Alerts This Week
Warning Icon 1 664
Alerts This Week
Warning Icon 1 664

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
87

Debian: DSA-2504-1 Moderate: Bcfg2 Security Vulnerability Notification

It was discovered that malicious clients can trick the server component of the Bcfg2 configuration management system to execute commands with root privileges. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2503-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Florian Weimer June 28, 2012 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : bcfg2 Vulnerability : shell command injection Problem type : remote Debian-specific: no CVE ID : CVE-2012-3366 Debian Bug : 679272 It was discovered that malicious clients can trick the server component of the Bcfg2 configuration management system to execute commands with root privileges. For the stable distribution (squeeze), this problem has been fixed in version 1.0.1-3+squeeze2. For the unstable distribution (sid), this problem has been fixed in version 1.2.2-2. We recommend that you upgrade your bcfg2 packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Enhance bcfg2 immediately to address potential vulnerabilities related to remote command execution in the configuration management framework of Debian.. Debian Security, Command Injection, Bcfg2, Update. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jun 28, 2012 Important Debian
87

Debian: DSA-2302-1 Moderate: Bcfg2 Remote Execution Risk

It has been discovered that the bcfg2 server, a configuration management server for bcfg2 clients, is not properly sanitizing input from bcfg2 clients before passing it to various shell commands. This enables an attacker in control of a bcfg2 client to execute arbitrary commands on . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-2302-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Nico Golde Sep 7, 2011 http://www.debian.org/security/faq - -------------------------------------------------------------------------- Package : bcfg2 Vulnerability : missing input sanitization Problem type : remote Debian-specific: no Debian bug : 640028 CVE IDs : CVE-2011-3211 It has been discovered that the bcfg2 server, a configuration management server for bcfg2 clients, is not properly sanitizing input from bcfg2 clients before passing it to various shell commands. This enables an attacker in control of a bcfg2 client to execute arbitrary commands on the server with root privileges. For the oldstable distribution (lenny), this problem has been fixed in version 0.9.5.7-1.1+lenny1. For the stable distribution (squeeze), this problem has been fixed in version 1.0.1-3+squeeze1 For the testing distribution (wheezy), this problem has been fixed in version 1.1.2-2. For the unstable distribution (sid), this problem has been fixed in version 1.1.2-2. We recommend that you upgrade your bcfg2 packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Uncover the bcfg2 security patch highlighting insufficient input validation and risks of remote command execution. Urgent upgrade suggested.. bcfg2 Management, Debian Security, RemoteCommand Execution. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Sep 07, 2011 Important Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here