273 matches found
CVE-2010-0015: Undefined Security Weakness
nis/nssnis/nis-pwd.c in the GNU C Library aka glibc or libc6 2.7 and Embedded GLIBC EGLIBC 2.10.2 adds information from the passwd.adjunct.byname map to entries in the passwd map, which allows remote attackers to obtain the encrypted passwords of NIS accounts by calling the getpwnam function...
Debian Security Advisory DSA 282-1 (glibc)
The remote host is missing an update to glibc announced via advisory DSA 282-1. OpenVAS Vulnerability Test $Id: deb2821.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 282-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 149-2 (glibc)
The remote host is missing an update to glibc announced via advisory DSA 149-2. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 149-1 (glibc)
The remote host is missing an update to glibc announced via advisory DSA 149-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Ubuntu 4.10 : Standard C library script vulnerabilities (USN-4-1)
Recently, Trustix Secure Linux discovered some vulnerabilities in the libc6 package. The utilities 'catchsegv' and 'glibcbug' created temporary files in an insecure way, which allowed a symlink attack to create or overwrite arbitrary files with the privileges of the user invoking the program. Not...
Debian DSA-636-1 : glibc - insecure temporary files
Several insecure uses of temporary files have been discovered in support scripts in the libc6 package which provides the c library for a GNU/Linux system. Trustix developers found that the catchsegv script uses temporary files insecurely. Openwall developers discovered insecure temporary files in...
[SECURITY] [DSA 636-1] New libc6 packages fix insecure temporary files
-------------------------------------------------------------------------- Debian Security Advisory DSA 636-1 [email protected] http://www.debian.org/security/ Martin Schulze January 12th, 2005 http://www.debian.org/security/faq -...
DSA-636-1 glibc - insecure temporary files
Bulletin has no description...
USN-4-1: Standard C library script vulnerabilities
Recently, Trustix Secure Linux discovered some vulnerabilities in the libc6 package. The utilities "catchsegv" and "glibcbug" created temporary files in an insecure way, which allowed a symlink attack to create or overwrite arbitrary files with the privileges of the user invoking the program...
Debian DSA-282-1 : glibc - integer overflow
eEye Digital Security discovered an integer overflow in the xdrmemgetbytes function which is also present in GNU libc. This function is part of the XDR external data representation encoder/decoder derived from Sun's RPC implementation. Depending upon the application, this vulnerability can cause...
Debian DSA-149-1 : glibc - integer overflow
An integer overflow bug has been discovered in the RPC library used by GNU libc, which is derived from the SunRPC library. This bug could be exploited to gain unauthorized root access to software linking to this code. The packages below also fix integer overflows in the malloc code. They also...
DSA-149 glibc - integer overflow
Bulletin has no description...
PT-2008-6879 · Gnu +1 · Libc6 +2
Name of the Vulnerable Software and Affected Versions: glibc versions prior to 2.11.2 libc6 versions prior to 2.11.2 libc6-dev versions prior to 2.11.2 glibc-2.3.4 glibc-profile-2.3.4 glibc-headers-2.3.4 glibc-utils-2.3.4 glibc-common-2.3.4 glibc-devel-2.3.4 glibc-debuginfo glibc-profile-64bit...