Fedora 8 : librapi-0.11-1.fc8 / librra-0.11-1.fc8 / libsynce-0.11-2.fc8 / odccm-0.11-1.fc8 / etc (2008-0680)

The remote Fedora host is missing one or more security updates : librra-0.11-1.fc8 : - Wed Jan 9 2008 Andreas Bierfert - 0.11-1 - version upgrade - Fri Dec 21 2007 Andreas Bierfert - 0.10.0-2 - rework BR - Wed May 9 2007 Aurelien Bompard 0.10.0-1 - version 0.10.0 synce-serial-0.11-1.fc8 : - Wed J...

[SECURITY] Fedora 8 Update: synce-serial-0.11-1.fc8

Synce-serial is part of the SynCE project: http://www.synce.org This module contains helper scripts for setting up a serial connection for use with SynCE. They are basically wrappers around pppd: synce-serial-config - Use this to select serial port and IP addresses synce-serial-start - Use this t...

[SECURITY] Fedora 8 Update: synce-kpm-0.11-3.fc8

SynCE-KPM stands for SynCE KDE PDA Manager and aims to be an application to manage WM5/WM6 PDA devices from Linux...

[SECURITY] Fedora 8 Update: synce-gnome-0.11-2.fc8

SynCE-GNOME is currently just a buzzword for an idea that eventually, will encapsulate multiple applications into one applet. At the moment, SynCE-GNOME as we know it only displays nice libnotify messages when a devi ce is connected or disconnected, and it prompts for a password if one is requi r...

[SECURITY] Fedora 8 Update: librra-0.11-1.fc8

RRA is part of the SynCE project: http://www.synce.org...

[SECURITY] Fedora 8 Update: synce-gnomevfs-0.11-1.fc8

This is a gnome-vfs module that enables access to the Windows CE or Pocket PC file system through the gnome-vfs functions...

[SECURITY] Fedora 8 Update: synce-sync-engine-0.11-6.fc8

Synce synchronization engine for use with libopensync...

CVE-2007-6703

Unspecified vulnerability in vdccm before 0.10.1 in SynCE SynCE-dccm might allow attackers to cause a denial of service via unspecified vectors...

CVE-2007-6703

Unspecified vulnerability in vdccm before 0.10.1 in SynCE SynCE-dccm might allow attackers to cause a denial of service via unspecified vectors...

CVE-2008-1136

The Utils::runScripts function in src/utils.cpp in vdccm 0.92 through 0.10.0 in SynCE SynCE-dccm allows remote attackers to execute arbitrary commands via shell metacharacters in a certain string to TCP port 5679...

Code injection

The Utils::runScripts function in src/utils.cpp in vdccm 0.92 through 0.10.0 in SynCE SynCE-dccm allows remote attackers to execute arbitrary commands via shell metacharacters in a certain string to TCP port 5679...

Design/Logic Flaw

Unspecified vulnerability in vdccm before 0.10.1 in SynCE SynCE-dccm might allow attackers to cause a denial of service via unspecified vectors...

CVE-2007-6703

Unspecified vulnerability in vdccm before 0.10.1 in SynCE SynCE-dccm might allow attackers to cause a denial of service via unspecified vectors...

CVE-2008-1136

The CVE-2008-1136 entry affects SynCE-dccm (vdccm) versions 0.92 through 0.10.0. The vulnerability resides in Utils::runScripts (src/utils.cpp), where a string processed and sent to TCP port 5679 can be tainted by shell metacharacters, permitting remote command execution. This is a remote, networ...

CVE-2007-6703

CVE-2007-6703 affects vdccm (SynCE-dccm) prior to 0.10.1. The vulnerability is described as an unspecified denial-of-service by SynCE-dccm with high impact (confidentiality, integrity, and availability) per NVD CVSS 2.0 vector. Connected advisories (SUSE, Red Hat, Fedora OpenVAS entries) confirm ...

SynCE shell characters vulnerability

Shell characters vulnerability on external application execution...

CORE-2007-1106: SynCE Remote Command Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies – CoreLabs Advisory http://www.coresecurity.com/corelabs SynCE Remote Command Injection Advisory Information Title: SynCE Remote Command Injection Advisory ID: CORE-2007-1106 Advisory URL:...

SynCE 0.92 - vdccm Daemon Remote Command Injection

SynCE 0.92 - vdccm Daemon Remote Command Injection source: https://www.securityfocus.com/bid/27178/info SynCE is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Attackers can exploit this issue to execute arbitrary commands in th...

SynCE Remote Command Injection

SynCE Remote Command Injection Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Advisory Information Title: SynCE Remote Command Injection Advisory ID: CORE-2007-1106 Advisory URL: http://www.coresecurity.com/?action=item&id=2070 Date published: 2008-01-07 Date...

Core Security Technologies Advisory 2007.1106

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies – CoreLabs Advisory http://www.coresecurity.com/corelabs SynCE Remote Command Injection Advisory Information Title: SynCE Remote Command Injection Advisory ID: CORE-2007-1106 Advisory URL:...