Moderate: Red Hat Security Advisory: sudo security, bug fix, and enhancement update

Updated sudo packages that fix one security issue, three bugs, and add one enhancement are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

[Doona] Network Protocol Fuzzer

Doona is a fork of the Bruteforce Exploit Detector, it was renamed to avoid confusion as it has a large number of of changes. You should get a copy from github if you want to try it: https://github.com/wireghoul/doona. It's currently a little short on documentation, so I will let the changelog...

Fedora 11 : cups-1.4.2-7.fc11 (2009-10891)

Updated to 1.4.2 including XSS security fix CVE-2009-2820. Fixed improper reference counting in abstract file descriptors handling interface CVE-2009-3553. Fixed admin.cgi crash when modifying a class. Fix cups-lpd to create unique temporary data files. Pass through serial parameters correctly in...

Mandriva Update for nss_ldap MDKA-2007:137 (nss_ldap)

Check for the Version of nssldap OpenVAS Vulnerability Test Mandriva Update for nssldap MDKA-2007:137 nssldap Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

nss_ldap security and bug fix update

253-5 - build with strict-aliasing disabled, because pamldap breaks strict-aliasing rules without it tools 253-4 - block SIGPIPE in the atfork handler, so that it doesnt trip up when attempting to drop a connection to the server 448833 253-3 - add patch to make netgroup enumeration fail due to la...

Debian Security Advisory DSA 606-1 (nfs-utils)

The remote host is missing an update to nfs-utils announced via advisory DSA 606-1. OpenVAS Vulnerability Test $Id: deb6061.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 606-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 606-1 (nfs-utils)

The remote host is missing an update to nfs-utils announced via advisory DSA 606-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2002-2244

Akfingerd 0.5 and earlier versions allow local users to cause a denial of service crash via a .plan with a symlink to /dev/urandom or other device, then disconnecting while data is being transferred, which causes a SIGPIPE error that Akfingerd cannot handle...

CVE-2002-2244

CVE-2002-2244 affects Akfingerd 0.5 and earlier. The vulnerability arises when a local user exploits a .plan containing a symlink to /dev/urandom (or another device) and disconnects during data transfer, causing Akfingerd to receive a SIGPIPE it cannot handle, resulting in a denial of service (cr...

axigen 1.2.6 - 2.0.0b1 DoS (x86-lnx)

No description provided by source. / doaxigen.c axigen 1.2.6 - 2.0.0b1 DoS x86-lnx by mu-b - Sat Oct 22 2006 - Tested on: AXIGEN 1.2.6 lnx AXIGEN 2.0.0b1 lnx 0x08088054: parsing error results in DoS little-endian, confirmed DoS + off-by-one heap smash big-endian Note: if you receive a SIGPIPE the...

Axigen 2.0.0b1 - Remote Denial of Service (1)

Axigen 2.0.0b1 - Remote Denial of Service 1 / doaxigen.c axigen 1.2.6 - 2.0.0b1 DoS x86-lnx by mu-b - Sat Oct 22 2006 - Tested on: AXIGEN 1.2.6 lnx AXIGEN 2.0.0b1 lnx 0x08088054: parsing error results in DoS little-endian, confirmed DoS + off-by-one heap smash big-endian Note: if you receive a...

kadu-fun.txt

Kadu Remote Denial Of Service Fun by Piotr Bania http://www.piotrbania.com All rights reserved. Original location: http://www.piotrbania.com/all/adv/kadu-fun.txt Severity: Medium - remote denial of service. Software affected: Tested on Kadu 0.4.3, others maybe also affected. 0. DISCLAIMER Author...

CVE-2005-2377

CVE-2005-2377 concerns nss_ldap, where versions 181 through 212 (before 213) used in Mandrake Corporate Server, Mandrake 10.0, and other OSes fail to handle a SIGPIPE when issuing an LDAP search. This can allow a remote attacker to cause a denial of service by making the LDAP server unavailable, ...

Mandrake Linux Security Advisory : nss_ldap (MDKSA-2005:121)

Rob Holland, of the Gentoo Security Audit Team, discovered that pamldap and nssldap would not use TLS for referred connections if they are referred to a master after connecting to a slave, regardless of the 'ssl starttls' setting in ldap.conf. As well, a bug in nssldap in Corporate Server and...

Important: Red Hat Security Advisory: nfs-utils security update

An updated nfs-utils package that fixes various security issues is now available. The nfs-utils package provides a daemon for the kernel NFS server and related tools. SGI reported that the statd daemon did not properly handle the SIGPIPE signal. A misconfigured or malicious peer could cause statd...

CVE-2004-1014

statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service server process crash via a TCP connection that is prematurely terminated...

CVE-2004-1014

statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service server process crash via a TCP connection that is prematurely terminated...

CVE-2004-1014

statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service server process crash via a TCP connection that is prematurely terminated...

RHEL 3 : nfs-utils (RHSA-2004:583)

An updated nfs-utils package that fixes various security issues is now available. The nfs-utils package provides a daemon for the kernel NFS server and related tools, providing a much higher level of performance than the traditional Linux NFS server used by most users. This package also contains...

security flaw

statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service server process crash via a TCP connection that is prematurely terminated...