SUSE-SU-2019:0272-1 Security update for rmt-server

This update for rmt-server to version 1.1.1 fixes the following issues: The following issues have been fixed: - Fixed migration problems which caused some extensions / modules to be dropped bsc1118584, bsc1118579 - Fixed listing of mirrored products bsc1102193 - Include online migration paths int...

Code injection

The YaST2 RMT module for configuring the SUSE Repository Mirroring Tool RMT before 1.1.2 exposed MySQL database passwords on process commandline, allowing local attackers to access or corrupt the RMT database...

CVE-2018-17957

The YaST2 RMT module for configuring the SUSE Repository Mirroring Tool RMT before 1.1.2 exposed MySQL database passwords on process commandline, allowing local attackers to access or corrupt the RMT database...

CVE-2018-17957

The YaST2 RMT module for configuring the SUSE Repository Mirroring Tool RMT before 1.1.2 exposed MySQL database passwords on process commandline, allowing local attackers to access or corrupt the RMT database...

CVE-2018-17957

The CVE-2018-17957 entry affects the YaST2 RMT module in the SUSE openSUSE/YAST2 RMT tool, where versions prior to 1.1.2 expose MySQL database passwords on the process command line, enabling a local attacker to access or corrupt the RMT database. Public documents confirm the issue and that a fix ...

CVE-2018-17957 yast2-rmt leaks database passwords in process list

The YaST2 RMT module for configuring the SUSE Repository Mirroring Tool RMT before 1.1.2 exposed MySQL database passwords on process commandline, allowing local attackers to access or corrupt the RMT database...

openSUSE Security Update : yast2-rmt (openSUSE-2018-1604)

This update for yast2-rmt to version 1.1.12 fixes the following issues : Security issue fixed : - CVE-2018-17957: Secure MySQL credentials by not exposing them on the command line bsc1117602 This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network...

Security update for yast2-rmt (important)

This update for yast2-rmt to version 1.1.12 fixes the following issues: Security issue fixed: - CVE-2018-17957: Secure MySQL credentials by not exposing them on the command line bsc1117602 This update was imported from the SUSE:SLE-15:Update update project...

openSUSE: Security Advisory for yast2-rmt (openSUSE-SU-2018:4272-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2018:4209-1 Security update for yast2-rmt

This update for yast2-rmt to version 1.1.12 fixes the following issues: Security issue fixed: - CVE-2018-17957: Secure MySQL credentials by not exposing them on the command line bsc1117602...

view.rmt-services.com XSS vulnerability

Vulnerable URL: http://view.rmt-services.com/rsviewweb/rsviewweb.asp?display=1%22--%3E%3Csvg/onload=;prompt%28/OPENBUGBOUNTY/%29;%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

The vulnerability of the Red Hat Enterprise Linux operating system, which allows a malicious individual to compromise the accessibility of protected information

The vulnerability of the rmt-0.4b25 package of the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. Exploiting this vulnerability can be carried out locally...

Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the rmt-0.4b19 package of the Red Hat Linux operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Mandrake Linux Security Advisory : dump (MDKSA-2000:018)

There was the potential for a buffer overflow exploit in the restore program. This new version fixes this possible vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linux Security Advisory...

Mandriva Update for cpio MDVSA-2010:065 (cpio)

Check for the Version of cpio OpenVAS Vulnerability Test Mandriva Update for cpio MDVSA-2010:065 cpio Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Update for cpio MDVSA-2010:065 (cpio)

Check for the Version of cpio OpenVAS Vulnerability Test Mandriva Update for cpio MDVSA-2010:065 cpio Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

[SECURITY] Fedora 11 Update: tar-1.22-5.fc11

The GNU tar program saves many files together in one archive and can restore individual files or all of the files from that archive. Tar can also be used to add supplemental files to an archive and to update or list files in the archive. Tar includes multivolume support, automatic archive...

gtar -- buffer overflow in rmt client

Jakob Lell reports: The rmt client implementation of GNU Tar/Cpio contains a heap-based buffer overflow which possibly allows arbitrary code execution. The problem can be exploited when using an untrusted/compromised rmt server...

cpio: Heap-based buffer overflow by expanding a specially-crafted archive

Heap-based buffer overflow in the rmtread function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service memory corruption or possibly execute arbitrary code by sending more data than was requested,...

cpio: Heap-based buffer overflow by expanding a specially-crafted archive

Heap-based buffer overflow in the rmtread function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service memory corruption or possibly execute arbitrary code by sending more data than was requested,...