3670 matches found
vixie-cron security, bug fix, and enhancement update
4:4.1-81 - 455664 adoptions of crontab orphans, forgot add buffer for list of orphans - Related: rhbz455664 4:4.1-80 - 654961 crond process ignores the changes of user's home directory needs bigger changes of code. The fix wasn't applied, detail in comment11. - Related: rhbz249512 4:4.1-79 -...
Low: Red Hat Security Advisory: vixie-cron security, bug fix, and enhancement update
An updated vixie-cron package that fixes one security issue, several bugs, and adds one enhancement is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which...
FreeBSD Security Advisory (FreeBSD-SA-11:09.pam_ssh.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-11:09.pamssh.asc ADV FreeBSD-SA-11:09.pamssh.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-11:09.pamssh.asc Authors: Thomas Reinke Copyright: Copyright c 2012...
FreeBSD Security Advisory (FreeBSD-SA-11:09.pam_ssh.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-11:09.pamssh.asc SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Debian Security Advisory DSA 2326-1 (pam)
The remote host is missing an update to pam announced via advisory DSA 2326-1. OpenVAS Vulnerability Test $Id: deb23261.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2326-1 pam Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
Debian: Security Advisory (DSA-2326-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SuSE 11.1 Security Update : glibc (SAT Patch Number 4944)
The implementation of the blowfish based password hashing method had a bug affecting passwords that contain 8bit characters e.g. umlauts. Affected passwords are potentially faster to crack via brute-force methods. CVE-2011-2483 SUSE's crypt implementation supports the blowfish password hashing...
SuSE 11.1 Security Update : glibc (SAT Patch Number 4944) (deprecated)
The implementation of the blowfish based password hashing method had a bug affecting passwords that contain 8bit characters e.g. umlauts. Affected passwords are potentially faster to crack via brute-force methods. CVE-2011-2483 SUSE's crypt implementation supports the blowfish password hashing...
CVE-2011-5054
kcheckpass passes a user-supplied argument to the pamstart function, often within a setuid environment, which allows local users to invoke any configured PAM stack, and possibly trigger unintended side effects, via an arbitrary valid PAM service name, a different vulnerability than CVE-2011-4122...
Design/Logic Flaw
kcheckpass passes a user-supplied argument to the pamstart function, often within a setuid environment, which allows local users to invoke any configured PAM stack, and possibly trigger unintended side effects, via an arbitrary valid PAM service name, a different vulnerability than CVE-2011-4122...
CVE-2011-5054
kcheckpass passes a user-supplied argument to the pamstart function, often within a setuid environment, which allows local users to invoke any configured PAM stack, and possibly trigger unintended side effects, via an arbitrary valid PAM service name, a different vulnerability than CVE-2011-4122...
CVE-2011-5054
Technical details for CVE-2011-5054 are not publicly available in the provided connected documents. Monitor for updates. The description here reiterates a PAM-related issue involving kcheckpass but no further specifics are included.
FreeBSD Security Advisory FreeBSD-SA-11:10.pam
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-11:10.pam Security Advisory The FreeBSD Project Topic: pamstart does not validate service names Category: contrib Module: pam Announced: 2011-12-23 Credits:...
FreeBSD Security Advisory FreeBSD-SA-11:09.pam_ssh
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-11:09.pamssh Security Advisory The FreeBSD Project Topic: pamssh improperly grants access when user account has unencrypted SSH private keys Category: contrib...
FreeBSD multiple security vulnerabilities
Invalid nsdispatch implementation for chroot'ed environment, multiple PAM vulnerabilities...
FreeBSD-SA-11:10.pam
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-11:10.pam Security Advisory The FreeBSD Project Topic: pamstart does not validate service names Category: contrib Module: pam Announced: 2011-12-23 Credits:...
SuSE 10 Security Update : glibc (ZYPP Patch Number 7663) (deprecated)
The implementation of the blowfish based password hashing method had a bug affecting passwords that contain 8bit characters e.g. umlauts. Affected passwords are potentially faster to crack via brute-force methods. CVE-2011-2483 SUSE's crypt implementation supports the blowfish password hashing...
SuSE 10 Security Update : pam (ZYPP Patch Number 7814)
The pamenv module is vulnerable to a stack overflow CVE-2011-3148 and a DoS condition CVE-2011-3149 when parsing users .pamenvironment files. Additionally a missing return value check inside pamxauth has been fixed. CVE-2010-3316 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...
SuSE 11.1 Security Update : pam (SAT Patch Number 5342)
The pamenv module is vulnerable to a stack overflow CVE-2011-3148 and a DoS condition CVE-2011-3149 when parsing users .pamenvironment files. Additionally a missing return value check inside pamxauth has been fixed. CVE-2010-3316 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...
