1947 matches found
CVE-2007-3100
usr/log.c in iscsid in open-iscsi iscsi-initiator-utils before 2.0-865 uses a semaphore with insecure permissions world-writable/world-readable for managing log messages using shared memory, which allows local users to cause a denial of service hang by grabbing the semaphore...
CVE-2007-3100
usr/log.c in iscsid in open-iscsi iscsi-initiator-utils before 2.0-865 uses a semaphore with insecure permissions world-writable/world-readable for managing log messages using shared memory, which allows local users to cause a denial of service hang by grabbing the semaphore...
CVE-2007-3099
usr/mgmtipc.c in iscsid in open-iscsi iscsi-initiator-utils before 2.0-865 checks the client's UID on the listening AFLOCAL socket instead of the new connection, which allows remote attackers to access the management interface and cause a denial of service iscsid exit or iSCSI connection loss...
CVE-2007-3099
CVE-2007-3099 affects open-iscsi iscsi-initiator-utils (iscsid) prior to 2.0-865: a local/remote vulnerability where mgmt_ipc.c checks the UID on the listening AF_LOCAL socket instead of the new connection, enabling remote attackers to access the management interface and cause a denial of service...
CVE-2007-3099
usr/mgmtipc.c in iscsid in open-iscsi iscsi-initiator-utils before 2.0-865 checks the client's UID on the listening AFLOCAL socket instead of the new connection, which allows remote attackers to access the management interface and cause a denial of service iscsid exit or iSCSI connection loss...
CVE-2007-3100
CVE-2007-3100 affects open-iscsi (iscsi-initiator-utils) with iscsid before version 2.0-865. The vulnerability is due to a semaphore used for log messages in shared memory that is created with world-writable/world-readable permissions, allowing a local user to grab the semaphore and cause a denia...
CVE-2007-3100
usr/log.c in iscsid in open-iscsi iscsi-initiator-utils before 2.0-865 uses a semaphore with insecure permissions world-writable/world-readable for managing log messages using shared memory, which allows local users to cause a denial of service hang by grabbing the semaphore...
iscsi security update
CentOS Errata and Security Advisory CESA-2007:0497 Updated iscsi-initiator-utils packages that fix a security flaw in open-iscsi are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The iscsi package...
dos flaws in open-iscsi (CVE-2007-3100)
usr/mgmtipc.c in iscsid in open-iscsi iscsi-initiator-utils before 2.0-865 checks the client's UID on the listening AFLOCAL socket instead of the new connection, which allows remote attackers to access the management interface and cause a denial of service iscsid exit or iSCSI connection loss...
Moderate: Red Hat Security Advisory: iscsi-initiator-utils security update
Updated iscsi-initiator-utils packages that fix a security flaw in open-iscsi are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The iscsi package provides the server daemon for the iSCSI protocol,...
dos flaws in open-iscsi (CVE-2007-3100)
usr/log.c in iscsid in open-iscsi iscsi-initiator-utils before 2.0-865 uses a semaphore with insecure permissions world-writable/world-readable for managing log messages using shared memory, which allows local users to cause a denial of service hang by grabbing the semaphore...
Fedora Core 6 : iscsi-initiator-utils-6.2.0.865-0.0.fc6 (2007-590)
This update to iscsi-initiator-utils is a rebase to the upstream open-iscsi-2.0-865 release. This release includes two security fixes, which are described here, https://bugzilla.redhat.com/bugzilla/showbug.cgi?id=243719 bug fixes and new features. The tools in this release use a different db...
Fedora Core 5 : iscsi-initiator-utils-5.2.0.865-0.0.fc5 (2007-589)
This update to iscsi-initiator-utils is a rebase to the upstream open-iscsi-2.0-865 release. This release includes two security fixes which are described here https://bugzilla.redhat.com/bugzilla/showbug.cgi?id=243719 bug fixes and new features. The tools in this release use a different db format...
RHEL 5 : iscsi-initiator-utils (RHSA-2007:0497)
Updated iscsi-initiator-utils packages that fix a security flaw in open-iscsi are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The iscsi package provides the server daemon for the iSCSI protocol,...
[SECURITY] Fedora Core 6 Update: iscsi-initiator-utils-6.2.0.865-0.0.fc6
The iscsi package provides the server daemon for the iSCSI protocol, as well as the utility programs used to manage it. iSCSI is a protocol for distributed disk access using SCSI commands sent over Internet Protocol networks...
[SECURITY] Fedora Core 5 Update: iscsi-initiator-utils-5.2.0.865-0.0.fc5
The iscsi package provides the server daemon for the iSCSI protocol, as well as the utility programs used to manage it. iSCSI is a protocol for distributed disk access using SCSI commands sent over Internet Protocol networks...
CVE-2005-3327
Network Appliance Data ONTAP 7.0 and earlier allows iSCSI Initiators to bypass iSCSI authentication via a modified client that skips the Security Start mode, as required by the Login Negotiation protocol, and uses Operational mode without proving identity...
CVE-2005-3327
CVE-2005-3327 affects Network Appliance Data ONTAP 7.0 and earlier. A modified iSCSI client can bypass authentication by skipping the Security (Start) mode required by the Login Negotiation protocol and operating in Operational mode without proving identity, exposing partial confidentiality, inte...
CVE-2005-3327
Network Appliance Data ONTAP 7.0 and earlier allows iSCSI Initiators to bypass iSCSI authentication via a modified client that skips the Security Start mode, as required by the Login Negotiation protocol, and uses Operational mode without proving identity...
