[SECURITY] Fedora 22 Update: setroubleshoot-3.2.22-1.fc22

setroubleshoot GUI. Application that allows you to view setroubleshoot-serv er messages. Provides tools to help diagnose SELinux problems. When AVC messages are generated an alert can be generated that will give information about the problem and help track its resolution. Alerts can be configured...

setroubleshoot Arbitrary Command Execution Vulnerability

setroubleshoot is a set of SELinux operating system troubleshooting tools. The tool consists of a framework and analysis plug-ins. A security vulnerability exists in the 'getrpmnvrbyfilepathtemporary' function in the util.py file in versions prior to setroubleshoot 3.2.22. A remote attacker can...

CVE-2015-1815

The getrpmnvrbyfilepathtemporary function in util.py in setroubleshoot before 3.2.22 allows remote attackers to execute arbitrary commands via shell metacharacters in a file name...

Design/Logic Flaw

The getrpmnvrbyfilepathtemporary function in util.py in setroubleshoot before 3.2.22 allows remote attackers to execute arbitrary commands via shell metacharacters in a file name...

CVE-2015-1815

The getrpmnvrbyfilepathtemporary function in util.py in setroubleshoot before 3.2.22 allows remote attackers to execute arbitrary commands via shell metacharacters in a file name...

CVE-2015-1815

Summary: CVE-2015-1815 affects setroubleshoot’s get_rpm_nvr_by_file_path_temporary in util.py, where shells metacharacters in a file name can lead to remote command execution. Concrete details from connected advisories show affected packages across distros (e.g., Fedora setroubleshoot 3.2.x, Mira...

RHEL 5 / 6 / 7 : setroubleshoot (RHSA-2015:0729)

The remote Redhat Enterprise Linux 5 / 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:0729 advisory. The setroubleshoot packages provide tools to help diagnose SELinux problems. When Access Vector Cache AVC messages are returned, an alert can...

CentOS Update for setroubleshoot CESA-2015:0729 centos6

Check the version of setroubleshoot SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882136";...

CentOS Update for setroubleshoot CESA-2015:0729 centos5

Check the version of setroubleshoot SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882135";...

CentOS 5 / 6 / 7 : setroubleshoot (CESA-2015:0729)

Updated setroubleshoot packages that fix one security issue are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

Scientific Linux Security Update : setroubleshoot on SL5.x, SL6.x, SL7.x i386/x86_64 (20150326)

It was found that setroubleshoot did not sanitize file names supplied in a shell command look-up for RPMs associated with access violation reports. An attacker could use this flaw to escalate their privileges on the system by supplying a specially crafted file to the underlying shell command...

RedHat Update for setroubleshoot RHSA-2015:0729-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

setroubleshoot: command injection via crafted file name

It was found that setroubleshoot did not sanitize file names supplied in a shell command look-up for RPMs associated with access violation reports. An attacker could use this flaw to escalate their privileges on the system by supplying a specially crafted file to the underlying shell command...

Important: Red Hat Security Advisory: setroubleshoot security update

Updated setroubleshoot packages that fix one security issue are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

setroubleshoot security update

3.2.17-4.1.0.1 - Add setroubleshoot-oracle-enterprise.patch to change bug reporting URL to linux.oracle.com 3.2.17-4.1 - Fix getrpmnvrtemporary functions Resolves:1203352...

PT-2015-1273 · Red Hat +1 · Setroubleshoot +2

Name of the Vulnerable Software and Affected Versions: setroubleshoot versions prior to 3.2.22 Description: The issue is related to incorrect file name handling, which can be exploited by remote attackers to execute arbitrary commands by adding shell metacharacters to file names. This is...

Scientific Linux Security Update : setroubleshoot on SL5.x i386/x86_64

A flaw was found in the way sealert wrote diagnostic messages to a temporary file. A local unprivileged user could perform a symbolic link attack, and cause arbitrary files, writable by other users, to be overwritten when a victim runs sealert. CVE-2007-5495 A flaw was found in the way sealert...

RedHat Update for setroubleshoot RHSA-2008:0061-02

Check for the Version of setroubleshoot OpenVAS Vulnerability Test RedHat Update for setroubleshoot RHSA-2008:0061-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

RedHat Update for setroubleshoot RHSA-2008:0061-02

Check for the Version of setroubleshoot OpenVAS Vulnerability Test RedHat Update for setroubleshoot RHSA-2008:0061-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

setroubleshoot security and bug fix update

setroubleshoot: 2.0.5-3.0.1.el5 - replace missed references to bugzilla.redhat.com with linux.oracle.com 2.0.5-3 - Resolve: bug 436564: socket.getsockopt on ppc generates exception Fix typo in original setroubleshoot-getcredentials.patch 2.0.5-2 - Resolve: bug 437857: python error in system...