68 matches found
tomcat6 security and bug fix update
0:6.0.24-24 - Resolves: rhbz674601 - Removed wildcard in main %files that caused duplicate ownership - of log4j.properties 0:6.0.24-23 - Resolves: rhbz674601 - Reverse - tomcat user requires login shell - Reverse - rhbz 611244 tomcat-juli missing symlink - PM/QE decision to include only the...
CVE-2009-0854
CVE-2009-0854 affects dash 0.5.4 when used as a login shell, allowing local users to execute arbitrary code via a Trojan horse .profile in the current working directory. The Ubuntu advisory USN-732-1 and security data confirm the vulnerability and list fixed package versions: dash_0.5.4-8ubuntu1....
[ GLSA 200710-25 ] MLDonkey: Privilege escalation
Gentoo Linux Security Advisory GLSA 200710-25 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
Debian DSA-1177-1 : usermin - programming error
Hendrik Weimer discovered that it is possible for a normal user to disable the login shell of the root account via usermin, a web-based administration tool. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...
CVE-1999-0901
ypserv allows a local user to modify the GECOS and login shells of other users...
[SECURITY] New version of nis released
The nis package that was distributed with Debian GNU/Linux 2.1 has a couple of problems: ypserv allowed any machine in the NIS domain to insert new tables rpc.yppasswd had a bufferoverflow in its MD5 code rpc.yppasswd allowed users to change the GECOS and loginshell entries of other users This ha...
