263 matches found
util-linux: mount fails to anticipate RLIMIT_FSIZE
mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMITFSIZE value, a related issue to CVE-2011-1089...
Low: Red Hat Security Advisory: nfs-utils security, bug fix, and enhancement update
An updated nfs-utils package that fixes one security issue, various bugs, and adds one enhancement is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which...
nfs-utils: mount.nfs fails to anticipate RLIMIT_FSIZE
The nfsaddmntent function in support/nfs/nfsmntent.c in the mount.nsf tool in nfs-utils before 1.2.4 attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to corrupt this file via a process with a small RLIMITFSIZE value,...
RedHat Update for nfs-utils RHSA-2012:0310-03
Check for the Version of nfs-utils OpenVAS Vulnerability Test RedHat Update for nfs-utils RHSA-2012:0310-03 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
RedHat Update for glibc RHSA-2012:0126-01
Check for the Version of glibc OpenVAS Vulnerability Test RedHat Update for glibc RHSA-2012:0126-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...
RedHat Update for util-linux RHSA-2012:0307-03
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
RedHat Update for glibc RHSA-2012:0126-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
glibc: Suid mount helpers fail to anticipate RLIMIT_FSIZE
The addmntent function in the GNU C Library aka glibc or libc6 2.13 and earlier does not report an error status for failed attempts to write to the /etc/mtab file, which makes it easier for local users to trigger corruption of this file, as demonstrated by writes from a process with a small...
glibc: Suid mount helpers fail to anticipate RLIMIT_FSIZE
The addmntent function in the GNU C Library aka glibc or libc6 2.13 and earlier does not report an error status for failed attempts to write to the /etc/mtab file, which makes it easier for local users to trigger corruption of this file, as demonstrated by writes from a process with a small...
Debian Security Advisory DSA 2382-1 (ecryptfs-utils)
The remote host is missing an update to ecryptfs-utils announced via advisory DSA 2382-1. OpenVAS Vulnerability Test $Id: deb23821.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2382-1 ecryptfs-utils Authors: Thomas Reinke Copyright: Copyright c 2012 E-Sof...
Debian DSA-2382-1 : ecryptfs-utils - multiple vulnerabilities
Several problems have been discovered in eCryptfs, a cryptographic filesystem for Linux. - CVE-2011-1831 Vasiliy Kulikov of Openwall and Dan Rosenberg discovered that eCryptfs incorrectly validated permissions on the requested mountpoint. A local attacker could use this flaw to mount to arbitrary...
[SECURITY] [DSA 2382-1] ecryptfs-utils security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2382-1 [email protected] http://www.debian.org/security/ Jonathan Wiltshire January 07, 2012 http://www.debian.org/security/faq -...
Mandriva Update for nfs-utils MDVSA-2011:186 (nfs-utils)
Check for the Version of nfs-utils OpenVAS Vulnerability Test Mandriva Update for nfs-utils MDVSA-2011:186 nfs-utils Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...
Mandriva Update for nfs-utils MDVSA-2011:186 (nfs-utils)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
nfs-utils security, bug fix, and enhancement update
1.2.3-15 - mout.nfs: Don't roll back to IPv4 whe IPv6 fails bz 744657 - rpcdebug: Added pNFS and FSCache debugging bz 747400 1.2.3-14 - mount.nfs: Backported how upstream handles the SIGXFSZ signal bz 697981 1.2.3-13 - mount.nfs: Reworked the code that deals with RLIMITFSIZE bz 697981 1.2.3-12 -...
util-linux-ng security, bug fix, and enhancement update
2.17.2-12.4 - fix CVE-2011-1675 - mount fails to anticipate RLIMITFSIZE - fix CVE-2011-1677 - umount may fail to remove /etc/mtab lock file 2.17.2-12.3 - fix fatal typos in patch for 723546 2.17.2-12.2 - rename /etc/hushlogin to /etc/hushlogins 696731 2.17.2-12.1 - fix 723546 - Defects revealed b...
SuSE 10 Security Update : ncpfs (ZYPP Patch Number 7711)
Following issues are fixed by this update : - The ncpfs mount and umount programs were affected by the /etc/mtab truncation problems on RLIMITFSIZE. CVE-2011-1679 - on errors, the mtab lock was not removed, blocking other applications from modifying /etc/mtab. CVE-2011-1680 - we now keep the...
SuSE 11.1 Security Update : glibc (SAT Patch Number 2700)
This update of glibc fixes the following bugs and security issues : - The implementation of initgroups of the nsscompat module omits all NIS groups at the second invocation within the same process, and also uses a needlessly inefficient method to determine the NIS groups. - An integer overflow th...
Low: Red Hat Security Advisory: nfs-utils security, bug fix, and enhancement update
Updated nfs-utils packages that fix two security issues, various bugs, and add one enhancement are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give...
nfs-utils: mount.nfs fails to anticipate RLIMIT_FSIZE
The nfsaddmntent function in support/nfs/nfsmntent.c in the mount.nsf tool in nfs-utils before 1.2.4 attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to corrupt this file via a process with a small RLIMITFSIZE value,...