Solaris 10 (sparc) : 140860-02 (deprecated)

SunOS 5.10: su patch. Date this patch was last updated by Sun : Oct/06/10 This plugin has been deprecated and either replaced with individual 140860 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/12...

openSUSE Security Update : flash-player (openSUSE-SU-2010:0647-1)

Flash Player was updated to version 10.1.85.3 to fix a critical security issue CVE-2010-2884. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update flash-player-3170. The text description of this...

openSUSE Security Update : w3m (openSUSE-SU-2010:0393-1)

w3m did not handle embedded nul characters in the common name and in subject alternative names of x509 certificates. CVE-2010-2074 has been assigned to this issue. This update also turns on verification of x509 certificates by default which was not the case before. %NASLMINLEVEL 70300 C Tenable...

Security fix for the ALT Linux 5 package tomcat5 version 0:5.5.27-alt4_7.4jpp5

March 19, 2010 Igor Vlasenko 0:5.5.27-alt47.4jpp5 - updated to fc 7.4 - CVE-2009-0033, CVE-2009-0580 closes: 20311, 20314 - su -s /bin/sh -c instead of su - closes: 23073...

Tod Miller Sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4

No description provided by source. !/bin/sh Tod Miller Sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4 local root exploit March 2010 automated by kingcope Full Credits to Slouching echo Tod Miller Sudo local root exploit echo by Slouching echo automated by kingcope if $ != 1 then echo "usage:...

(Tod Miller's) Sudo/SudoEdit 1.6.9p21/1.7.2p4 - Local Privilege Escalation

!/bin/sh Tod Miller Sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4 local root exploit March 2010 automated by kingcope Full Credits to Slouching echo Tod Miller Sudo local root exploit echo by Slouching echo automated by kingcope if $ != 1 then echo "usage: ./sudoxpl.sh " exit fi cd /tmp cat...

Trango Broadband Wireless Interception

-------------------------------------------------------------------------- Trango Broadband Wireless M5830 Series Rogue SU Authentication Bug Date : 15 December, 2009 By: Blair - [email protected] -------------------------------------------------------------------------- Background ----------...

Trango Broadband Wireless Rogue SU Authentication Bug

-------------------------------------------------------------------------- Trango Broadband Wireless M5830 Series Rogue SU Authentication Bug Date : 15 December, 2009 By: Blair - [email protected] -------------------------------------------------------------------------- Background ----------...

MDVA-2009:146 : coreutils

There is no man page for the su command. This update fixes this problem making the man page for the su command show again. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...

Solaris Update for su driver 109793-33

Check for the Version of su driver OpenVAS Vulnerability Test Solaris Update for su driver 109793-33 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Solaris Update for su driver 109793-33

Check for the Version of su driver OpenVAS Vulnerability Test Solaris Update for su driver 109793-33 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

pam-krb5 < 3.13 Local Privilege Escalation Exploit

Exploit for linux platform in category local exploits ================================================== pam-krb5 3.13 Local Privilege Escalation Exploit ================================================== / cve-2009-0360.c pam-krb5 3.13 local privilege escalation Information:...

Fedora Core 9 FEDORA-2009-1343 (gstreamer-plugins-good)

The remote host is missing an update to gstreamer-plugins-good announced via advisory FEDORA-2009-1343. OpenVAS Vulnerability Test $Id: fcore20091343.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1343 gstreamer-plugins-good Authors: Thomas Reinke...

One absolutely can use the SU to mention the right skill-vulnerability warning-the black bar safety net

A period of time provided the right, found that the SU provide the right climate SU configuration file can be written, but don't know how to write, just to have a server installed SU on their own to configure one and then copy to be provided right on the machine, found it easy to use. For the...

Fedora Core 9 FEDORA-2009-1519 (python-fedora)

The remote host is missing an update to python-fedora announced via advisory FEDORA-2009-1519. OpenVAS Vulnerability Test $Id: fcore20091519.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1519 python-fedora Authors: Thomas Reinke Copyright: Copyrig...

pam-krb5 security advisory &#40;3.12 and earlier&#41;

pam-krb5 security vulnerability Vulerability type: Local privilege escalation, local file overwrite Versions affected: All versions prior to 3.13 Versions fixed: 3.13 and later Reported: 2009-01-29 Public announcement: 2009-02-11 CVE IDs: CVE-2009-0360, CVE-2009-0361 A security vulnerability in...

CVE-2008-3825

pamkrb5 2.2.14 in Red Hat Enterprise Linux RHEL 5 and earlier, when the existingticket option is enabled, uses incorrect privileges when reading a Kerberos credential cache, which allows local users to gain privileges by setting the KRB5CCNAME environment variable to an arbitrary cache filename a...

Design/Logic Flaw

pamkrb5 2.2.14 in Red Hat Enterprise Linux RHEL 5 and earlier, when the existingticket option is enabled, uses incorrect privileges when reading a Kerberos credential cache, which allows local users to gain privileges by setting the KRB5CCNAME environment variable to an arbitrary cache filename a...

CVE-2008-3825

pamkrb5 2.2.14 in Red Hat Enterprise Linux RHEL 5 and earlier, when the existingticket option is enabled, uses incorrect privileges when reading a Kerberos credential cache, which allows local users to gain privileges by setting the KRB5CCNAME environment variable to an arbitrary cache filename a...

coreutils security update

5.2.1-31.8.0.1 - Disable test not-owner by adding coreutils-disable-not-owner.patch 5.2.1-31.8 - Fixed minor security related regression in su pam module introduced in RHEL-4.6 update,bug 445697...