281 matches found
GLSA-201603-02 : OSC: Shell command injection
The remote host is affected by the vulnerability described in GLSA-201603-02 OSC: Shell command injection A vulnerability has been discovered that may allow remote attackers to execute arbitrary commands via shell metacharacters in a service file. Impact : A remote attacker could possibly execute...
Gentoo Security Advisory GLSA 201406-18
Gentoo Linux Local Security Checks GLSA 201406-18 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
SUSE-SU-2015:1361-1 Security update for osc
This update provides osc 0.152.0 with various fixes and improvements. This security issue was fixed: - CVE-2015-0778: Shell command injection via crafted service files. bsc901643 For a comprehensive list of changes, please refer to the package's change log...
Fedora Update for osc FEDORA-2015-4687
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 21 : osc-0.151.1-163.2.1.fc21 (2015-4482)
Security fix for CVE-2015-0778 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
Fedora 20 : osc-0.151.1-163.2.1.fc20 (2015-4549)
Security fix for CVE-2015-0778 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
Fedora Update for osc FEDORA-2015-4549
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for osc FEDORA-2015-4482
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 21 Update: osc-0.151.1-163.2.1.fc21
Commandline client for the openSUSE Build Service. See http://en.opensuse.org/openSUSE:OSC , as well as http://en.opensuse.org/openSUSE:BuildServiceTutorial for a general introduction...
[SECURITY] Fedora 20 Update: osc-0.151.1-163.2.1.fc20
Commandline client for the openSUSE Build Service. See http://en.opensuse.org/openSUSE:OSC , as well as http://en.opensuse.org/openSUSE:BuildServiceTutorial for a general introduction...
Fedora 22 : osc-0.151.1-163.2.1.fc22 (2015-4687)
Security fix for CVE-2015-0778 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
FreeBSD : osc -- shell command injection via crafted _service files (f450587b-d7bd-11e4-b5a4-14dae9d5a9d2)
SUSE Security Update reports : osc before 0.151.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a service file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML...
[SECURITY] Fedora 22 Update: osc-0.151.1-163.2.1.fc22
Commandline client for the openSUSE Build Service. See http://en.opensuse.org/openSUSE:OSC , as well as http://en.opensuse.org/openSUSE:BuildServiceTutorial for a general introduction...
CVE-2015-0778
osc before 0.151.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a service file...
Code injection
osc before 0.151.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a service file...
CVE-2015-0778
osc before 0.151.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a service file...
CVE-2015-0778
osc before 0.151.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a service file...
CVE-2015-0778
osc before 0.151.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a service file...
CVE-2015-0778
The CVE-2015-0778 entry corresponds to OSC tooling (osc before 0.151.0) vulnerable to shell metacharacters in a _service file, allowing remote command execution with the process’ privileges. Public advisories (Gentoo GLSA-201603-02; Fedora advisories 2015-4482/4549/4687; Fedora 22/21/20 mentions)...
