IT, Cloud & DevOps Blog

SLES 12 — id3lib — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — id3lib — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 December 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2007:019 (see also SUSE bugzilla) Related CVEs: CVE-2007-4460 Upstream summary: The RenderV2ToFile function in tag_file.cpp in id3lib (aka libid3) 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on […]

Read more
IBM AIX 7.2 — CVE-1999-0003 — buffer overflow — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-1999-0003 — buffer overflow — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 17 December 2015 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-1999-0003, IBM PSIRT advisory page CVE: CVE-1999-0003 NVD summary: Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd). References: ftp://patches.sgi.com/support/free/security/advi   ftp://patches.sgi.com/support/free/security/advi   www.securityfocus.com/bid/122 Table of contents Symptom & […]

Read more
SLES 12 — python-python-memcached — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — python-python-memcached — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 December 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2015:1890-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-3221 CVE-2015-3241 CVE-2015-3280 CVE-2015-5240 CVE-2015-7713 Upstream summary: OpenStack Neutron before 2014.2.4 (juno) and 2015.1.x before 2015.1.1 (kilo), when using the IPTables firewall driver, allows remote […]

Read more
IBM AIX 7.2 — CVE-2006-1246 — vulnerability — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-2006-1246 — vulnerability — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 13 December 2015 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2006-1246, IBM Support Bulletin CVE: CVE-2006-1246 NVD summary: Unspecified vulnerability in mklvcopy in BOS.RTE.LVM in IBM AIX 5.3 allows local users to execute arbitrary commands when mklvcopy calls external commands, possibly due […]

Read more
SLES 12 — dstat — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — dstat — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 10 December 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2009-3894 Upstream summary: Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow local users to gain privileges via a Trojan horse Python module in (1) the current working […]

Read more
SLES 12 — argyllcms — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — argyllcms — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 9 December 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2012-1616 Upstream summary: Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause […]

Read more
CHAT