CVE-2006-7108

概要

参考情報

• secunia.com/advisories/25098 · Vendor Advisory
• secunia.com/advisories/25530 · Vendor Advisory
• secunia.com/advisories/25692 · Vendor Advisory
• secunia.com/advisories/25935 · Vendor Advisory
• support.avaya.com/elmodocs2/security/ASA-2007-252.htm
• mandriva.com/security/advisories
• redhat.com/support/errata/RHSA-2007-0235.html
• securityfocus.com/bid/24321
• bugzilla.redhat.com/bugzilla/show_bug.cgi
• issues.rpath.com/browse/RPL-1359
• oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9689

util-linux のその他の脆弱性

• CVE-2005-2876高 7.2umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount perm…
• CVE-2004-0080中 5.0The login program in util-linux 2.11 and earlier uses a pointer after it has been freed and reallocated, which could cause login to leak sen…
• CVE-2003-0094中 5.0A patch for mcookie in the util-linux package for Mandrake Linux 8.2 and 9.0 uses /dev/urandom instead of /dev/random, which causes mcookie …
• CVE-2001-1175高 7.2vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users…
• CVE-2001-1147高 7.2The PAM implementation in /bin/login of the util-linux package before 2.11 causes a password entry to be rewritten across multiple PAM calls…