CVE-2014-0189

virt-who uses world-readable permissions for /etc/sysconfig/virt-who, which allows local users to obtain password for hypervisors by reading the file...

CVE-2014-0189: Undefined Security Weakness

virt-who uses world-readable permissions for /etc/sysconfig/virt-who, which allows local users to obtain password for hypervisors by reading the file...

SuSE 11.2 Security Update : Apache (SAT Patch Number 7409)

This update fixes the following issues : - Denial of Service via special requests in modproxyajp. CVE-2012-4557 - improper LDLIBRARYPATH handling. CVE-2012-0883 - filename escaping problem Additionally, some non-security bugs have been fixed:. CVE-2012-2687 - ignore case when checking against SNI...

SuSE 10 Security Update : ofed (ZYPP Patch Number 8386)

This update of ofed fixed multiple issues including security related flaws : - sdp: move histogram allocation from stack to heap. bnc706175 - cma: Fix crash in request handlers. bnc678795, CVE-2011-0695 - rds: set correct msgnamelen. bnc773383, CVE-2012-3430 - cm: Bump reference count on cmid...

SuSE 10 Security Update : sysconfig (ZYPP Patch Number 7892)

The following bug has been fixed : - sysconfig hook script for NetworkManager did not properly quote shell meta characters when processing ESSIDs. Specially crafted network names could have therefore lead to execution of shell code. CVE-2011-4182 %NASLMINLEVEL 70300 C Tenable Network Security, In...

SuSE 11.1 Security Update : sysconfig (SAT Patch Number 5618)

sysconfig hook script for NetworkManager did not properly quote shell meta characters when processing ESSIDs. Specially crafted network names could have therefore lead to execution of shell code. CVE-2011-4182 In addition, the following non-security bugs were fixed : - 580018: ip addr flush $ifna...

PT-2018-4037

Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise sysconfig versions prior to 0.83.7-2.1 Description The issue is related to missing escaping of ESSID values in the sysconfig of SUSE Linux Enterprise. This allows attackers who control an access point to execute arbitrary...

openSUSE Security Update : sysconfig (openSUSE-SU-2011:0353-1)

This update fixes the file permissions for ifcfg- files. For 11.2 this update also fixes bnc637183 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update sysconfig-3953. The text description of this...

SuSE 11.1 Security Update : sysconfig (SAT Patch Number 3954)

This update fixes the file permissions for ifcfg- files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. include'deprecatednasllevel.inc';...

CentOS 5 : nfs-utils (CESA-2009:1321)

An updated nfs-utils package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nfs-utils package provides a daemon for the kernel NFS server and related tools. It was discovered that...

Fedora 10 : proftpd-1.3.2a-5.fc10 (2009-9386)

This update has a large number of changes from previous Fedora packages; the highlights are as follows: - Update to upstream release 1.3.2a - Fix SQL injection vulnerability at login 485125, CVE-2009-0542 - Fix SELinux compatibility 498375 - Fix audit logging 506735 - Fix default configuration...

nfs-utils security and bug fix update

1.0.9-42 - mountd: Check host alias with netgroups bz 478952 - exportfs: fixed typo in man page bz 474848 - nfs.init: NFS server reboot results in 'Stale NFS file handle' bz 474449 - nfslock.init: options not correctly parsed bz 459591 - mount.nfs: mounts fail with read-only /etc bz 450646 -...

Low: Red Hat Security Advisory: nfs-utils security and bug fix update

An updated nfs-utils package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nfs-utils package provides a daemon for the kernel NFS server and related tools. It was discovered that...

CVE-2002-0758

CVE-2002-0758 affects SuSE 8.0 where the ifup-dhcp script in the sysconfig package may process spoofed DHCP responses, allowing remote attackers to cause arbitrary commands to be stored and executed. The underlying issue is the handling of DHCP data by the script, leading to code execution on the...

CVE-2002-0758: Undefined Security Weakness

ifup-dhcp script in the sysconfig package for SuSE 8.0 allows remote attackers to execute arbitrary commands via spoofed DHCP responses, which are stored and executed in a file...

SuSE Security Announcement: sysconfig (SuSE-SA:2002:016)

-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: sysconfig Announcement-ID: SuSE-SA:2002:016 Date: Wed May 8 12:00:00 MEST 2002 Affected products: 8.0 Vulnerability Type: remote command execution Severity 1-10: 4 SuSE default package: Yes. Other affected systems: No. Content...