CVE-2011-0993

Description

References

• lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html · Vendor Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/95697

Altre vulnerabilità di suse lifecycle management server

• CVE-2013-3709ALTO 7.2WebYaST 1.3 uses weak permissions for config/initializers/secret_token.rb, which allows local users to gain privileges by reading the Rails …
• CVE-2013-7042MEDIO 4.6SUSE Lifecycle Management Server (SLMS) before 1.3.7 uses world-readable permissions for the secret keys, which allows local users to gain p…
• CVE-2013-3710MEDIO 4.3SUSE Lifecycle Management Server (SLMS) before 1.3.7 does not generate a new secret key when the service starts, which allows remote attacke…
• CVE-2010-1325MEDIO 4.3Cross-site request forgery (CSRF) vulnerability in the apache2-slms package in SUSE Lifecycle Management Server (SLMS) 1.0 on SUSE Linux Ent…