8755 matches found
Fedora 10 : prelude-manager-0.9.14.2-2.fc10 (2009-3931)
The configuration file of prelude-manager contains a database password and is world readable. This update restricts permissions to the root account. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...
Fedora 9 : prewikka-0.9.14-2.fc9 (2009-3789)
The permissions on the prewikka.conf file are world readable and contain the sql database password used by prewikka. This update makes it readable just by the apache group. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...
Fedora 10 : ntop-3.3.8-3.fc10 (2009-2805)
ls -lh /var/log/ntop/access.log -rw-rw-rw- 1 root root 0 2009-02-04 11:53 /var/log/ntop/access.log Fixed. log world-writable when the --access-log- file option is used. This option is not used in Fedora or Red Hat by default and is not noted in the configuration file. It is, however, noted in the...
Fedora Core 10 FEDORA-2009-2805 (ntop)
The remote host is missing an update to ntop announced via advisory FEDORA-2009-2805. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
CVE-2008-6713
World in Conflict WIC 1.008 and earlier allows remote attackers to cause a denial of service access violation and crash via a zero-byte data block to TCP port 48000, which triggers a NULL pointer dereference...
Null pointer dereference
World in Conflict WIC 1.008 and earlier allows remote attackers to cause a denial of service access violation and crash via a zero-byte data block to TCP port 48000, which triggers a NULL pointer dereference...
CVE-2008-6713
World in Conflict WIC 1.008 and earlier allows remote attackers to cause a denial of service access violation and crash via a zero-byte data block to TCP port 48000, which triggers a NULL pointer dereference...
device-mapper-multipath: insecure permissions on multipathd.sock
The Device Mapper multipathing driver aka multipath-tools or device-mapper-multipath 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise Server SLES, Fedora, and possibly other operating systems, uses world-writable permissions for the socket file aka /var/run/multipathd.sock, which allows loc...
Debian Security Advisory DSA 1758-1 (nss-ldapd)
The remote host is missing an update to nss-ldapd announced via advisory DSA 1758-1. OpenVAS Vulnerability Test $Id: deb17581.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1758-1 nss-ldapd Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Information disclosure
GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow local users to obtain sensitive session information...
CVE-2009-1214
GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow local users to obtain sensitive session information...
CVE-2009-1214
GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow local users to obtain sensitive session information...
DEBIAN-CVE-2009-1214
GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow local users to obtain sensitive session information...
CVE-2009-1214
GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow local users to obtain sensitive session information...
CVE-2009-1214
GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow local users to obtain sensitive session information...
[SECURITY] [DSA 1758-1] New nss-ldapd packages fix information disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1758-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 30, 2009 http://www.debian.org/security/faq -...
nss-ldapd Weak file permissions
/etc/nss-ldapd.conf flie with LDAP password is world readable...
CVE-2009-1073
nss-ldapd before 0.6.8 uses world-readable permissions for the /etc/nss-ldapd.conf file, which allows local users to obtain a cleartext password for the LDAP server by reading the bindpw field...
Default credentials
nss-ldapd before 0.6.8 uses world-readable permissions for the /etc/nss-ldapd.conf file, which allows local users to obtain a cleartext password for the LDAP server by reading the bindpw field...