openssh, pam_ssh_agent_auth security update

CentOS Errata and Security Advisory CESA-2013:1591 Updated openssh packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common...

ESA-2013-047: RSA® Authentication Agent for PAM Unlimited Login Attempts Vulnerability

ESA-2013-047.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-047: RSA® Authentication Agent for PAM Unlimited Login Attempts Vulnerability EMC Identifier: ESA-2013-047 CVE Identifier: CVE-2013-3271 Severity Rating: CVSS v2 Base Score: 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P Affected Products: R...

RSA Authentication Agent for PAM protection bypass

Login attepts are not limited...

HylaFAX+ 5.2.4 5.5.3 - Buffer Overflow

HylaFAX+ 5.2.4 5.5.3 - Buffer Overflow Details =========================================================== Application: "HylaFAX+" Version: 5.2.4 April, 2008 through 5.5.3 August 6, 2013 Type: Daemon that manages a fax server via an FTP-like protocol. Vendor / Maintainer: Lee Howard faxguy at...

HylaFAX+ 5.2.4 > 5.5.3 - Buffer Overflow

Details =========================================================== Application: "HylaFAX+" Version: 5.2.4 April, 2008 through 5.5.3 August 6, 2013 Type: Daemon that manages a fax server via an FTP-like protocol. Vendor / Maintainer: Lee Howard faxguy at howardsilvan.com Project Homepage:...

RHEL 5 : sssd (RHSA-2013:1319)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:1319 advisory. SSSD System Security Services Daemon provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides NSS...

[SECURITY] Fedora 20 Update: lightdm-1.7.15-1.fc20

LightDM is an X display manager that: Has a lightweight codebase Is standards compliant PAM, ConsoleKit, etc Has a well defined interface between the server and user interface Fully themeable easiest with the webkit interface Cross-desktop greeters can be written in any toolkit...

Amazon Linux AMI : pam (ALAS-2013-160)

A stack-based buffer overflow flaw was found in the way the pamenv module parsed users' '/.pamenvironment' files. If an application's PAM configuration contained 'userreadenv=1' this is not the default, a local attacker could use this flaw to crash the application or, possibly, escalate their...

CVE-2013-3271

EMC RSA Authentication Agent for PAM 7.0 before 7.0.2.1 enforces the maximum number of login attempts within the PAM-enabled application codebase, instead of within the Agent codebase, which makes it easier for remote attackers to discover correct login credentials via a brute-force attack...

CVE-2013-3271

CVE-2013-3271 affects EMC RSA Authentication Agent for PAM 7.0 and earlier (up to 7.0.2.0) where login-attempt limiting is implemented in the PAM-enabled application code rather than in the RSA Agent itself. This design allows brute-force attempts against login credentials. The issue is documente...

CVE-2013-3271

EMC RSA Authentication Agent for PAM 7.0 before 7.0.2.1 enforces the maximum number of login attempts within the PAM-enabled application codebase, instead of within the Agent codebase, which makes it easier for remote attackers to discover correct login credentials via a brute-force attack...

CVE-2013-3813

Unspecified vulnerability in Oracle Solaris 10 allows remote attackers to affect confidentiality and integrity via vectors related to Libraries/PAM-Unix...

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 10 allows remote attackers to affect confidentiality and integrity via vectors related to Libraries/PAM-Unix...

CVE-2013-3813

Unspecified vulnerability in Oracle Solaris 10 allows remote attackers to affect confidentiality and integrity via vectors related to Libraries/PAM-Unix...

CVE-2013-3813

CVE-2013-3813 is a Solaris 10 vulnerability in the Libraries/PAM-Unix subsystem that can enable remote, unauthenticated network access via NFSv2. Affected is Solaris 10 (both x86 and SPARC) with the Libraries/PAM-Unix component; exploitation could allow unauthorized updates/inserts/deletes and re...

Solaris 10 (sparc) : 148693-01 (deprecated)

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Libraries/PAM-Unix. The supported version that is affected is 10. Difficult to exploit vulnerability allows successful unauthenticated network attacks via NFSv2. Successful attack of this vulnerability c...

Solaris 10 (x86) : 148694-01 (deprecated)

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Libraries/PAM-Unix. The supported version that is affected is 10. Difficult to exploit vulnerability allows successful unauthenticated network attacks via NFSv2. Successful attack of this vulnerability c...

Oracle Linux 3 : vsftpd (ELSA-2008-0579)

From Red Hat Security Advisory 2008:0579 : An updated vsftpd package that fixes a security issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. vsftpd Very Secure File Transfer Protocol FTP daemon is a secure FTP server for...

Oracle Linux 5 : tog-pegasus (ELSA-2008-1001)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-1001 advisory. 2.7.0-2.0.1.el52.1 - Added pegasus-enterprise.patch to allow detection of enterprise-release 2.7.0-2.el52.1 - Fix local-or-remote-auth patch and enhanc...

Oracle Linux 5 : pam (ELSA-2010-0819)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0819 advisory. - fix insecure dropping of priviledges in pamxauth and pammail - CVE-2010-3316 637898, CVE-2010-3435 641335 Tenable has extracted the preceding...