, allows remote attackers to cause a denial of service crash via the length parameter in a heartbeat message...
DEBIAN-CVE-2006-3121
The peelnetstring function in clnetstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.0 before 2.0.7, allows remote attackers to cause a denial of service crash via the length parameter in a heartbeat message...
CVE-2006-3121
CVE-2006-3121 affects the Heartbeat subsystem of High-Availability Linux: the peel_netstring function in cl_netstring.c can be abused by a remote attacker via the length parameter in a heartbeat message to cause a denial of service (crash). Affected products include HA-Linux releases before 1.2.5...
CVE-2006-3121
The peelnetstring function in clnetstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.0 before 2.0.7, allows remote attackers to cause a denial of service crash via the length parameter in a heartbeat message...
DSA-1151-1 heartbeat - out-of-bounds read
Bulletin has no description...
[waraxe-2005-SA#043] - Sql injection in Phorum 5.0.20 and earlier
================================================================================ waraxe-2005-SA043 ================================================================================ Sql injection in Phorum 5.0.20 and earlier...
[SECURITY] [DSA 761-2] New heartbeat packages fix insecure temporary files
-------------------------------------------------------------------------- Debian Security Advisory DSA 761-2 [email protected] http://www.debian.org/security/ Martin Schulze August 15th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 761-1] New heartbeat packages fix insecure temporary files
-------------------------------------------------------------------------- Debian Security Advisory DSA 761-1 [email protected] http://www.debian.org/security/ Martin Schulze July 19th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 761-1] New heartbeat packages fix insecure temporary files
-------------------------------------------------------------------------- Debian Security Advisory DSA 761-1 [email protected] http://www.debian.org/security/ Martin Schulze July 19th, 2005 http://www.debian.org/security/faq -...
CVE-2005-2231
High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2005-2231
The CVE-2005-2231 issue affects Heartbeat (High Availability Linux) 1.2.3, where a symlink attack on temporary files allows local users to overwrite arbitrary files. This is a local-privilege concern with incomplete impact (I:P; C:N; A:N) as documented. Debian advisories note the fix to version 1...
sc.txt
Two Security Holes in Sun Cluster 2.x echo8 Hole 1 ------- Summary ------- Sun Cluster 2.x Sun Microsystems' commercial high-availability product for Solaris leaks potentially sensitive information to local or remote users. Specifics --------- In a standard Sun Cluster install, there is a service...
