CVE-2009-0180

Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 10, omit TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions, possibly a related issue to CVE-2008-1376...

CVE-2009-0180

CVE-2009-0180 corresponds to build-time omission of TCP wrappers support in nfs-utils for certain Fedora releases (Fedora 9 before 1.1.2-9.fc9 and Fedora 10 before 1.1.4-6.fc10). This could allow remote attackers to bypass access restrictions due to missing host-based protection. Connected adviso...

Fedora 10 : nfs-utils-1.1.4-6.fc10 (2009-0266)

Added warnings to tcp wrapper code when mounts are denied due to misconfigured DNS configurations. gssd: By default, don't spam syslog when users' credentials expire Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenabl...

[SECURITY] Fedora 9 Update: gtkmozembedmm-1.4.2.cvs20060817-24.fc9

This package provides a C++/gtkmm wrapper for GtkMozEmbed from Mozilla 1.4.x to 1.7.x. The wrapper provides a convenient interface for C++ programmers to use the Gtkmozembed HTML-rendering widget inside their software...

MailScanner Multiple Insecure Temporary Files Vulnerabilities

MailScanner is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Code injection

dtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/awstats.log, b /tmp/spam.log., and c /tmp/spamerr.log temporary files, related to the 1 accesslog.php and 2 sa-wrapper scripts...

CVE-2008-4951

dtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/awstats.log, b /tmp/spam.log., and c /tmp/spamerr.log temporary files, related to the 1 accesslog.php and 2 sa-wrapper scripts...

CVE-2008-4951

CVE-2008-4951 affects dtc 0.29.6, enabling local users to overwrite arbitrary files through a symlink attack on /tmp/awstats.log, /tmp/spam.log.#####, and /tmp/spam_err.log, related to the accesslog.php and sa-wrapper scripts. The cited sources (NVD, SUSE, Ubuntu, CVE records) confirm the local a...

CVE-2008-4951

dtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/awstats.log, b /tmp/spam.log., and c /tmp/spamerr.log temporary files, related to the 1 accesslog.php and 2 sa-wrapper scripts...

[SECURITY] Fedora 8 Update: gtkmozembedmm-1.4.2.cvs20060817-23.fc8

This package provides a C++/gtkmm wrapper for GtkMozEmbed from Mozilla 1.4.x to 1.7.x. The wrapper provides a convenient interface for C++ programmers to use the Gtkmozembed HTML-rendering widget inside their software...

[SECURITY] Fedora 9 Update: gtkmozembedmm-1.4.2.cvs20060817-21.fc9

This package provides a C++/gtkmm wrapper for GtkMozEmbed from Mozilla 1.4.x to 1.7.x. The wrapper provides a convenient interface for C++ programmers to use the Gtkmozembed HTML-rendering widget inside their software...

Mozilla privilege escalation via XPCnativeWrapper pollution

The XPConnect component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to "pollute XPCNativeWrappers" and execute arbitrary code with chrome privileges via vectors related to 1 chrome XBL and 2 chrome JS...

Gentoo Security Advisory GLSA 200502-13 (Perl)

The remote host is missing updates announced in advisory GLSA 200502-13. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ike-scan (NASL wrapper)

ike-scan NASL wrapper This plugin runs ike-scan to identify IPSEC VPN endpoints. It will attempt to enumerate supported cipher suites, bruteforce valid groupnames and fingerprint any endpoint identified. OpenVAS Vulnerability Test $Id: ike-scan.nasl 7153 2017-09-15 15:03:32Z cfischer $ Descriptio...

ike-scan (NASL wrapper)

This VT is deprecated. SPDX-FileCopyrightText: 2008 Tim Brown and Vlatko Kosturjak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

[SECURITY] Fedora 8 Update: gtkmozembedmm-1.4.2.cvs20060817-19.fc8

This package provides a C++/gtkmm wrapper for GtkMozEmbed from Mozilla 1.4.x to 1.7.x. The wrapper provides a convenient interface for C++ programmers to use the Gtkmozembed HTML-rendering widget inside their software...

[SECURITY] Fedora 8 Update: pywbxml-0.1-2.fc8

Python wrapper for wbxml2...

[SECURITY] Fedora 7 Update: scponly-4.6-10.fc7

scponly is an alternative 'shell' for system administrators who would like to provide access to remote users to both read and write local files without providing any remote execution priviledges. Functionally, it is best described as a wrapper to the "tried and true" ssh suite of applications...

[SECURITY] Fedora 8 Update: gtkmozembedmm-1.4.2.cvs20060817-17.fc8

This package provides a C++/gtkmm wrapper for GtkMozEmbed from Mozilla 1.4.x to 1.7.x. The wrapper provides a convenient interface for C++ programmers to use the Gtkmozembed HTML-rendering widget inside their software...

Design/Logic Flaw

PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service application crash via a long string in 1 the domain parameter to the dgettext function, the message parameter to the 2 dcgettext or 3 gettext function, the msgid1 parameter to the 4 dngettext or 5 ngettext...