Scientific Linux Security Update : httpd on SL4.x i386/x86_64

A flaw was found in the Apache HTTP Server modproxy module. On sites where a reverse proxy is configured, a remote attacker could send a carefully crafted request that would cause the Apache child process handling that request to crash. On sites where a forward proxy is configured, an attacker...

Scientific Linux Security Update : httpd on SL5.x

Problem description : A flaw was found in the Apache HTTP Server modproxy module. On sites where a reverse proxy is configured, a remote attacker could send a carefully crafted request that would cause the Apache child process handling that request to crash. On sites where a forward proxy is...

Scientific Linux Security Update : cups on SL5.x i386/x86_64

A flaw was found in the way CUPS handles certain Internet Printing Protocol IPP tags. A remote attacker who is able to connect to the IPP TCP port could send a malicious request causing the CUPS daemon to crash, or potentially execute arbitrary code. Please note that the default CUPS configuratio...

Scientific Linux Security Update : logrotate on SL6.x i386/x86_64

A shell command injection flaw was found in the way logrotate handled the shred directive. A specially crafted log file could cause logrotate to execute arbitrary commands with the privileges of the user running logrotate root, by default. Note: The shred directive is not enabled by default...

GLSA-201206-36 : logrotate: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201206-36 logrotate: Multiple vulnerabilities Multiple vulnerabilities have been discovered in logrotate. Please review the CVE identifiers referenced below for details. Impact : A local attacker could use this flaw to truncate...

logrotate: Multiple vulnerabilities

Background logrotate rotates, compresses, and mails system logs. Description Multiple vulnerabilities have been discovered in logrotate. Please review the CVE identifiers referenced below for details. Impact A local attacker could use this flaw to truncate arbitrary system file, to change file...

SuSE 10 Security Update : quagga (ZYPP Patch Number 8108)

This update of quagga fixes multiple security flaws that could have caused a Denial of Service via specially crafted packets. CVE-2012-1820 / CVE-2012-0249 / CVE-2012-0250 / CVE-2012-0255 Additionally, issues with service owned directories in combination with logrotate were fixed. %NASLMINLEVEL...

RedHat Update for logrotate RHSA-2011:0407-01

Check for the Version of logrotate OpenVAS Vulnerability Test RedHat Update for logrotate RHSA-2011:0407-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

RedHat Update for logrotate RHSA-2011:0407-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 16 : mysql-5.5.20-1.fc16 (2012-0972)

Update to MySQL 5.5.20, for various fixes described at http://dev.mysql.com/doc/refman/5.5/en/news-5-5-20.html as well as security fixes described at http://www.oracle.com/technetwork/topics/security/cpujan 2012-366304.html - Re-include the mysqld logrotate script, now that it's not so bogus Note...

SuSE 10 Security Update : logrotate (ZYPP Patch Number 7533)

This update for logrotate provides the following fixes : - Race condition in the createOutputFile function in logrotate allows local users to read log data by opening a file before the intended permissions are in place. bnc677336 / CVE-2011-1098 - The writeState function in logrotate might allow...

logrotate multiple security vulnerabilities

Race conditions, unfiltered shell characters vulnerability, DoS...

[USN-1172-1] logrotate vulnerabilities

========================================================================== Ubuntu Security Notice USN-1172-1 July 21, 2011 logrotate vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu Update for logrotate USN-1172-1

Ubuntu Update for Linux kernel vulnerabilities USN-1172-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11721.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for logrotate USN-1172-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net Th...

Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 : logrotate vulnerabilities (USN-1172-1)

It was discovered that logrotate incorrectly handled the creation of new log files. Local users could possibly read log files if they were opened before permissions were in place. This issue only affected Ubuntu 8.04 LTS. CVE-2011-1098 It was discovered that logrotate incorrectly handled certain...

Ubuntu: Security Advisory (USN-1172-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1172-1: logrotate vulnerabilities

It was discovered that logrotate incorrectly handled the creation of new log files. Local users could possibly read log files if they were opened before permissions were in place. This issue only affected Ubuntu 8.04 LTS. CVE-2011-1098 It was discovered that logrotate incorrectly handled certain...

SuSE 11.1 Security Update : logrotate (SAT Patch Number 4583)

This update for logrotate provides the following fixes : - The shredfile function in logrotate might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostna...

SuSE 10 Security Update : logrotate (ZYPP Patch Number 7534)

This update for logrotate provides the following fixes : - Race condition in the createOutputFile function in logrotate allows local users to read log data by opening a file before the intended permissions are in place CVE-2011-1098. bnc677336 - The writeState function in logrotate might allow...

Fedora Update for logrotate FEDORA-2011-3739

Check for the Version of logrotate OpenVAS Vulnerability Test Fedora Update for logrotate FEDORA-2011-3739 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...