sos security, bug fix, and enhancement update

2.2-29.0.1.el6 - Direct traceroute to linux.oracle.com John Haxby orabug 11713272 - Disable --upload option as it will not work with Oracle support - Check oraclelinux-release instead of redhat-release to get OS version John Haxby bug 11681869 - Remove RH ftp URL and support email - add...

IPA-IAC.org Cross Site Scripting

+-------------------------------------------------------------------------+ Exploit Title : ipa-iac.org - website XSS Cross Site Scripting and deface passive Author : Atmon3r Date : 26/04/2012 Xss type : $POST +-------------------------------------------------------------------------+ + POC: POST...

RHEL 6 : ipa (RHSA-2011:1533)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1533 advisory. Red Hat Identity Management is a centralized authentication, identity management and authorization solution for both traditional and cloud based...

CVE-2011-1340: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in skins/plonetemplates/defaulterrormessage.pt in Plone before 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the typename parameter to Members/ipa/createObject...

sssd security, bug fix, and enhancement update

1.5.1-37 - Reverts: rhbz680443 - Dynamic DNS update fails if multiple servers are - given in ipaserver config option 1.5.1-36 - Resolves: rhbz709333 - sssd. should require sssd-client. 1.5.1-35 - Resolves: rhbz707340 - latest sssd fails if ldapdefaultauthtoktype is - not mentioned - Resolves:...

Fedora Update for ipa FEDORA-2008-7987

Check for the Version of ipa OpenVAS Vulnerability Test Fedora Update for ipa FEDORA-2008-7987 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora Update for ipa FEDORA-2008-8003

Check for the Version of ipa OpenVAS Vulnerability Test Fedora Update for ipa FEDORA-2008-8003 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora Update for ipa FEDORA-2008-8003

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for ipa FEDORA-2008-7987

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Red Hat Enterprise IPA主Kerberos密码信息泄漏漏洞

BUGTRAQ ID: 31111 CVE ID：CVE-2008-3274 CNCVE ID：CNCVE-20082358 Red Hat Enterprise IPA是一款提供集中管理识别，策略和审核的集成方案。 Red Hat Enterprise IPA安装过程存在缺陷，远程攻击者可以利用漏洞获得主kerberos密码信息。 攻击者通过匿名LDAP连接可以获得此密码信息。 注：主kerberos密码用于加密密钥，此缺陷不会导致个体密钥泄漏。 RedHat Enterprise IPA 1 for RHEL 5 Server Red Hat可参考如下补丁程序： Red Hat...

CVE-2008-3274

The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to obtain the Kerberos master key via an anonymous LDAP query...

[SECURITY] Fedora 9 Update: ipa-1.1.0-7.fc9

IPA is an integrated solution to provide centrally managed Identity machin e, user, virtual machines, groups, authentication credentials, Policy configuration settings, access control information and Audit events, logs, analysis thereof...

[SECURITY] Fedora 8 Update: ipa-1.1.0-4.fc8

IPA is an integrated solution to provide centrally managed Identity machin e, user, virtual machines, groups, authentication credentials, Policy configuration settings, access control information and Audit events, logs, analysis thereof...

Fedora 9 : ipa-1.1.0-7.fc9 (2008-8003)

Security update to address Kerberos master password disclosure flaw CVE-2008-3274. A simple update is not sufficient to resolve the security issue. Please carefully follow the upgrade instructions at: http://freeipa.org/page/CVE-2008-3274 Note that Tenable Network Security has extracted the...

Fedora 8 : ipa-1.1.0-4.fc8 (2008-7987)

Security update to address Kerberos master password disclosure flaw CVE-2008-3274. A simple update is not sufficient to resolve the security issue. Please carefully follow the upgrade instructions at: http://freeipa.org/page/CVE-2008-3274 Note that Tenable Network Security has extracted the...

CVE-2008-3274: Exposure of Sensitive Information to an Unauthorized Actor

The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to obtain the Kerberos master key via an anonymous LDAP query...

No title provided

The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to obtain the Kerberos master key via an anonymous LDAP query...

Important: Red Hat Security Advisory: ipa security update

Updated ipa packages that fix a security flaw are now available for Red Hat Enterprise IPA. This update has been rated as having important security impact by the Red Hat Security Response Team. Red Hat Enterprise IPA is an integrated solution to provide centrally-managed Identity machines, users,...

Security fix for the ALT Linux 8 package freeipa version 1.1.0-3

July 23, 2008 Simo Sorce &[email protected] - 1.1.0-3 - Fix for CVE-2008-3274 - Fix segfault in ipa-kpasswd in case getifaddrs returns a NULL interface - Add fix for bug 453185 - Rebuild against openldap libraries, mozldap ones do not work properly - TurboGears is currently broken in rawhide...

Winny Remote Buffer Overflow Vulnerability

Winny Remote Buffer Overflow Vulnerability Release Date: April 21, 2006 Date Reported: March 22, 2006 Patch Development Time In Days: Severity: High Remote Code Execution Systems Affected: Winny version 2.0 b7.1 and before Systems Affected: Windows NT 4.0 Windows 98 / ME Windows 2000 Windows XP...