Lucene search
K

2193 matches found

OpenVAS
OpenVAS
added 2012/07/30 12:0 a.m.19 views

CentOS Update for libguestfs CESA-2012:0774 centos6

Check for the Version of libguestfs OpenVAS Vulnerability Test CentOS Update for libguestfs CESA-2012:0774 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

2.1CVSS6.4AI score0.0005EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2012/07/30 12:0 a.m.19 views

CentOS Update for libguestfs CESA-2012:0774 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

2.1CVSS5.2AI score0.0005EPSS
Exploits0References2
OSV
OSV
added 2012/07/25 7:55 p.m.4 views

CVE-2012-2760

modauthopenid before 0.7 for Apache uses world-readable permissions for /tmp/modauthopenid.db, which allows local users to obtain session ids...

6AI score
Exploits0References10
OSV
OSV
added 2012/07/25 7:55 p.m.3 views

DEBIAN-CVE-2012-2760

modauthopenid before 0.7 for Apache uses world-readable permissions for /tmp/modauthopenid.db, which allows local users to obtain session ids...

2.1CVSS6.6AI score0.00371EPSS
Exploits5References1
UbuntuCve
UbuntuCve
added 2012/07/25 7:55 p.m.15 views

CVE-2012-2760

modauthopenid before 0.7 for Apache uses world-readable permissions for /tmp/modauthopenid.db, which allows local users to obtain session ids...

2.1CVSS5.9AI score0.00371EPSS
Exploits5References7
Prion
Prion
added 2012/07/25 7:55 p.m.10 views

Design/Logic Flaw

modauthopenid before 0.7 for Apache uses world-readable permissions for /tmp/modauthopenid.db, which allows local users to obtain session ids...

2.1CVSS6.6AI score0.00371EPSS
Exploits5References10Affected Software1
Debian CVE
Debian CVE
added 2012/07/25 7:0 p.m.14 views

CVE-2012-2760

modauthopenid before 0.7 for Apache uses world-readable permissions for /tmp/modauthopenid.db, which allows local users to obtain session ids...

2.1CVSS6AI score0.00371EPSS
Exploits5
CVE
CVE
added 2012/07/25 7:0 p.m.41 views

CVE-2012-2760

CVE-2012-2760 affects mod_auth_openid for Apache prior to 0.7. The vulnerability stems from the database file /tmp/mod_auth_openid.db being world-readable, enabling local users to access session IDs. Impact is local session hijacking if an attacker can read the file; exploitation details confirm ...

2.1CVSS6.2AI score0.00371EPSS
Exploits5References10Affected Software1
OSV
OSV
added 2012/07/22 4:55 p.m.0 views

UBUNTU-CVE-2012-3357

The SVN revision view lib/vclib/svn/svnrepos.py in ViewVC before 1.1.15 does not properly handle log messages when a readable path is copied from an unreadable path, which allows remote attackers to obtain sensitive information, related to a "log msg leak."...

5CVSS5.8AI score0.00705EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2012/07/11 12:0 a.m.24 views

CentOS 6 : libguestfs (CESA-2012:0774)

Updated libguestfs packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, whic...

2.1CVSS5.5AI score0.0005EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2012/07/11 12:0 a.m.34 views

FreeBSD : puppet -- multiple vulnerabilities (3a6960ef-c8a8-11e1-9924-001fd0af1a4c)

puppet -- multiple vulnerabilities Arbitrary file read on the puppet master from authenticated clients high. It is possible to construct an HTTP get request from an authenticated client with a valid certificate that will return the contents of an arbitrary file on the Puppet master that the maste...

4.3CVSS5.8AI score0.01418EPSS
Exploits4References10
Cent OS
Cent OS
added 2012/07/10 5:21 p.m.59 views

libguestfs, ocaml, perl, python, ruby security update

CentOS Errata and Security Advisory CESA-2012:0774 Updated libguestfs packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common...

2.1CVSS5.8AI score0.0005EPSS
Exploits0References7
NVD
NVD
added 2012/06/29 7:55 p.m.12 views

CVE-2012-2690

virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information...

2.1CVSS5.9AI score0.0005EPSS
Exploits0References6
OSV
OSV
added 2012/06/29 7:55 p.m.2 views

DEBIAN-CVE-2012-2690

virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information...

2.1CVSS6.5AI score0.0005EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2012/06/29 7:0 p.m.19 views

CVE-2012-2690

virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information...

2.1CVSS5.9AI score0.0005EPSS
Exploits0
OpenVAS
OpenVAS
added 2012/06/22 12:0 a.m.18 views

RedHat Update for libguestfs RHSA-2012:0774-04

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

2.1CVSS6.5AI score0.0005EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2012/06/19 3:20 p.m.2 views

libguestfs: virt-edit creates a new file, when it is used leading to loss of file attributes (permissions, owner, SELinux context etc.)

virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information...

2.1CVSS5.7AI score0.0005EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2012/06/19 3:20 p.m.29 views

Low: Red Hat Security Advisory: libguestfs security, bug fix, and enhancement update

Updated libguestfs packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, whic...

2.1CVSS5.8AI score0.0005EPSS
Exploits0References33
RedHat Linux
RedHat Linux
added 2012/06/18 12:34 p.m.1 views

python: distutils creates ~/.pypirc insecurely

Python 2.6 through 3.2 creates /.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file...

1.9CVSS6.7AI score0.00028EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2012/06/18 12:25 p.m.2 views

python: distutils creates ~/.pypirc insecurely

Python 2.6 through 3.2 creates /.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file...

1.9CVSS6.7AI score0.00028EPSS
Exploits1References4
Rows per page
Query Builder