CVE-2013-3709

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2013-12/msg00006.html
• lists.opensuse.org/opensuse-security-announce/2013-12/msg00012.html
• lists.opensuse.org/opensuse-security-announce/2013-12/msg00013.html
• lists.opensuse.org/opensuse-security-announce/2013-12/msg00014.html
• lists.opensuse.org/opensuse-security-announce/2014-01/msg00001.html
• bugzilla.novell.com/show_bug.cgi · Exploit
• rapid7/metasploit-framework

suse lifecycle management server のその他の脆弱性

• CVE-2011-0993低 2.1SUSE Lifecycle Management Server before 1.1 uses world readable postgres credentials, which allows local users to obtain sensitive informati…
• CVE-2013-7042中 4.6SUSE Lifecycle Management Server (SLMS) before 1.3.7 uses world-readable permissions for the secret keys, which allows local users to gain p…
• CVE-2013-3710中 4.3SUSE Lifecycle Management Server (SLMS) before 1.3.7 does not generate a new secret key when the service starts, which allows remote attacke…
• CVE-2010-1325中 4.3Cross-site request forgery (CSRF) vulnerability in the apache2-slms package in SUSE Lifecycle Management Server (SLMS) 1.0 on SUSE Linux Ent…