AIX 7.1 TL 0 : tftp (IV42934)

A non-root user can read and overwrite files owned by others including root via tftp client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory tftpadvisory.asc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

AIX 6.1 TL 7 : tftp (IV42932)

A non-root user can read and overwrite files owned by others including root via tftp client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory tftpadvisory.asc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

tftp Security Vulnerability

IBM SECURITY ADVISORY First Issued: Wed Jul 3 09:33:57 CDT 2013 | Updated: Mon Oct 14 20:17:56 CDT 2013 | Update: Fixed vulnerable fileset levels | Update: More workarounds and CVSS Vector | Update: Includes VIOS in the vulnerability summary | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1...

AIX 7.1 TL 1 : bos.mp64 (U854884)

The remote host is missing AIX PTF U854884, which is related to the security of the package bos.mp64. The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under...

AIX 7.1 : bos.mp64 (U854839)

The remote host is missing AIX PTF U854839, which is related to the security of the package bos.mp64. The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under...

AIX 6.1 TL 7 : bos.mp64 (U854618)

The remote host is missing AIX PTF U854618, which is related to the security of the package bos.mp64. The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under...

AIX 6.1 TL 6 : bos.mp64 (U854751)

The remote host is missing AIX PTF U854751, which is related to the security of the package bos.mp64. The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under...

qpid-cpp: qpid authentication bypass

It was found that the Apache Qpid daemon qpidd treated AMQP connections with the federationtag attribute set as a broker-to-broker connection, rather than a client-to-server connection. This resulted in the source user ID of messages not being checked. A client that can establish an AMQP connecti...

AIX 6.1 TL 8 : ftp (IV28651)

The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under /etc/security, but can read files like /etc/rc.wpars under ftp. %NASLMINLEVEL 70300 C Tenable Network...

AIX 7.1 TL 0 : ftp (IV28785)

The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under /etc/security, but can read files like /etc/rc.wpars under ftp. %NASLMINLEVEL 70300 C Tenable Network...

AIX 6.1 TL 6 : ftp (IV28715)

The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under /etc/security, but can read files like /etc/rc.wpars under ftp. %NASLMINLEVEL 70300 C Tenable Network...

AIX 6.1 TL 7 : ftp (IV23331)

The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under /etc/security, but can read files like /etc/rc.wpars under ftp. %NASLMINLEVEL 70300 C Tenable Network...

AIX ftp vulnerability

IBM SECURITY ADVISORY First Issued: Thu Oct 18 09:50:27 CDT 2012 The most recent version of this document is available here: | Updated: Fri Feb 8 11:58:57 CDT 2013 | Update: Updated Sections I and V: Description and Workaround | Update: New ifixes for latest SP's | Updated: Thu Dec 12 12:55:11 CS...

CVE-2012-4442

Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the root account during operations with a non-root effective UID, which might allow local users to bypass intended file-read restrictions by leveraging a race condition in a file-permission check...

Scientific Linux Security Update : fence on SL4.x i386/x86_64

Insecure temporary file use flaws were found in fenceegenera, fenceapc, and fenceapcsnmp. A local attacker could use these flaws to overwrite an arbitrary file writable by the victim running those utilities via a symbolic link attack. CVE-2008-4192, CVE-2008-4579 This update also fixes the...

RedHat Update for virt-v2v RHSA-2011:1615-03

Check for the Version of virt-v2v OpenVAS Vulnerability Test RedHat Update for virt-v2v RHSA-2011:1615-03 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora 16 : grub2-1.99-13.fc16.3 (2012-7579)

Don't allow non-root users to view contents of /etc/grub.d CVE-2012-2314 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

xorg-x11-server (important)

The X server had two security issues and one bug that is fixed by this update. CVE-2011-4028: It is possible for a local attacker to deduce if a file exists or not by exploiting the way that Xorg creates its lock files. CVE-2011-4029: It is possible for a non-root local user to set the read...

Apache 2.2 - Scoreboard Invalid Free On Shutdown

Source: http://www.halfdog.net/Security/2011/ApacheScoreboardInvalidFreeOnShutdown/ Introduction Apache 2.2 webservers may use a shared memory segment to share child process status information scoreboard between the child processes and the parent process running as root. A child running with lowe...

Low: Red Hat Security Advisory: virt-v2v security and bug fix update

An updated virt-v2v package that fixes one security issue and several bugs is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...