29 matches found
CVE-2019-15522
An issue was discovered in LINBIT csync2 through 2.0. csyncdaemonsession in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL...
UBUNTU-CVE-2019-15522
An issue was discovered in LINBIT csync2 through 2.0. csyncdaemonsession in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL...
Command injection
An issue was discovered in LINBIT csync2 through 2.0. csyncdaemonsession in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL...
CVE-2019-15522
An issue was discovered in LINBIT csync2 through 2.0. csyncdaemonsession in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL...
CVE-2019-15522
An issue was discovered in LINBIT csync2 through 2.0. csyncdaemonsession in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL...
CVE-2019-15522
CVE-2019-15522 affects LINBIT csync2 up to 2.0. The issue: in csync_daemon_session (daemon.c) the daemon does not enforce TLS when SSL is required, allowing hello commands to succeed despite TLS requirements. Documented fixes across multiple vendors/distributions (SUSE/OpenSUSE OSV entries and SU...
CVE-2019-15522
An issue was discovered in LINBIT csync2 through 2.0. csyncdaemonsession in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL...
PT-2020-9705 · Linbit +2 · Csync2 +2
Name of the Vulnerable Software and Affected Versions: LINBIT csync2 versions through 2.0 Description: An issue was discovered in LINBIT csync2 where the csync daemon session in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL. Recommendations: Fo...
LinBit Technologies LINBOX Officeserver Remote Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10010/info It has been reported that LINBOX is prone to a remote authentication bypass vulnerability. This issue is due to a design error that would allow access to web based administration scripts without proper...