CVE-2014-2830: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pamcifscreds, allows remote attackers to have unspecified impact via unknown vectors...

Mandriva Linux Security Advisory : cifs-utils (MDVSA-2015:114)

Updated cifs-utils packages fix security vulnerability : Sebastian Krahmer discovered a stack-based buffer overflow flaw in cifscreds.c CVE-2014-2830. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandriva Linux...

Debian DLA-108-1 : nfs-utils security update

In the past, rpc.statd posted SMNOTIFY requests using the same socket it used for sending downcalls to the kernel. To receive replies from remote hosts, the socket was bound to INADDRANY. To prevent unwanted data injection, bind this socket to the loopback address. NOTE: Tenable Network Security...

USN-2524-1: eCryptfs vulnerability

Sylvain Pelissier discovered that eCryptfs did not generate a random salt when encrypting the mount passphrase with the login password. An attacker could use this issue to discover the login password used to protect the mount passphrase and gain unintended access to the encrypted files...

[SECURITY] [DSA 3165-1] xdg-utils security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3165-1 [email protected] http://www.debian.org/security/ Michael Gilbert February 21, 2015 http://www.debian.org/security/faq -...

Low: Red Hat Security Advisory: powerpc-utils security, bug fix, and enhancement update

Updated powerpc-utils packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives...

Debian DSA-3165-1 : xdg-utils - security update

Jiri Horner discovered a way to cause xdg-open, a tool that automatically opens URLs in a user's preferred application, to execute arbitrary commands remotely. This problem only affects /bin/sh implementations that don't sanitize local variables. Dash, which is the default /bin/sh in Debian is...

[SECURITY] [DSA 3165-1] xdg-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3165-1 [email protected] http://www.debian.org/security/ Michael Gilbert February 21, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3165-1] xdg-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3165-1 [email protected] http://www.debian.org/security/ Michael Gilbert February 21, 2015 http://www.debian.org/security/faq -...

DSA-3165-1 xdg-utils - security update

Bulletin has no description...

Debian Security Advisory DSA 3165-1 (xdg-utils - security update)

Jiri Horner discovered a way to cause xdg-open, a tool that automatically opens URLs in a user OpenVAS Vulnerability Test $Id: deb3165.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3165-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright:...

Debian: Security Advisory (DSA-3165-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-8165

scripts/amsvis/powerpcAMS/amsnet.py in powerpc-utils-python uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object...

CVE-2014-8165: Insufficient Verification of Data Authenticity

scripts/amsvis/powerpcAMS/amsnet.py in powerpc-utils-python uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object...

Updated xdg-utils packages fix CVE-2014-9622

Updated xdg-utils package fixes security vulnerability: John Houwer discovered a way to cause xdg-open, a tool that automatically opens URLs in a user's preferred application, to execute arbitrary commands remotely CVE-2014-9622. The xdg-utils has been updated to a much more recent snapshot, and...

MGASA-2015-0058 Updated xdg-utils packages fix CVE-2014-9622

Updated xdg-utils package fixes security vulnerability: John Houwer discovered a way to cause xdg-open, a tool that automatically opens URLs in a user's preferred application, to execute arbitrary commands remotely CVE-2014-9622. The xdg-utils has been updated to a much more recent snapshot, and...

PT-2015-3406

Name of the Vulnerable Software and Affected Versions xdg-utils version 1.1.0 rc1 Description The issue is related to the open generic xdg mime function in xdg-open, which does not properly handle local variables when using dash. This allows remote attackers to execute arbitrary commands via a...

openSUSE Security Update : xdg-utils (openSUSE-SU-2015:0191-1)

This update fixes the following security issue : - Fix Remote code execution in xdg-open due to bad quotes handling CVE-2014-9622 bnc913676. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

CentOS Update for glibc CESA-2015:0092 centos7

Check the version of glibc SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882108";...

[SECURITY] Fedora 21 Update: xdg-utils-1.1.0-0.35.rc3.fc21

The xdg-utils package is a set of simple scripts that provide basic desktop integration functions for any Free Desktop, such as Linux. They are intended to provide a set of defacto standards. This means that: Third party software developers can rely on these xdg-utils for all of their simple...