598 matches found
[SECURITY] Fedora 19 Update: zeroinstall-injector-2.3-1.fc19
The Zero Install Injector makes it easy for users to install software without needing root privileges. It takes the URL of a program and runs it downloading it first if necessary. Any dependencies of the program are fetched in the same way. The user controls which version of the program and its...
[SECURITY] Fedora 17 Update: zeroinstall-injector-2.3-1.fc17
The Zero Install Injector makes it easy for users to install software without needing root privileges. It takes the URL of a program and runs it downloading it first if necessary. Any dependencies of the program are fetched in the same way. The user controls which version of the program and its...
[SECURITY] Fedora 18 Update: zeroinstall-injector-2.3-1.fc18
The Zero Install Injector makes it easy for users to install software without needing root privileges. It takes the URL of a program and runs it downloading it first if necessary. Any dependencies of the program are fetched in the same way. The user controls which version of the program and its...
AIX 6.1 TL 7 : tftp (IV42932)
A non-root user can read and overwrite files owned by others including root via tftp client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory tftpadvisory.asc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
AIX 6.1 TL 8 : tftp (IV42933)
A non-root user can read and overwrite files owned by others including root via tftp client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory tftpadvisory.asc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
AIX 7.1 TL 0 : tftp (IV42934)
A non-root user can read and overwrite files owned by others including root via tftp client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory tftpadvisory.asc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
tftp Security Vulnerability
IBM SECURITY ADVISORY First Issued: Wed Jul 3 09:33:57 CDT 2013 | Updated: Mon Oct 14 20:17:56 CDT 2013 | Update: Fixed vulnerable fileset levels | Update: More workarounds and CVSS Vector | Update: Includes VIOS in the vulnerability summary | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1...
AIX 7.1 : bos.mp64 (U854839)
The remote host is missing AIX PTF U854839, which is related to the security of the package bos.mp64. The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under...
AIX 7.1 TL 1 : bos.mp64 (U854884)
The remote host is missing AIX PTF U854884, which is related to the security of the package bos.mp64. The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under...
AIX 6.1 TL 7 : bos.mp64 (U854618)
The remote host is missing AIX PTF U854618, which is related to the security of the package bos.mp64. The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under...
AIX 6.1 TL 6 : bos.mp64 (U854751)
The remote host is missing AIX PTF U854751, which is related to the security of the package bos.mp64. The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under...
qpid-cpp: qpid authentication bypass
It was found that the Apache Qpid daemon qpidd treated AMQP connections with the federationtag attribute set as a broker-to-broker connection, rather than a client-to-server connection. This resulted in the source user ID of messages not being checked. A client that can establish an AMQP connecti...
AIX 6.1 TL 8 : ftp (IV28651)
The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under /etc/security, but can read files like /etc/rc.wpars under ftp. %NASLMINLEVEL 70300 C Tenable Network...
AIX 6.1 TL 7 : ftp (IV23331)
The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under /etc/security, but can read files like /etc/rc.wpars under ftp. %NASLMINLEVEL 70300 C Tenable Network...
AIX 7.1 TL 0 : ftp (IV28785)
The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under /etc/security, but can read files like /etc/rc.wpars under ftp. %NASLMINLEVEL 70300 C Tenable Network...
AIX 6.1 TL 6 : ftp (IV28715)
The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under /etc/security, but can read files like /etc/rc.wpars under ftp. %NASLMINLEVEL 70300 C Tenable Network...
AIX ftp vulnerability
IBM SECURITY ADVISORY First Issued: Thu Oct 18 09:50:27 CDT 2012 The most recent version of this document is available here: | Updated: Fri Feb 8 11:58:57 CDT 2013 | Update: Updated Sections I and V: Description and Workaround | Update: New ifixes for latest SP's | Updated: Thu Dec 12 12:55:11 CS...
CVE-2012-4442
Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the root account during operations with a non-root effective UID, which might allow local users to bypass intended file-read restrictions by leveraging a race condition in a file-permission check...
Scientific Linux Security Update : fence on SL4.x i386/x86_64
Insecure temporary file use flaws were found in fenceegenera, fenceapc, and fenceapcsnmp. A local attacker could use these flaws to overwrite an arbitrary file writable by the victim running those utilities via a symbolic link attack. CVE-2008-4192, CVE-2008-4579 This update also fixes the...
RedHat Update for virt-v2v RHSA-2011:1615-03
Check for the Version of virt-v2v OpenVAS Vulnerability Test RedHat Update for virt-v2v RHSA-2011:1615-03 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...