EUVD-2018-0573

Malware in sbrugna...

Ensure That Old Passwords Are Verified When Users Change Them

To prevent a third party from maliciously changing the password of another user, the old password must be verified when a user changes the password. According to the common practice in the industry, the old password does not need to be verified when the root user changes its own password. The roo...

Important: Red Hat Security Advisory: pam security update

An update for pam is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

CVE-2022-37026

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS...

Discover Gentoo Linux Vulnerabilities using Qualys VMDR

The Qualys vulnerability signatures team has released a new series of signatures detections for Gentoo Linux, allowing security teams to identify Gentoo Linux hosts and detect their vulnerabilities. Gentoo Linux is a Linux distribution built using the Portage package management system. It is a fr...

UnixAuthenticationService in Apache Ranger was updated to correctly handle user input to avoid Stack-based buffer overflow

UnixAuthenticationService in Apache Ranger 1.2.0 was updated to correctly handle user input to avoid Stack-based buffer overflow. Versions prior to 1.2.0 should be upgraded to 1.2.0...

Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.10 : freeradius vulnerabilities (USN-2122-1)

It was discovered that FreeRADIUS incorrectly handled unix authentication. A remote user could successfully authenticate with an expired password. CVE-2011-4966 Pierre Carrier discovered that FreeRADIUS incorrectly handled rlmpap hash processing. An authenticated user could use this issue to caus...

MIT Kerberos kadmind RPC Library Unix Authentication Buffer Overflow (CVE-2007-2443)

Kerberos is a protocol suite that provides authenticated communication between two points on a network. The Kerberos V5 administration server kadmind utilizes the encrypted SUN-RPC protocol to communicate with its remote clients. A vulnerability has been reported in the Kerberos Unix authenticati...