TerraMaster TOS 4.2.06 - Unauthenticated Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "TerraMaster TOS 4.2.06 - Unauthenticated Remote Code Execution", 'Description' = %q This module exploits a unauthenticated command execution...

Oracle Solaris SunSSH PAM parse_user_name() Buffer Overflow Exploit

This Metasploit module exploits a stack-based buffer overflow in the Solaris PAM library's username parsing code, as used by the SunSSH daemon when the keyboard-interactive authentication method is specified. Tested against SunSSH 1.1.5 on Solaris 10u11 1/13 x86 in VirtualBox, VMware Fusion, and...

[SECURITY] Fedora 33 Update: libdb-5.3.28-45.fc33

The Berkeley Database Berkeley DB is a programmatic toolkit that provides embedded database support for both traditional and client/server applications. The Berkeley DB includes B+tree, Extended Linear Hashing, Fixed and Variable-length record access methods, transactions, locking, logging, share...

AIX 7.1 TL 5 : perl (IJ26985)

https://vulners.com/cve/CVE-2020-10543 https://vulners.com/cve/CVE-2020-10543 Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow. Perl before 5.30.3 has an integer overflow related to mishandling of a...

AIX 7.2 TL 3 : perl (IJ26986)

https://vulners.com/cve/CVE-2020-10543 https://vulners.com/cve/CVE-2020-10543 Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow. Perl before 5.30.3 has an integer overflow related to mishandling of a...

EulerOS 2.0 SP5 : perl-DBI (EulerOS-SA-2020-2559)

According to the versions of the perl-DBI package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A buffer overflow was found in perl-DBI 1.643 in DBI.xs. A local attacker who is able to supply a string longer than 300 characters could cause...

Huawei EulerOS: Security Advisory for perl-DBD-MySQL (EulerOS-SA-2020-2558)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for perl-DBI (EulerOS-SA-2020-2525)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for perl-DBI (EulerOS-SA-2020-2559)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : perl-DBD-MySQL (EulerOS-SA-2020-2558)

According to the version of the perl-DBD-MySQL package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - There is a vulnerability of type use-after-free affecting DBD::mysql aka DBD-mysql or the Database Interface DBI MySQL driver for Perl 3.x a...

EulerOS 2.0 SP8 : perl-DBI (EulerOS-SA-2020-2525)

According to the versions of the perl-DBI package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An untrusted pointer dereference flaw was found in Perl-DBI 1.643. A local attacker who is able to manipulate calls to dbddblogin6sv could caus...

Photon OS 3.0: Nxtgn PHSA-2020-3.0-0175

An update of the nxtgn package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0175. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid144077;...

There are vulnerabilities in Perl that affect AIX.

IBM SECURITY ADVISORY First Issued: Wed Dec 9 16:36:39 CST 2020 |Updated: Thu Mar 4 08:59:07 CST 2021 |Update: iFixes now listed for AIX 7200-03-06, 7200-04-03, 7200-05-00, and | 7200-05-01. iFixes now listed for VIOS 3.1.0.50, 3.1.1.30, 3.1.2.0, and | 3.1.2.10. The most recent version of this...

SUSE SLED15 / SLES15 Security Update : perl-DBI (SUSE-SU-2020:2645-1)

This update for perl-DBI fixes the following issues : Security issues fixed : CVE-2020-14392: Memory corruption in XS functions when Perl stack is reallocated bsc1176412. CVE-2020-14393: Fixed a buffer overflow on an overlong DBD class name bsc1176409. Note that Tenable Network Security has...

SUSE SLED15 / SLES15 Security Update : perl-DBI (SUSE-SU-2020:2828-1)

This update for perl-DBI fixes the following issues : CVE-2019-20919: Fixed a NULL profile dereference in dbiprofile bsc1176764. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean...

SUSE SLES12 Security Update : perl-DBI (SUSE-SU-2020:2856-1)

This update for perl-DBI fixes the following issues : CVE-2019-20919: Fixed a NULL profile dereference in dbiprofile bsc1176764. CVE-2013-7490: Fixed memory corruption when using many arguments to methods for CallbacksUsing bsc1176496. Note that Tenable Network Security has extracted the precedin...

SUSE SLES12 Security Update : perl-DBI (SUSE-SU-2020:2661-1)

This update for perl-DBI fixes the following issues : Security issues fixed : CVE-2020-14392: Memory corruption in XS functions when Perl stack is reallocated bsc1176412. CVE-2020-14393: Fixed a buffer overflow on an overlong DBD class name bsc1176409. Note that Tenable Network Security has...

SUSE SLED15 / SLES15 Security Update : perl-DBI (SUSE-SU-2020:3385-1)

This update for perl-DBI fixes the following issues : DBD::File drivers could open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. bsc1176492, CVE-2014-10401, CVE-2014-10402 Note that Tenable Network Security has extracted the preceding...

SUSE SLED15 / SLES15 Security Update : perl-DBI (SUSE-SU-2020:3384-1)

This update for perl-DBI fixes the following issues : DBD::File drivers can open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. bsc1176492, CVE-2014-10401, CVE-2014-10402 Note that Tenable Network Security has extracted the preceding...

SUSE SLED15 / SLES15 Security Update : perl-DBI (SUSE-SU-2020:2646-1)

This update for perl-DBI fixes the following issues : Security issues fixed : CVE-2020-14392: Memory corruption in XS functions when Perl stack is reallocated bsc1176412. CVE-2020-14393: Fixed a buffer overflow on an overlong DBD class name bsc1176409. Note that Tenable Network Security has...