Scientific Linux Security Update : util-linux-ng on SL6.x i386/x86_64 (20130221)

An information disclosure flaw was found in the way the mount command reported errors. A local attacker could use this flaw to determine the existence of files and directories they do not have access to. CVE-2013-0157 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C...

Scientific Linux Security Update : dovecot on SL6.x i386/x86_64 (20130221)

Two flaws were found in the way some settings were enforced by the script-login functionality of Dovecot. A remote, authenticated user could use these flaws to bypass intended access restrictions or conduct a directory traversal attack by leveraging login scripts. CVE-2011-2166, CVE-2011-2167 A...

Scientific Linux Security Update : dhcp on SL6.x i386/x86_64 (20130221)

A flaw was found in the way the dhcpd daemon handled the expiration time of IPv6 leases. If dhcpd's configuration was changed to reduce the default IPv6 lease time, lease renewal requests for previously assigned leases could cause dhcpd to crash. CVE-2012-3955 This update also fixes the following...

Scientific Linux Security Update : xinetd on SL6.x i386/x86_64 (20130221)

When xinetd services are configured with the 'TCPMUX' or 'TCPMUXPLUS' type, and the tcpmux-server service is enabled, those services are accessible via port 1. It was found that enabling the tcpmux-server service it is disabled by default allowed every xinetd service, including those that are not...

Scientific Linux Security Update : libxml2 on SL5.x, SL6.x i386/x86_64 (20130228)

A denial of service flaw was found in the way libxml2 performed string substitutions when entity values for entity references replacement was enabled. A remote attacker could provide a specially crafted XML file that, when processed by an application linked against libxml2, would lead to excessiv...

Scientific Linux Security Update : automake on SL6.x (noarch) (20130221)

It was found that the distcheck rule in Automake-generated Makefiles made a directory world-writable when preparing source archives. If a malicious, local user could access this directory, they could execute arbitrary code with the privileges of the user running 'make distcheck'. CVE-2012-3386...

Scientific Linux Security Update : bind on SL6.x i386/x86_64 (20130221)

A flaw was found in the DNS64 implementation in BIND when using Response Policy Zones RPZ. If a remote attacker sent a specially crafted query to a named server that is using RPZ rewrite rules, named could exit unexpectedly with an assertion failure. Note that DNS64 support is not enabled by...

Scientific Linux Security Update : httpd on SL6.x i386/x86_64 (20130221)

An input sanitization flaw was found in the modnegotiation Apache HTTP Server module. A remote attacker able to upload or create files with arbitrary names in a directory that has the MultiViews options enabled, could use this flaw to conduct cross-site scripting attacks against users visiting th...

Scientific Linux Security Update : libvirt on SL6.x i386/x86_64 (20130221)

It was discovered that libvirt made certain invalid assumptions about dnsmasq's command line options when setting up DNS masquerading for virtual machines, resulting in dnsmasq incorrectly processing network packets from network interfaces that were intended to be prohibited. This update includes...

Scientific Linux Security Update : dbus-glib on SL5.x, SL6.x i386/x86_64 (20130226)

A flaw was found in the way dbus-glib filtered the message sender message source subject when the 'NameOwnerChanged' signal was received. This could trick a system service using dbus-glib such as fprintd into believing a signal was sent from a privileged process, when it was not. A local attacker...

Scientific Linux Security Update : squid on SL6.x i386/x86_64 (20130221)

A denial of service flaw was found in the way the Squid Cache Manager processed certain requests. A remote attacker who is able to access the Cache Manager CGI could use this flaw to cause Squid to consume an excessive amount of memory. CVE-2012-5643 This update also fixes the following bugs : -...

Scientific Linux Security Update : dnsmasq on SL6.x i386/x86_64 (20130221)

It was discovered that dnsmasq, when used in combination with certain libvirtd configurations, could incorrectly process network packets from network interfaces that were intended to be prohibited. A remote, unauthenticated attacker could exploit this flaw to cause a denial of service via DNS...

Scientific Linux Security Update : cups on SL5.x, SL6.x i386/x86_64 (20130228)

It was discovered that CUPS administrative users members of the SystemGroups groups who are permitted to perform CUPS configuration changes via the CUPS web interface could manipulate the CUPS configuration to gain unintended privileges. Such users could read or write arbitrary files with the...

Scientific Linux Security Update : gdb on SL6.x i386/x86_64 (20130221)

GDB tried to auto-load certain files such as GDB scripts, Python scripts, and a thread debugging library from the current working directory when debugging programs. This could result in the execution of arbitrary code with the user's privileges when GDB was run in a directory that has untrusted...

Scientific Linux Security Update : openssh on SL6.x i386/x86_64 (20130221)

Due to the way the pamsshagentauth PAM module was built in Scientific Linux 6, the glibc's error function was called rather than the intended error function in pamsshagentauth to report errors. As these two functions expect different arguments, it was possible for an attacker to cause an...

Scientific Linux Security Update : pam on SL6.x i386/x86_64 (20130221)

A stack-based buffer overflow flaw was found in the way the pamenv module parsed users' '/.pamenvironment' files. If an application's PAM configuration contained 'userreadenv=1' this is not the default, a local attacker could use this flaw to crash the application or, possibly, escalate their...

Scientific Linux Security Update : php on SL6.x i386/x86_64 (20130221)

It was found that PHP did not check for carriage returns in HTTP headers, allowing intended HTTP response splitting protections to be bypassed. Depending on the web browser the victim is using, a remote attacker could use this flaw to perform HTTP response splitting attacks. CVE-2011-1398 An...

Scientific Linux Security Update : pki-core on SL6.x i386/x86_64 (20130221)

Note: The Certificate Authority component provided by this advisory cannot be used as a standalone server. It is installed and operates as a part of Identity Management the IPA component in Scientific Linux. Multiple cross-site scripting flaws were discovered in Certificate System. An attacker...

Scientific Linux Security Update : 389-ds-base on SL6.x i386/x86_64 (20130221)

A flaw was found in the way 389 Directory Server enforced ACLs after performing an LDAP modify relative distinguished name modrdn operation. After modrdn was used to move part of a tree, the ACLs defined on the moved Distinguished Name were not properly enforced until the server was restarted. Th...

Scientific Linux Security Update : axis on SL6.x (noarch) (20130219)

Apache Axis did not verify that the server hostname matched the domain name in the subject's Common Name CN or subjectAltName field in X.509 certificates. This could allow a man-in-the-middle attacker to spoof an SSL server if they had a certificate that was valid for any domain name. CVE-2012-57...