Mac OS X Multiple Vulnerabilities (Security Update 2004-09-07)

The remote host is missing Security Update 2004-09-07. This security update fixes the following components : - CoreFoundation - IPSec - Kerberos - libpcap - lukemftpd - NetworkConfig - OpenLDAP - OpenSSH - PPPDialer - rsync - Safari - tcpdump These applications contain multiple vulnerabilities th...

SUSE-SA:2004:029: zlib

The remote host is missing the patch for the advisory SUSE-SA:2004:029 zlib. zlib is a widely used data compression library. Programs linked against it include most desktop applications as well as servers such as Apache and OpenSSH. The 'inflate' function of zlib handles certain input data...

CVE-2001-1029

libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which allows local users to bypass the capabilities checks and read arbitrary files by specifying alternate copyright or welcome files...

CVE-2001-1029

CVE-2001-1029 : In FreeBSD 4.4 and earlier, libutil in OpenSSH does not drop privileges before verifying capabilities for reading copyright and welcome files, allowing local users to bypass capability checks and read arbitrary files by specifying alternate files. The description provides the vuln...

CVE-2001-1029: Undefined Security Weakness

libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which allows local users to bypass the capabilities checks and read arbitrary files by specifying alternate copyright or welcome files...

CVE-2004-1653

The default configuration for OpenSSH enables AllowTcpForwarding, which could allow remote authenticated users to perform a port bounce, when configured with an anonymous access program such as AnonCVS...

Portable OpenSSH < 3.7.1p2 Multiple PAM Vulnerabilities

Binary data 1996.prm...

OpenSSH < 3.7 buffer_append_space Function Overflow

Binary data 1994.prm...

OpenSSH Detection

Binary data 1997.prm...

OpenSSH < 3.2.1 AFS/Kerberos Ticket/Token Passing Overflow

Binary data 1989.prm...

OpenSSH < 3.0.1 Multiple Vulnerabilities

Binary data 1986.prm...

OpenSSH < 3.0.2 UseLogin Environment Variable Local Command Execution

Binary data 1992.prm...

OpenSSH < 2.1.1 UseLogin Local Privilege Escalation

Binary data 1991.prm...

OpenSSH < 2.9.9 Multiple Key Type ACL Bypass

Binary data 1988.prm...

OpenSSH < 3.4 Multiple Remote Overflows

Binary data 1987.prm...

Portable OpenSSH < 3.6.1p2 PAM Timing Side-Channel Weakness

Binary data 1984.prm...

OpenSSH < 2.3.2 SSHv2 Public Key Authentication Bypass

Binary data 1985.prm...

OpenSSH < 3.1 Channel Code Off by One Privilege Escalation

Binary data 1990.prm...

OpenSSH Client < 2.3.0 X11 Unauthorized Remote Forwarding

Binary data 1979.prm...

CVE-2004-0175

Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992...