CVE-2014-2830

CVE-2014-2830 concerns a stack-based buffer overflow in the cifs-utils package (before version 6.4), specific to the code paths in cifskey.c or cifscreds.c as used by pam_cifscreds. The description provided across connected reports indicates a remote impact with unspecified effects and vectors. S...

CVE-2014-2830

Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pamcifscreds, allows remote attackers to have unspecified impact via unknown vectors...

Mandriva Linux Security Advisory : cifs-utils (MDVSA-2015:114)

Updated cifs-utils packages fix security vulnerability : Sebastian Krahmer discovered a stack-based buffer overflow flaw in cifscreds.c CVE-2014-2830. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandriva Linux...

Debian DLA-108-1 : nfs-utils security update

In the past, rpc.statd posted SMNOTIFY requests using the same socket it used for sending downcalls to the kernel. To receive replies from remote hosts, the socket was bound to INADDRANY. To prevent unwanted data injection, bind this socket to the loopback address. NOTE: Tenable Network Security...

USN-2524-1: eCryptfs vulnerability

Sylvain Pelissier discovered that eCryptfs did not generate a random salt when encrypting the mount passphrase with the login password. An attacker could use this issue to discover the login password used to protect the mount passphrase and gain unintended access to the encrypted files...

[SECURITY] [DSA 3165-1] xdg-utils security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3165-1 [email protected] http://www.debian.org/security/ Michael Gilbert February 21, 2015 http://www.debian.org/security/faq -...

Low: Red Hat Security Advisory: powerpc-utils security, bug fix, and enhancement update

Updated powerpc-utils packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives...

Debian DSA-3165-1 : xdg-utils - security update

Jiri Horner discovered a way to cause xdg-open, a tool that automatically opens URLs in a user's preferred application, to execute arbitrary commands remotely. This problem only affects /bin/sh implementations that don't sanitize local variables. Dash, which is the default /bin/sh in Debian is...

[SECURITY] [DSA 3165-1] xdg-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3165-1 [email protected] http://www.debian.org/security/ Michael Gilbert February 21, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3165-1] xdg-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3165-1 [email protected] http://www.debian.org/security/ Michael Gilbert February 21, 2015 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 3165-1 (xdg-utils - security update)

Jiri Horner discovered a way to cause xdg-open, a tool that automatically opens URLs in a user OpenVAS Vulnerability Test $Id: deb3165.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3165-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright:...

DSA-3165-1 xdg-utils - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3165-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-8165

scripts/amsvis/powerpcAMS/amsnet.py in powerpc-utils-python uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object...

MGASA-2015-0058 Updated xdg-utils packages fix CVE-2014-9622

Updated xdg-utils package fixes security vulnerability: John Houwer discovered a way to cause xdg-open, a tool that automatically opens URLs in a user's preferred application, to execute arbitrary commands remotely CVE-2014-9622. The xdg-utils has been updated to a much more recent snapshot, and...

Updated xdg-utils packages fix CVE-2014-9622

Updated xdg-utils package fixes security vulnerability: John Houwer discovered a way to cause xdg-open, a tool that automatically opens URLs in a user's preferred application, to execute arbitrary commands remotely CVE-2014-9622. The xdg-utils has been updated to a much more recent snapshot, and...

openSUSE Security Update : xdg-utils (openSUSE-SU-2015:0191-1)

This update fixes the following security issue : - Fix Remote code execution in xdg-open due to bad quotes handling CVE-2014-9622 bnc913676. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

CentOS Update for glibc CESA-2015:0092 centos7

Check the version of glibc SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882108";...

[SECURITY] Fedora 21 Update: xdg-utils-1.1.0-0.35.rc3.fc21

The xdg-utils package is a set of simple scripts that provide basic desktop integration functions for any Free Desktop, such as Linux. They are intended to provide a set of defacto standards. This means that: Third party software developers can rely on these xdg-utils for all of their simple...

Fedora 21 : xdg-utils-1.1.0-0.35.rc3.fc21 (2015-0954)

refresh packaging to 1.1.0-rc3, and include fix for possible command injection vulnerability, see https://bugs.freedesktop.org/showbug.cgi?id=66670 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...