OracleVM 3.2 : openssh (OVMSA-2016-0030)

The remote OracleVM system is missing necessary patches to address critical security updates : - change default value of MaxStartups - CVE-2010-5107 John Haxby - improve RNG seeding from /dev/random 681291,708056 - make ssh1's ConnectTimeout option apply to both the TCP connection and SSH banner...

SUSE: Security Advisory for Linux (SUSE-SU-2014:0775-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Linux Security Advisory : torque (MDVSA-2015:124)

Updated torque packages fix security vulnerabilities : Chad Vizino reported that within a TORQUE Resource Manager job a non-root user could use a vulnerability in the tmadopt library call to kill processes he/she doesn't own including root-owned ones on any node in a job CVE-2014-3684. This updat...

DSA-3161-1 dbus - security update

Bulletin has no description...

[SECURITY] [DSA 3058-1] torque security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3058-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso October 27, 2014 http://www.debian.org/security/faq -...

Debian DSA-3058-1 : torque - security update

Chad Vizino reported a vulnerability in torque, a PBS-derived batch processing queueing system. A non-root user could exploit the flaw in the tmadopt library call to kill any process, including root-owned ones on any node in a job. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

[SECURITY] [DLA 78-1] torque security update

Package : torque Version : 2.4.8+dfsg-9squeeze5 CVE ID : CVE-2014-3684 Chad Vizino reported a vulnerability in torque, a PBS-derived batch processing queueing system. A non-root user could exploit the flaw in the tmadopt library call to kill any process, including root-owned ones on any node in a...

[SECURITY] [DSA 3058-1] torque security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3058-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso October 27, 2014 http://www.debian.org/security/faq -...

DSA-3058-1 torque - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3058-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2014-0408 Updated torque packages fix CVE-2014-3684

Updated torque packages fix security vulnerabilities: Chad Vizino reported that within a TORQUE Resource Manager job a non-root user could use a vulnerability in the tmadopt library call to kill processes he/she doesn't own including root-owned ones on any node in a job CVE-2014-3684. This update...

AIX 7.1 TL 2 : wparcre (IV51421)

If ftpd is run in a 5.2 or 5.3 WPAR, a non-root user who logs in via ftp is allowed to access all files within the WPAR. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory wparcreadvisory.asc. include'deprecatednasllevel.inc';...

AIX 7.1 TL 1 : wparcre (IV51420)

If ftpd is run in a 5.2 or 5.3 WPAR, a non-root user who logs in via ftp is allowed to access all files within the WPAR. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory wparcreadvisory.asc. include'deprecatednasllevel.inc';...

QNX 6.x phfont Enumeration

QNX 6.x phfont file and directory enumeration vulnerability by cenobyte 2014 - vulnerability description: QNX setuid root /usr/photon/bin/phfont allows any non-root user to enumerate files and directories as root due to PfAttachLocalDllArgv error messages. You can discover files and directories b...

Linux local MYSQL and /etc/passwd password cracker and finder

This a password finder for linux servers . this can be used if you dont have uid=0 . Also worked witch another uid like user nobody 33. This finder help you to find easy password like MYSQL and local user password from /etc/passwd . Also it work on nobody and apache users . Sometime most MYSQL...

Ubuntu Update for xorg-server USN-1990-1

Check for the Version of xorg-server OpenVAS Vulnerability Test $Id: gbubuntuUSN19901.nasl 8650 2018-02-03 12:16:59Z teissa $ Ubuntu Update for xorg-server USN-1990-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

[SECURITY] Fedora 19 Update: zeroinstall-injector-2.3-1.fc19

The Zero Install Injector makes it easy for users to install software without needing root privileges. It takes the URL of a program and runs it downloading it first if necessary. Any dependencies of the program are fetched in the same way. The user controls which version of the program and its...

[SECURITY] Fedora 17 Update: zeroinstall-injector-2.3-1.fc17

The Zero Install Injector makes it easy for users to install software without needing root privileges. It takes the URL of a program and runs it downloading it first if necessary. Any dependencies of the program are fetched in the same way. The user controls which version of the program and its...

[SECURITY] Fedora 18 Update: zeroinstall-injector-2.3-1.fc18

The Zero Install Injector makes it easy for users to install software without needing root privileges. It takes the URL of a program and runs it downloading it first if necessary. Any dependencies of the program are fetched in the same way. The user controls which version of the program and its...

AIX 6.1 TL 8 : tftp (IV42933)

A non-root user can read and overwrite files owned by others including root via tftp client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory tftpadvisory.asc. include'deprecatednasllevel.inc'; include'compat.inc'; if...