SuSE 10 Security Update : iscsitarget (ZYPP Patch Number 7109)

This update of iscscitarget/tgt fixes multiple overflows and a format string vulnerability : - CVE-2010-2221: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Buffer Errors CWE-119 - CVE-2010-0743: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Format String Vulnerability...

iSCSI target Multiple Implementations iSNS Stack Buffer Overflow (CVE-2010-2221)

A stack buffer overflow vulnerability has been reported in iscsitarget, an open implementation of iSCSI Enterprise Target. The vulnerability is caused by missing boundary checks when handling SCN messages. Remote attacker can exploit this vulnerability by sending a malicious message to an iSCSI...

openSUSE Security Update : iscsitarget (openSUSE-SU-2010:0604-1)

This update of iscscitarget/tgt fixes multiple overflows and a format string vulnerability : - CVE-2010-2221: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Buffer Errors CWE-119 - CVE-2010-0743: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Format String Vulnerability...

openSUSE Security Update : iscsitarget (openSUSE-SU-2010:0604-1)

This update of iscscitarget/tgt fixes multiple overflows and a format string vulnerability : - CVE-2010-2221: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Buffer Errors CWE-119 - CVE-2010-0743: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Format String Vulnerability...

Mandriva Update for iscsitarget MDVSA-2010:131 (iscsitarget)

Check for the Version of iscsitarget OpenVAS Vulnerability Test Mandriva Update for iscsitarget MDVSA-2010:131 iscsitarget Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for iscsitarget MDVSA-2010:131 (iscsitarget)

Check for the Version of iscsitarget OpenVAS Vulnerability Test Mandriva Update for iscsitarget MDVSA-2010:131 iscsitarget Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CVE-2010-2221

CVE-2010-2221 covers multiple buffer overflow flaws in the iSNS stack used by isns.c across three target stacks: Linux SCSI target framework (tgt/scsi-target-utils) <1.0.6, iSCSI Enterprise Target (iscsitarget) <=1.4.20.1, and SCST (iscsi-scst)

Debian: Security Advisory (DSA-2042-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2042-1 (iscsitarget)

The remote host is missing an update to iscsitarget announced via advisory DSA 2042-1. OpenVAS Vulnerability Test $Id: deb20421.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2042-1 iscsitarget Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

[SECURITY] [DSA 2042-1] New iscsitarget packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------------- Debian Security Advisory DSA-2042-1 [email protected] http://www.debian.org/security/ Luciano Bello May 5th, 2010 http://www.debian.org/security/faq -...

Debian DSA-2042-1 : iscsitarget - format string

Florent Daigniere discovered multiple format string vulnerabilities in Linux SCSI target framework which is known as iscsitarget under Debian allow remote attackers to cause a denial of service in the ietd daemon. The flaw could be trigger by sending a carefully-crafted Internet Storage Name...

[SECURITY] [DSA 2042-1] New iscsitarget packages fix arbitrary code execution

--------------------------------------------------------------------------- Debian Security Advisory DSA-2042-1 [email protected] http://www.debian.org/security/ Luciano Bello May 5th, 2010 http://www.debian.org/security/faq -...

DSA-2042-1 iscsitarget - arbitrary code execution

Bulletin has no description...

CVE-2010-0743

CVE-2010-0743 affects scsi-target-utils (tgt) and iSCSI Enterprise Target (iscsitarget) via a format-string vulnerability in isns.c that can trigger a denial of service (tgtd daemon crash) or other impact. Vulnerable versions include tgt 1.0.3, 0.9.5 and earlier, and iscsitarget 0.4.16. The issue...

DTSA-106-1 iscsitarget - information disclosure

Bulletin has no description...

CVE-2007-5827

CVE-2007-5827 affects iscsitarget (iSCSI Enterprise Target) version 0.4.15, where /etc/ietd.conf is created with weak permissions. This allows local users to read passwords stored in that file, resulting in potential credential exposure. The underlying issue is improper access permissions on a cr...

CVE-2007-5827

iSCSI Enterprise Target iscsitarget 0.4.15 uses weak permissions for /etc/ietd.conf, which allows local users to obtain passwords...

PT-2010-5656 · Linux +1 · Iscsitarget +1

Name of the Vulnerable Software and Affected Versions: iscsitarget versions prior to 1.4.19 iscsitarget versions 0.4.16 and earlier Linux SCSI target framework versions 1.0.3, 0.9.5, and earlier Description: The issue involves multiple vulnerabilities in the iscsitarget package that can lead to a...

PT-2009-6753 · Opensuse +2 · Pcfclock-Kmp-Trace +18

Name of the Vulnerable Software and Affected Versions: dazuko-kmp-debug affected versions not specified kvm-kmp-trace affected versions not specified aufs-kmp-debug affected versions not specified ofed-kmp-debug affected versions not specified kqemu-kmp-debug affected versions not specified...