The vulnerability of the CentOS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the sblim-1-31.el52.1 package of the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploiting this vulnerability can be carried out locally...

openSUSE Security Update : sblim-cim-client2 (openSUSE-SU-2012:1621-1)

This update of sblim-cim-client2 fixed a Denial of Service via hash table collision issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-839. The text description of this plugi...

CVE-2012-2328

internal/cimxml/sax/NodeFactory.java in Standards-Based Linux Instrumentation for Manageability SBLIM Common Information Model CIM Client aka sblim-cim-client2 before 2.1.12 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent...

Code injection

internal/cimxml/sax/NodeFactory.java in Standards-Based Linux Instrumentation for Manageability SBLIM Common Information Model CIM Client aka sblim-cim-client2 before 2.1.12 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent...

CVE-2012-2328

internal/cimxml/sax/NodeFactory.java in Standards-Based Linux Instrumentation for Manageability SBLIM Common Information Model CIM Client aka sblim-cim-client2 before 2.1.12 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent...

CVE-2012-2328

CVE-2012-2328 affects the Standards-Based Linux Instrumentation for Manageability (SBLIM) CIM Client (sblim-cim-client2) before 2.1.12. The flaw is in internal/cimxml/sax/NodeFactory.java, which computes hash values without restricting hash collisions, allowing a context-dependent attacker to cau...

Oracle Linux 5 : sblim (ELSA-2008-0497)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2008-0497 advisory. 1.31.0.1.el52.1 - Add oracle-enterprise-release.patch 1.31.el52.1 - Remove RPATH from shared libraries in sblim-cmpi-dns,fsvol,network, nfsv3,nfsv4,samba,syslog...

Oracle Linux 6 : sblim-cim-client2 (ELSA-2012-0987)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0987 advisory. 2.1.3-2 - Fix possible XML Hash DoS Resolves: 803391 2.1.3 - Update to sblim-cim-client2-2.1.3 2.0.9.2-1 - Initial support Tenable has extracted the preceding...

CVE-2012-3381

sfcb in sblim-sfcb places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

AZL-7355 CVE-2012-3381 affecting package sblim-sfcb 1.4.9-20

sfcb in sblim-sfcb places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

AZL-37030 CVE-2012-3381 affecting package sblim-sfcb 1.4.9-20

sfcb in sblim-sfcb places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

Directory traversal

sfcb in sblim-sfcb places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2012-3381

sfcb in sblim-sfcb places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2012-3381

sfcb in sblim-sfcb places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2012-3381

The CVE-2012-3381 issue affects the sblim-sfcb component, where sfcb places a zero-length directory name in LD_LIBRARY_PATH, enabling local privilege escalation via a Trojan horse shared library in the current working directory. Documented impact is local userPrivilege elevation with partial conf...

Scientific Linux Security Update : sblim on SL4.x, SL5.x i386/x86_64

It was discovered that certain sblim libraries had an RPATH runtime library search path set in the ELF Executable and Linking Format header. This RPATH pointed to a sub-directory of a world-writable, temporary directory. A local user could create a file with the same name as a library required by...

Scientific Linux Security Update : sblim-cim-client2 on SL6.x (20120620)

The SBLIM Standards-Based Linux Instrumentation for Manageability CIM Common Information Model Client is a class library for Java applications that provides access to CIM servers using the CIM Operations over HTTP protocol defined by the DMTF Distributed Management Task Force standards. It was...

CentOS Update for sblim-cim-client2 CESA-2012:0987 centos6

Check for the Version of sblim-cim-client2 OpenVAS Vulnerability Test CentOS Update for sblim-cim-client2 CESA-2012:0987 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

CentOS Update for sblim-cim-client2 CESA-2012:0987 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS 6 : sblim-cim-client2 (CESA-2012:0987)

Updated sblim-cim-client2 packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...