615 matches found
Linux: Check options for /var directory
The /var directory is used by the system during an operation. This script tests options set on /var filesystem. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU...
Linux: Separate partition for /var/log/audit
The /var/log/audit directory is used by auditd. This script tests if a separate partition exists for /var/log/audit. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GN...
Linux: Separate partition for /var/tmp
The /var/tmp directory is a world-writable directory used for temporary storage. This script tests if a separate partition exists for /var/tmp. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify i...
openSUSE: Security Advisory for openldap2 (openSUSE-SU-2019:2157-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2012-4480
mom creates world-writable pid files in /var/run...
Code injection
mom creates world-writable pid files in /var/run...
CVE-2012-4480
mom creates world-writable pid files in /var/run...
CVE-2012-4480
CVE-2012-4480 affects the mom tool, where it creates world-writable PID files in /var/run. This local issue could let an attacker influence PID handling and terminate other processes, as indicated by CNVD/Fedora advisories and the NVD entry. The vulnerability is tied to local access and uncertain...
openSUSE Security Update : nfs-utils (openSUSE-2019-2435)
This update for nfs-utils fixes the following issues : - CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. bsc1150733 This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plug...
SUSE SLED15 / SLES15 Security Update : nfs-utils (SUSE-SU-2019:2782-1)
This update for nfs-utils fixes the following issues : CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. bsc1150733 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automaticall...
SUSE SLES12 Security Update : nfs-utils (SUSE-SU-2019:2771-1)
This update for nfs-utils fixes the following issues : CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. bsc1150733 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automaticall...
CVE-2015-9470
The history-collection plugin through 1.1.1 for WordPress has directory traversal via the download.php var parameter...
UBUNTU-CVE-2019-3689
The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains files owned and managed by root. If...
CVE-2019-3689 nfs-utils: root-owned files stored in insecure /var/lib/nfs directory
The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains files owned and managed by root. If...
php: Heap use after free in ext/standard/var_unserializer.re
ext/standard/varunserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue can have an...
CVE-2019-11071
SPIP 3.1 before 3.1.10 and 3.2 before 3.2.4 allows authenticated visitors to execute arbitrary code on the host server because varmemotri is mishandled...
MATIO Out-of-Bounds Write Vulnerability
matio is a C library for reading and writing MATLAB MAT files. An out-of-bounds write vulnerability exists in libmatio.a in matio 1.5.13. An attacker can exploit this vulnerability to cause a SEGV in the MatVarFree function in mat.c...
MATIO stack buffer over-read vulnerability
matio is a C library for reading and writing MATLAB MAT files. A stack buffer over-read vulnerability exists in the MatVarPrint function in mat.c in libmatio.a in matio 1.5.13. No details of the vulnerability are provided at this time...