|
|
| (269 intermediate revisions by 5 users not shown) |
| Line 1: |
Line 1: |
| {{svg-header}} | | {{DeprecatedAndMovedTo|new_location=https://advisories.egi.eu/}} |
| | |
| EGI SVG primarily issues advisories concerning gLite Middleware.
| |
| | |
| CSIRT also issues general alerts at https://wiki.egi.eu/wiki/EGI_CSIRT:Alerts
| |
| | |
| A guide to the risk categories is available at [[SVG:Notes On Risk | Notes On Risk]]
| |
| | |
| | |
| {| {{egi-table}}
| |
| !Date !! Title !! Contents/Link !! Risk !! Status !!
| |
| | |
| | |
| |-
| |
| |2012-08-29 || EMI-1 WMS exposes user proxies || [[SVG:Advisory-SVG-2012-4073 | Advisory-SVG-2012-4073 ]]
| |
| || Critical || Fixed ||
| |
| |-
| |
| | |
| |-
| |
| |2012-08-29 || WMS proxy theft vulnerability || [[SVG:Advisory-SVG-2012-4039 | Advisory-SVG-2012-4039 ]]
| |
| || High || Fixed ||
| |
| |-
| |
| | |
| | |
| | |
| |-
| |
| |2012-04-04 || EMI VOMS CRL handling vulnerability || [[SVG:Advisory-SVG-2012-3438 | Advisory-SVG-2012-3438 ]]
| |
| || Low || Fixed ||
| |
| |-
| |
| | |
| |-
| |
| |2012-04-04 || BDII Predictable passwords || [[SVG:Advisory-SVG-2011-3235 | Advisory-SVG-2011-3235 ]]
| |
| || Low || Fixed ||
| |
| |-
| |
| | |
| | |
| | |
| | |
| |-
| |
| |2012-01-24 || Torque Munge Impersonation vulnerability || [[SVG:Advisory-SVG-2011-3094 | Advisory-SVG-2011-3094 ]]
| |
| || High || Fixed ||
| |
| |-
| |
| | |
| |-
| |
| |2012-01-24 || APEL publisher File permission vulnerability || [[SVG:Advisory-SVG-2011-504 | Advisory-SVG-2011-504 ]]
| |
| || Low || Fixed ||
| |
| |-
| |
| | |
| | |
| | |
| | |
| |-
| |
| |2012-01-09 || File Permission on directory in vdt_globus_data_server RPM || [[SVG:Advisory-SVG-2010-457 | Advisory-SVG-2010-457 ]]
| |
| || Low || Disclosed ||
| |
| |-
| |
| | |
| | |
| | |
| | |
| |-
| |
| |2011-11-15 || BDII file permission and password vulnerability || [[SVG:Advisory-SVG-2011-1414 | Advisory-SVG-2011-1414 ]]
| |
| || Moderate || Fixed ||
| |
| |-
| |
| | |
| | |
| |-
| |
| |2011-08-15 || Torque Authentication Bypass Vulnerability CVE-2011-2907
| |
| || [[SVG:Advisory-SVG-2011-2296 | Advisory-SVG-2011-2296 ]]
| |
| || High || Fixed ||
| |
| |-
| |
| | |
| |-
| |
| |2011-07-28 || Insecure Library Loading Vulnerability in the VOMS server
| |
| || [[SVG:Advisory-SVG-2011-342 | Advisory-SVG-2011-342 ]]
| |
| || Low || Fixed ||
| |
| |-
| |
| |-
| |
| |2011-07-28 || VOMS server /tmp file vulnerability
| |
| || [[SVG:Advisory-SVG-2011-1866 | Advisory-SVG-2011-1866 ]]
| |
| | |
| || Low || Fixed ||
| |
| |-
| |
| | |
| | |
| |-
| |
| |2011-06-24 || Torque Server Buffer Overflow Vulnerability - CVE-2011-2193.
| |
| || [[SVG:Advisory-SVG-2011-1870 | Advisory-SVG-2011-1870 ]]
| |
| | |
| || Moderate || Fixed ||
| |
| |-
| |
| |-
| |
| |2011-04-19 || Critical Vulnerability detected in dCache Admin Web Interface
| |
| || [[SVG:Advisory-SVG-2011-1569 | Advisory-SVG-2011-1569 ]]
| |
| | |
| || Critical || Fixed ||
| |
| |-
| |
| |-
| |
| |2011-04-19 || VOMS Admin vulnerabilities found by carrying out detailed vulnerability assessment of the package
| |
| || [[SVG:Advisory-SVG-2011-505 | Advisory-SVG-2011-505 ]]
| |
| || High || Fixed ||
| |
| |-
| |
| |-
| |
| |2011-04-04 || WMS vulnerability allowing proxy access
| |
| || [[SVG:Advisory-SVG-2011-1502 | Advisory-SVG-2011-1502 ]]
| |
| || High || Fixed ||
| |
| |-
| |
| |-
| |
| |2011-03-11 || SQL injection vulnerability in the APEL software
| |
| || [[SVG:Advisory-SVG-2011-373 | Advisory-SVG-2011-373 ]]
| |
| || Moderate || Fixed ||
| |
| |-
| |
| | |
| | |
| | |
| | |
| |}
| |
The wiki is deprecated and due to be decommissioned by the end of September 2022.