3593 matches found
CVE-2008-2101
CVE-2008-2101 affects VMware ESX/VCB: the VCB command-line utilities for ESX 3.0.1–3.0.3 and ESX 3.5 pass the password on the command line, enabling local users to obtain credentials by inspecting the process list. The issue is addressed by VMware patches (VCB/ESX updates) for ESX 3.0.1–3.0.3 and...
CVE-2008-3857: Exposure of Sensitive Information to an Unauthorized Actor
The Base Service Utilities component in IBM DB2 9.1 before Fixpak 5 retains a cleartext password in memory after the database connection that sent the password is fully established, which might allow local users to obtain sensitive information by reading a memory dump...
nfs-utils: missing tcp_wrappers support
A certain Red Hat build script for nfs-utils before 1.0.9-35z.el52 on Red Hat Enterprise Linux RHEL 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions...
Low: Red Hat Security Advisory: coreutils security update
Updated coreutils packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. The coreutils package contains the core GNU utilities. It is the combination of the old GNU...
PT-2008-1075 · Bluez +1 · Bluez-Libs-Devel +4
Name of the Vulnerable Software and Affected Versions: bluez-libs versions 3.30 through 3.33 bluez-utils versions 3.30 through 3.33 bluez-libs-devel versions 2.10 through 3.33 bluez-utils-cups versions 2.10 through 3.7 bluez-utils versions prior to 3.36 Description: The issue is related to the...
GLSA-200806-05 : cbrPager: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200806-05 cbrPager: User-assisted execution of arbitrary code Mamoru Tasaka discovered that filenames of the image archives are not properly sanitized before being passed to decompression utilities like unrar and unzip, which use...
[SECURITY] Fedora 8 Update: util-linux-ng-2.13.1-2.fc8
The util-linux-ng package contains a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, Util-linux contains the fdisk configuration tool and the login program...
DEBIAN-CVE-2008-1926
Argument injection vulnerability in login login-utils/login.c in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."...
[SECURITY] Fedora 8 Update: fedora-ds-admin-1.1.4-1.fc8
Fedora Administration Server is an HTTP agent that provides management feat ures for Fedora Directory Server. It provides some management web apps that can be used through a web browser. It provides the authentication, access cont rol, and CGI utilities used by the console...
Unixware utilities buffer overflow
Buffer overflows in suid utilities /usr/lib/merge/mcd /usr/opt/reliant/bin/hvdisp /usr/opt/reliant/bin/rcvm...
[SECURITY] Fedora 8 Update: audit-1.6.8-4.fc8
The audit package contains the user space utilities for storing and searching the audit records generate by the audit subsystem in the Linux 2.6 kernel...
DSA-1527-1 debian-goodies - privilege escalation
Bulletin has no description...
PT-2008-1124 · Gentoo Linux · Am-Utils
Name of the Vulnerable Software and Affected Versions: am-utils versions prior to 6.1.5 Description: The issue affects the am-utils package in Gentoo Linux and potentially other distributions, allowing local users to exploit it and compromise the confidentiality, integrity, and availability of...
Sami FTP Server 2.0.x - Multiple Commands Remote Denial of Service Vulnerabilities
source: https://www.securityfocus.com/bid/27817/info Sami FTP Server is prone to multiple remote denial-of-service vulnerabilities because the application fails to handle exceptional conditions. An attacker can exploit these issues to crash the affected application, denying service to legitimate...
CVE-2008-0547
CVE-2008-0547 is a cross-site scripting (XSS) vulnerability in CandyPress (CP) 4.1.1.26 and probably earlier 4.x and 3.x versions. It affects the admin/utilities_ConfigHelp.asp page where the helpfield parameter can be exploited by remote attackers to inject arbitrary web script or HTML. The issu...
[SECURITY] Fedora 8 Update: icu-3.8-5.fc8
Tools and utilities for developing with icu...
[SECURITY] Fedora 7 Update: e2fsprogs-1.40.2-3.fc7
The e2fsprogs package contains a number of utilities for creating, checking, modifying, and correcting any inconsistencies in second and third extended ext2/ext3 filesystems. E2fsprogs contains e2fsck used to repair filesystem inconsistencies after an unclean shutdown, mke2fs used to initialize a...
[SECURITY] Fedora 8 Update: e2fsprogs-1.40.2-12.fc8
The e2fsprogs package contains a number of utilities for creating, checking, modifying, and correcting any inconsistencies in second and third extended ext2/ext3 filesystems. E2fsprogs contains e2fsck used to repair filesystem inconsistencies after an unclean shutdown, mke2fs used to initialize a...
Debian Security Advisory DSA 283-1 (xfsdump)
The remote host is missing an update to xfsdump announced via advisory DSA 283-1. OpenVAS Vulnerability Test $Id: deb2831.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 283-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...