openSUSE Security Update : vino (openSUSE-SU-2011:0481-1)

Two out of bounds memory access vulnerabilities in vinos' libvncserver have been fixed. CVE-2011-0904 and CVE-2011-0905 have been assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : encfs (openSUSE-SU-2010:1028-1)

This update of encfs fixes : - CVE-2010-3073: CVSS v2 Base Score: 1.9 AV:L/AC:M/Au:N/C:P/I:N/A:N: Cryptographic Issues CWE-310: encfs Only 32 bit of file IV used - CVE-2010-3074: CVSS v2 Base Score: 1.9 AV:L/AC:M/Au:N/C:P/I:N/A:N: Cryptographic Issues CWE-310: encfs Watermarking attack The patch...

Oracle Solaris CVE-2010-3503 'su' Local Solaris Vulnerability

No description provided by source. From http://cvs.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/cmd/su/su.c 521 for j = 0; initenvj != 0; j++ 1 522 if initvar = getenvinitenvj 2 ... 535 else 536 var = char 537 mallocstrleninitenvj 3 538 + strleninitvar 539 + 2; 540 void strcpyvar, initenvj;...

CVE-2010-3503

Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect confidentiality and integrity via unknown vectors related to su...

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect confidentiality and integrity via unknown vectors related to su...

Oracle Solaris CVE-2010-3503 'su' Local Solaris Vulnerability

Exploit for solaris platform in category local exploits ============================================================= Oracle Solaris CVE-2010-3503 'su' Local Solaris Vulnerability ============================================================= 521 for j = 0; initenvj != 0; j++ 1 522 if initvar =...

Oracle Solaris su NULL Pointer

From http://cvs.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/cmd/su/su.c 521 for j = 0; initenvj != 0; j++ 1 522 if initvar = getenvinitenvj 2 ... 535 else 536 var = char 537 mallocstrleninitenvj 3 538 + strleninitvar 539 + 2; 540 void strcpyvar, initenvj; 4 'su' when creating new environme...

CVE-2010-3503

Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect confidentiality and integrity via unknown vectors related to su...

CVE-2010-3503

Oracle Solaris 10/OpenSolaris local vulnerability CVE-2010-3503 resides in the su command: when inheriting environment variables, a malloc() may return NULL, and a subsequent strcpy() can dereference it, causing a crash (segmentation fault). Public sources (e.g., exploit/packetstorm references) d...

Oracle Solaris - su Crash

Oracle Solaris - su Crash From http://cvs.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/cmd/su/su.c 521 for j = 0; initenvj != 0; j++ 1 522 if initvar = getenvinitenvj 2 ... 535 else 536 var = char 537 mallocstrleninitenvj 3 538 + strleninitvar 539 + 2; 540 void strcpyvar, initenvj; 4 'su'...

Solaris 10 (sparc) : 140860-02 (deprecated)

SunOS 5.10: su patch. Date this patch was last updated by Sun : Oct/06/10 This plugin has been deprecated and either replaced with individual 140860 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/12...

openSUSE Security Update : flash-player (openSUSE-SU-2010:0647-1)

Flash Player was updated to version 10.1.85.3 to fix a critical security issue CVE-2010-2884. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update flash-player-3170. The text description of this...

openSUSE Security Update : w3m (openSUSE-SU-2010:0393-1)

w3m did not handle embedded nul characters in the common name and in subject alternative names of x509 certificates. CVE-2010-2074 has been assigned to this issue. This update also turns on verification of x509 certificates by default which was not the case before. %NASLMINLEVEL 70300 C Tenable...

Security fix for the ALT Linux 5 package tomcat5 version 0:5.5.27-alt4_7.4jpp5

March 19, 2010 Igor Vlasenko 0:5.5.27-alt47.4jpp5 - updated to fc 7.4 - CVE-2009-0033, CVE-2009-0580 closes: 20311, 20314 - su -s /bin/sh -c instead of su - closes: 23073...

Tod Miller Sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4

No description provided by source. !/bin/sh Tod Miller Sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4 local root exploit March 2010 automated by kingcope Full Credits to Slouching echo Tod Miller Sudo local root exploit echo by Slouching echo automated by kingcope if $ != 1 then echo "usage:...

(Tod Miller's) Sudo/SudoEdit 1.6.9p21/1.7.2p4 - Local Privilege Escalation

!/bin/sh Tod Miller Sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4 local root exploit March 2010 automated by kingcope Full Credits to Slouching echo Tod Miller Sudo local root exploit echo by Slouching echo automated by kingcope if $ != 1 then echo "usage: ./sudoxpl.sh " exit fi cd /tmp cat...

Trango Broadband Wireless Rogue SU Authentication Bug

-------------------------------------------------------------------------- Trango Broadband Wireless M5830 Series Rogue SU Authentication Bug Date : 15 December, 2009 By: Blair - [email protected] -------------------------------------------------------------------------- Background ----------...

Trango Broadband Wireless Interception

-------------------------------------------------------------------------- Trango Broadband Wireless M5830 Series Rogue SU Authentication Bug Date : 15 December, 2009 By: Blair - [email protected] -------------------------------------------------------------------------- Background ----------...

MDVA-2009:146 : coreutils

There is no man page for the su command. This update fixes this problem making the man page for the su command show again. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...

Solaris Update for su driver 109793-33

Check for the Version of su driver OpenVAS Vulnerability Test Solaris Update for su driver 109793-33 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...