SUSE: Security Advisory (SUSE-SU-2022:4620-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2021-0342 Updated freeradius packages fix security vulnerabilities

Moved logrotate options into specific parts for each log as "global" options will persist past and clobber global options in the main logrotate config bsc1180525. Fixed plaintext password entries in logfiles bsc1184016. The freeradius package has been updated to version 3.0.22, fixing these issue...

Security update for freeradius-server (moderate)

openSUSE Security Update: Security update for freeradius-server Announcement ID: openSUSE-SU-2021:2147-1 Rating: moderate References: 1184016 Affected Products: openSUSE Leap 15.3 An update that contains security fixes can now be installed. Description: This update for freeradius-server fixes the...

The vulnerability of the /etc/passwd file in Cisco Small Business router microprogramming devices series 250, 350, 350X, and 550X allows a hacker to elevate their privileges to the root level.

The vulnerability of the /etc/passwd file in Cisco Small Business routers of the 250, 350, 350X, and 550X series is related to the presence of empty password entries for the root and user accounts. Exploiting this vulnerability allows a remote attacker to elevate their privileges to the root leve...

CVE-2017-8296

CVE-2017-8296 affects kedpm versions 0.5 and 1.0. A history file in ~/.kedpm/history is written in cleartext, exposing commands run in the password manager and the names of created/read entries. This can disclose the master password if the password command is used with an argument. The connected ...

Большая дырка в ssh (unauthorized access)

Если в файле паролей запись о пароле пользователя состоит из двух символов или менее это часто применяется для слудебных щаписей не относящихся к пользователям то ssh позволяет войти с такой записью без пароля...