173 matches found
DEBIAN-CVE-2012-2248
An issue was discovered in dhclient 4.3.1-6 due to an embedded path variable...
CVE-2012-2248
An issue was discovered in dhclient 4.3.1-6 due to an embedded path variable...
CVE-2012-2248
An issue was discovered in dhclient 4.3.1-6 due to an embedded path variable...
CVE-2012-2248
An issue was discovered in dhclient 4.3.1-6 due to an embedded path variable...
CVE-2012-2248
An issue was discovered in dhclient 4.3.1-6 due to an embedded path variable...
CVE-2012-2248
CVE-2012-2248 affects dhclient 4.3.1-6 due to an embedded path variable, described across multiple sources as a path traversal issue. The available connected documents consistently identify the problem as a vulnerability in the dhclient component, but do not provide concrete exploitation steps, a...
CVE-2012-2248
An issue was discovered in dhclient 4.3.1-6 due to an embedded path variable...
CVE-2012-2248: Improper Input Validation
An issue was discovered in dhclient 4.3.1-6 due to an embedded path variable...
CVE-2018-16156
In PaperStream IP TWAIN 1.42.0.5685 Service Update 7, the FJTWSVIC service running with SYSTEM privilege processes unauthenticated messages received over the FjtwMkicFjicube32 named pipe. One of these message processing functions attempts to dynamically load the UninOldIS.dll library and executes...
CVE-2018-16156: Untrusted Search Path
In PaperStream IP TWAIN 1.42.0.5685 Service Update 7, the FJTWSVIC service running with SYSTEM privilege processes unauthenticated messages received over the FjtwMkicFjicube32 named pipe. One of these message processing functions attempts to dynamically load the UninOldIS.dll library and executes...
CVE-2017-7642
The sudo helper in the HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion before 4.0.21 allows local users to gain root privileges by leveraging failure to verify the path to the encoded ruby script or scrub the PATH variable...
CVE-2017-7642
The sudo helper in the HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion before 4.0.21 allows local users to gain root privileges by leveraging failure to verify the path to the encoded ruby script or scrub the PATH variable...
CVE-2017-7642: Untrusted Search Path
The sudo helper in the HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion before 4.0.21 allows local users to gain root privileges by leveraging failure to verify the path to the encoded ruby script or scrub the PATH variable...
Design/Logic Flaw
In BMC Patrol before 9.13.10.02, the binary "listguests64" is configured with the setuid bit. However, when executing it, it will look for a binary named "virsh" using the PATH environment variable. The "listguests64" program will then run "virsh" using root privileges. This allows local users to...
Roxio Toast 7 DejaVu Component PATH Variable Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19596/info Roxio Toast is prone to a local privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. As a result, local users may set their own search path for external applications tha...
Progress Database 9.1 Environment Variable Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7916/info It has been reported that Progress database does not properly handle untrusted input when opening shared libraries. Specifically, the dlopen function used by several Progress utilities checks the user's PATH...
CVE-2012-5381
CVE-2012-5381 describes an untrusted search path vulnerability in PHP 5.3.17 when installed in the top-level C:\ directory. A Trojan horse DLL (wlbsctrl.dll) placed in C:\PHP could be added to PATH and loaded by the IKE and AuthIP IPsec Keying Modules service, potentially allowing local privilege...
CVE-2012-5377
Untrusted search path vulnerability in the installation functionality in ActivePerl 5.16.1.1601, when installed in the top-level C:\ directory, allows local users to gain privileges via a Trojan horse DLL in the C:\Perl\Site\bin directory, which is added to the PATH system environment variable, a...
Google Chrome multiple vulnerabilities - October 10(Linux)
The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnoct10lin.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities - October 10Linux Authors: Madhuri D Copyright: Copyright c 2010 Greenbone...