RHEL 4 : gnutls (RHSA-2006:0207)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2006:0207 advisory. - - libtasn1 buffer overflow CVE-2006-0645 Note that Nessus has not tested for this issue but has instead relied only on the application's...

oprofile.txt

Hello all, I recently audited a box with a software called OProfile http://oprofile.sourceforge.net/. "OProfile is a system-wide profiler for Linux systems, capable of profiling all running code at low overhead. OProfile is released under the GNU GPL. It consists of a kernel driver and a daemon f...

cups security update

CentOS Errata and Security Advisory CESA-2005:878 Updated CUPS packages that fix multiple security issues are now available for Red Hat Enterprise Linux. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS...

[Full-disclosure] DMA[2005-1112a] - 'Veritas Storage Foundation VCSI18N_LANG buffer overflow'

DMA2005-1112a - 'Veritas Storage Foundation VCSI18NLANG buffer overflow' Author: Kevin Finisterre Vendor: http://www.Veritas.com Product: 'Veritas Cluster Server for UNIX' References: http://www.digitalmunition.com/DMA2005-1112a.txt http://www.symantec.com/avcenter/security/Content/2005.11.08a.ht...

lynx security update

CentOS Errata and Security Advisory CESA-2005:839 An updated lynx package that corrects a security flaw is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Lynx is a text-based Web browser. An arbitrary command execute bug was fou...

linux-ftpd-ssl 0.17 (MKD/CWD) Remote Root Exploit

Exploit for linux platform in category remote exploits ================================================= linux-ftpd-ssl 0.17 MKD/CWD Remote Root Exploit ================================================= /Oct2005 VER2/ // / lnxFTPDsslwarez.c / / linux-ftpd-ssl 0.17 remote r00t exploit by kcope / /...

RedHat 6.0 cachemgr.cgi

RedHat Linux 6.0 installs by default a squid cache manager cgi script with no restricted access permissions. This script could be used to perform a port scan from the cgi-host machine. OpenVAS Vulnerability Test $Id: cachemgrcgi.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: RedHat 6.0...

Redhat Stronghold Secure Server File System Disclosure Vulnerability

In Redhat Stronghold from versions 2.3 up to 3.0 a flaw exists that allows a remote attacker to disclose sensitive system files including the httpd.conf file, if a restricted access to the server status report is not enabled when using those features. SPDX-FileCopyrightText: 2001 Felix Huber Some...

mod_ssl off by one

The remote host is using a version of modssl which is older than 2.8.10. This version is vulnerable to an off by one buffer overflow which may allow a user with write access to .htaccess files to execute arbitrary code on the system with permissions of the web server. Note that several Linux...

RedHat 6.0 cachemgr.cgi

RedHat Linux 6.0 installs by default a squid cache manager cgi script with no restricted access permissions. This script could be used to perform a port scan from the cgi-host machine. SPDX-FileCopyrightText: 1999 A. de Bernis Some text descriptions might be excerpted from a referenced sources, a...

Redhat Stronghold File System Disclosure

Redhat Stronghold Secure Server File System Disclosure Vulnerability The problem: In Redhat Stronghold from versions 2.3 up to 3.0 a flaw exists that allows a remote attacker to disclose sensitive system files including the httpd.conf file, if a restricted access to the server status report is no...

Unpassworded 'bash' account

The account SPDX-FileCopyrightText: 2004 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.15583";...

CVE-2005-3387

The startup script in packages/RedHat/ntop.init in ntop before 3.2, when ntop.conf is writable by users besides root, creates temporary files insecurely, which allows remote attackers to execute arbitrary code...

CVE-2005-3387

The CVE-2005-3387 issue affects ntop prior to version 3.2. The startup script in packages/RedHat/ntop.init creates temporary files insecurely when ntop.conf is writable by non-root users, enabling arbitrary code execution by a remote attacker. The provided documents do not specify exploitation ve...

nss_ldap, openldap security update

CentOS Errata and Security Advisory CESA-2005:751 Updated openldap and nssldap packages that correct a potential password disclosure issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LD...

RHEL 4 : vixie-cron (RHSA-2005:361)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:361 advisory. The vixie-cron package contains the Vixie version of cron. Cron is a standard UNIX daemon that runs specified programs at scheduled times. A bug was...

RHEL 4 : openssh (RHSA-2005:527)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:527 advisory. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. An error in the way OpenSSH handled GSSAPI credential delegation was discovere...

RHEL 4 : slocate (RHSA-2005:346)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:346 advisory. Slocate is a security-enhanced version of locate. Like locate, slocate searches through a central database updated nightly for files that match a give...

RHEL 4 : perl (RHSA-2005:674)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:674 advisory. Perl is a high-level programming language commonly used for system administration utilities and Web programming. Paul Szabo discovered a bug in the wa...

perl security update

CentOS Errata and Security Advisory CESA-2005:674 Updated Perl packages that fix security issues and contain several bug fixes are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. Perl is a high-level...