Lucene search
K

15 matches found

BDU FSTEC
BDU FSTEC
added 2022/02/07 12:0 a.m.4 views

The vulnerability of the do_activate() function in the mgetty package allows a hacker to execute arbitrary commands.

The vulnerability of the doactivate function in the mgetty package is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands using symbols like ||, &&, or...

7.8CVSS7.6AI score0.01323EPSS
Exploits2References10Affected Software6
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.11 views

Mageia: Security Advisory (MGASA-2018-0402)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.6AI score0.01323EPSS
Exploits6References4
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.12 views

SUSE: Security Advisory (SUSE-SU-2018:2979-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.1AI score0.01323EPSS
Exploits6References8
OpenVAS
OpenVAS
added 2020/09/29 12:0 a.m.12 views

Huawei EulerOS: Security Advisory for mgetty (EulerOS-SA-2020-2140)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.6AI score0.01323EPSS
Exploits4References2
OSV
OSV
added 2020/02/09 7:13 p.m.8 views

MGASA-2020-0076 Updated mgetty packages fix security vulnerability

Updated mgetty package fixes security vulnerability: mgetty prior to version 1.2.1 is affected by: Infinite Loop. The impact is: DoS, the program does never terminates. The component is: g3/g32pbm.c. The attack vector is: Local, the user should open a specially crafted file CVE-2019-1010189...

5.5CVSS5.5AI score0.00835EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2019/08/20 12:0 a.m.14 views

Fedora Update for mgetty FEDORA-2019-732b5488c2

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS5.8AI score0.00835EPSS
Exploits0References2
Mageia
Mageia
added 2018/10/19 6:0 p.m.35 views

Updated mgetty packages fix security vulnerabilities

Updated mgetty packages fix security vulnerabilities: The function doactivate did not properly sanitize shell metacharacters to prevent command injection CVE-2018-16741. Stack-based buffer overflow that could have been triggered via a command-line parameter CVE-2018-16742. The command-line...

7.8CVSS3.5AI score0.01323EPSS
Exploits6References2
BDU FSTEC
BDU FSTEC
added 2018/09/25 12:0 a.m.4 views

The vulnerability of the `fax_notify_mail` function in the `mgetty` package on Red Hat Enterprise Linux systems allows a hacker to cause a service failure.

The vulnerability of the faxnotifymail function in the mgetty package for Red Hat Enterprise Linux is caused by a buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to trigger a service failure using the mailto parameter...

2.9CVSS5.9AI score0.00448EPSS
Exploits2References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.5 views

Vulnerabilities of the Debian GNU/Linux operating system that allow a local malicious individual to compromise the integrity of protected information

The mgetty package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to damage to the integrity of protected information. These vulnerabilities can be exploited by local malicious individuals...

1.2CVSS5.5AI score0.00317EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.5 views

The vulnerability of the Red Hat Linux operating system allows attackers to compromise the integrity of protected information.

The vulnerability of the mgetty-1.1.25 package of the Red Hat Linux operating system can lead to a breach of protected information. Exploiting this vulnerability can be carried out locally...

1.2CVSS5.4AI score0.00317EPSS
Exploits0References2Affected Software1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.21 views

Gert Doering mgetty 1.1.19/1.1.20/1.1.21/1.22.8 Symbolic Link Traversal

No description provided by source. source: http://www.securityfocus.com/bid/1612/info A vulnerability exists in a portion of the mgetty package, by Gert Doering. By exploiting a flaw in the faxrunq and faxrunqd programs, it is possible for local users to create arbitrary files, and alter arbitrar...

7.1AI score
Exploits0
RedHat Linux
RedHat Linux
added 2003/04/08 12:16 p.m.7 views

Low: Red Hat Security Advisory: : : : Updated mgetty packages available

Updated mgetty packages are now available for Red Hat Linux 7.1, 7.2, 7.3, and 8.0. These updates close a possible buffer overflow and a permissions problem present in versions of mgetty prior to version 1.1.29. Updated 16 April 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries...

7.5CVSS6AI score0.037EPSS
Exploits0References2
Debian
Debian
added 2001/03/06 2:12 a.m.28 views

[SECURITY] [DSA 011-2] New mgetty packages for m68k and powerpc available

---------------------------------------------------------------------------- Debian Security Advisory DSA-011-2 [email protected] http://www.debian.org/security/ Martin Schulze March 6, 2001 - ---------------------------------------------------------------------------- Package : mgetty...

5.5AI score
Exploits0
CVE
CVE
added 2000/09/21 4:0 a.m.49 views

CVE-2000-0691

The CVE-2000-0691 issue affects the mgetty package’s faxrunq and faxrunqd components. A local attacker can leverage a symlink attack to create or modify arbitrary files by placing a symlink at /var/spool/fax/outgoing/.last_run that targets a chosen file. This is a local-privilege concern with par...

2.1CVSS6.7AI score0.00916EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2000/09/21 4:0 a.m.14 views

CVE-2000-0691

The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.lastrun to the target file...

6.3AI score0.00916EPSS
Exploits1References4
Rows per page
Query Builder