28 matches found
CVE-2011-2709
libgssapi and libgssglue before 0.4 do not properly check privileges, which allows local users to load untrusted configuration files and execute arbitrary code via the GSSAPIMECHCONF environment variable, as demonstrated using mount.nfs...
Fedora 17 : libgssglue-0.4-0.fc17 (2012-7971)
Fix for CVE-2011-2709 Patch from Marcus Meissner Note: Although https://bugzilla.novell.com/showbug.cgi?id=694598 mentions mount.nfs, libgssglue is not used by mount.nfs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...
[SECURITY] Fedora 17 Update: libgssglue-0.4-0.fc17
This library exports a gssapi interface, but doesn't implement any gssapi mechanisms itself; instead it calls gssapi routines in other libraries, depending on the mechanism...
Fedora Update for libgssglue FEDORA-2012-8067
Check for the Version of libgssglue OpenVAS Vulnerability Test Fedora Update for libgssglue FEDORA-2012-8067 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
Fedora 16 : libgssglue-0.4-0.fc16 (2012-8067)
Fix for CVE-2011-2709 Patch from Marcus Meissner Note: Although https://bugzilla.novell.com/showbug.cgi?id=694598 mentions mount.nfs, libgssglue is not used by mount.nfs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...
Fedora Update for libgssglue FEDORA-2012-8067
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
nfs-utils security, bug fix, and enhancement update
1.2.3-15 - mout.nfs: Don't roll back to IPv4 whe IPv6 fails bz 744657 - rpcdebug: Added pNFS and FSCache debugging bz 747400 1.2.3-14 - mount.nfs: Backported how upstream handles the SIGXFSZ signal bz 697981 1.2.3-13 - mount.nfs: Reworked the code that deals with RLIMITFSIZE bz 697981 1.2.3-12 -...
SuSE 11.1 Security Update : libgssglue (SAT Patch Number 4620)
This update fixes insecure getenv usage in libgssglue, which could be used under some circumstances by local attackers do gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update informatio...