USN-258-1: PostgreSQL vulnerability

Akio Ishida discovered that the SET SESSION AUTHORIZATION command did not properly verify the validity of its argument. An authenticated PostgreSQL user could exploit this to crash the server. However, this does not affect the official binary Ubuntu packages. The crash can only be triggered if th...

postgresql81-server -- SET ROLE privilege escalation

The PostgreSQL team reports: Due to inadequate validity checking, a user could exploit the special case that SET ROLE normally uses to restore the previous role setting after an error. This allowed ordinary users to acquire superuser status, for example...

DEBIAN-CVE-2004-2313

Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error messages for incorrect passwords versus correct passwords on non-mail-enabled accounts such as root, which allows remote attackers to guess the root password via brute force attacks...

CVE-2004-1105

The CVE-2004-1105 entry concerns Nortel Networks Contivity VPN Client, where the authentication error message varies depending on whether the username is valid, leading to partial information disclosure over a network. The NVD entry documents a Network-level vulnerability with a base score of 5.0...

Cisco Aironet AP1100 fails to provide universal login error messages thereby disclosing validity of user account

Overview A vulnerability in the Cisco Aironet 1100 Series Access Point may allow a remote attacker to discover valid accounts on the access point. Description Cisco describes the Aironet 1100 Series Access Point as, "an affordable and upgradable 802.11b wireless LAN WLAN solution, setting the...

GnuPG contains flaw in key validation code

Overview A vulnerability in GnuPG may cause keys with multiple user ID's to give other user IDs on the key a false amount of validity. Description From the GnuPG homepage:GnuPG stands for GNU Privacy Guard and is GNU's tool for secure communication and data storage. It can be used to encrypt data...

Key validity bug in GnuPG 1.2.1 and earlier

As part of the development of GnuPG 1.2.2, a bug was discovered in the key validation code. This bug causes keys with more than one user ID to give all user IDs on the key the amount of validity given to the most-valid key. This bug does not impact any key with only one user ID. Photo IDs "user...

PGPsdk Key Validity Vulnerability

http://www.pgp.com/support/product-advisories/pgpsdk.asp A vulnerability in PGP's display of key validity has been discovered that could allow an attacker to fool users into thinking that a valid signature was created by what is actually an invalid user ID. If the attacker can obtain a signature ...

GNU Ffingerd 1.19 - Username Validity Disclosure

GNU Ffingerd 1.19 - Username Validity Disclosure source: https://www.securityfocus.com/bid/1841/info A vulnerability in Ffingerd version 1.19, the popular remote user-information server, which allows a remote user to determine whether or not a given username exists on the system. Normally, if a...

GNU Ffingerd 1.19 - 'Username' Validity Disclosure

source: https://www.securityfocus.com/bid/1841/info A vulnerability in Ffingerd version 1.19, the popular remote user-information server, which allows a remote user to determine whether or not a given username exists on the system. Normally, if a user has declined to be open to finger requests, a...

ROS-2-3161

2.3161 Notification on the update of the Red OS OPERATION SYSTEM MIS RED SOFT LLC notifies about renewal of the previously obtained certificate of conformity of FSTEC of Russia 4060 till 12.01.2029 of the operating system "RED OS", decimal number RU.29926343.02.01-01. You can contact the technica...

ROS-2-4377

2.4377 Notification of Update of the Red OS OPERATION SYSTEM MIS RED SOFT LLC notifies of the renewal of the previously obtained certificate of conformity of FSTEC of Russia 4060 until 12.01.2029 of the operating system "RED OS", decimal number RU.29926343.02.01-01. You can contact the technical...

ROS-2-4670

2.4670 Notice of Update for the RED OS Operating System RU “RED SOFT” LLC announces the extension of the validity period of the previously received compliance certificate issued by FSTEK Russia No. 4060 until 01.01.2029. The operating system is “RED OS”, decimally numbered RU.29926343.02.01-01. F...

ROS-2-4609

OOO “RED SOFT” notifies that the validity period of the previously received compliance certificate from FSTEK of Russia No. 4060 has been extended until 01.01.2029. The operating system is “RED OS”; the decimally numbered certificate number is RU.29926343.02.01-01. For questions regarding product...

ROS-2-4564

2.4564 Notice of Update for the RED OS Operating System RU “RED SOFT” LLC announces the extension of the validity period of the previously received compliance certificate issued by FSTEK Russia No. 4060 until 01.01.2029. The operating system is “RED OS”, decimal number RU.29926343.02.01-01. For...

ROS-2-2546

2.2546 Notification on the update of the Red OS OPERATING SYSTEM MIS RED SOFT LLC notifies of the extension of the validity of the previously obtained FSTEC of Russia Certificate of Conformity No. 4060 until 12.01.2029 of the operating system "RED OS", decimal number RU.29926343.02.01-01. You can...

ROS-2-4784

2.4784 Notice of Update for the RED OS Operating System RU “RED SOFT” LLC announces the extension of the validity period of the previously received compliance certificate issued by FSTEK Russia No. 4060 until 01.01.2029. The operating system is “RED OS”, decimally numbered RU.29926343.02.01-01. F...

ROS-2-4534

OOO “RED SOFT” notifies that the validity period of the previously received compliance certificate from FSTEK of Russia No. 4060 has been extended until 01.01.2029. The operating system is “RED OS”, decimal number RU.29926343.02.01-01. For questions regarding product updates and obtaining necessa...

ROS-2-4697

2.4697 Notice of Update for the RED OS Operating System RU “RED SOFT” LLC announces the extension of the validity period of the previously received compliance certificate issued by FSTEK Russia No. 4060 until 01.01.2029. The operating system is “RED OS”, decimally numbered RU.29926343.02.01-01. F...

ROS-2-4671

2.4671 Notice of Update for the RED OS Operating System RU “RED SOFT” LLC announces the extension of the validity period of the previously received compliance certificate issued by FSTEK Russia No. 4060 until 01.01.2029. The operating system is “RED OS”, decimally numbered RU.29926343.02.01-01. F...