312 matches found
CVE-2010-2020
sys/nfsclient/nfsvfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is enabled, does not validate the length of a certain fhsize parameter, which allows local users to gain privileges via a crafted mount request...
CVE-2010-2020
sys/nfsclient/nfsvfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is enabled, does not validate the length of a certain fhsize parameter, which allows local users to gain privileges via a crafted mount request...
Cross site request forgery (csrf)
sys/nfsclient/nfsvfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is enabled, does not validate the length of a certain fhsize parameter, which allows local users to gain privileges via a crafted mount request...
CVE-2010-2020
sys/nfsclient/nfsvfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is enabled, does not validate the length of a certain fhsize parameter, which allows local users to gain privileges via a crafted mount request...
FreeBSD NFS client privilege escalation
Buffer overflow and memory corruption on volume mounting...
HP-UX Update for ONCPlus HPSBUX02523
Check for the Version of ONCPlus OpenVAS Vulnerability Test HP-UX Update for ONCPlus HPSBUX02523 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
CVE-2010-2020: FreeBSD kernel NFS client local vulnerabilities
Census ID: census-2010-0001 URL: http://census-labs.com/news/2010/05/26/freebsd-kernel-nfsclient/ CVE ID: CVE-2010-2020 Affected Products: FreeBSD 8.0-RELEASE, 7.3-RELEASE, 7.2-RELEASE Class: Improper Input Validation CWE-20 Remote: No Discovered by: Patroklos Argyroudis We have discovered two...
FreeBSD -- Unvalidated input in nfsclient
Problem Description: The NFS client subsystem fails to correctly validate the length of a parameter provided by the user when a filesystem is mounted...
AIX 5.3 TL 11 : bos.net.nfs.client (U829887)
The remote host is missing AIX PTF U829887, which is related to the security of the package bos.net.nfs.client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U829887. The text itself is copyright C...
CentOS 5 : nfs-utils (CESA-2009:1321)
An updated nfs-utils package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nfs-utils package provides a daemon for the kernel NFS server and related tools. It was discovered that...
CentOS 5 : kernel (CESA-2009:1106)
Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...
CentOS 5 : kernel (CESA-2009:1455)
Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 23rd February 2010 This update adds references to two KBase articles...
openSUSE 10 Security Update : kernel (kernel-6440)
This kernel update for openSUSE 10.3 fixes some bugs and several security problems. The following security issues are fixed: CVE-2009-2692: A missing NULL pointer check in the socket sendpage function can be used by local attackers to gain root privileges. CVE-2009-2406: A kernel stack overflow...
AIX 610002 : U825621
The remote host is missing AIX PTF U825621 which is related to the security of the package bos.net.nfs.client You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
SuSE 11 Security Update : Linux kernel (SAT Patch Number 1086)
The SUSE Linux Enterprise 11 kernel was updated to fix various bugs and several security issues. It was also updated to the stable release 2.6.27.25. The following security issues were fixed : - A local denial of service problem in the splice2 system call was fixed. CVE-2009-1961 - A crash on r81...
SuSE 11 Security Update : Linux kernel (SAT Patch Number 1086)
The SUSE Linux Enterprise 11 kernel was updated to fix various bugs and several security issues. It was also updated to the stable release 2.6.27.25. The following security issues were fixed : - A local denial of service problem in the splice2 system call was fixed. CVE-2009-1961 - A crash on r81...
Low: Red Hat Security Advisory: nfs-utils security and bug fix update
An updated nfs-utils package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nfs-utils package provides a daemon for the kernel NFS server and related tools. It was discovered that...
RHEL 5 : nfs-utils (RHSA-2009:1321)
The remote Redhat Enterprise Linux 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2009:1321 advisory. The nfs-utils package provides a daemon for the kernel NFS server and related tools. It was discovered that nfs-utils did not use tcpwrappers...
SuSE Security Advisory SUSE-SA:2009:045 (kernel)
The remote host is missing updates announced in advisory SUSE-SA:2009:045. OpenVAS Vulnerability Test $Id: susesa2009045.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:045 kernel Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
SuSE Security Advisory SUSE-SA:2009:038 (kernel)
The remote host is missing updates announced in advisory SUSE-SA:2009:038. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...