164 matches found
Linux Kernel 本地权限提升漏洞(CVE-2013-0228)
BUGTRAQ ID: 57940 CVECAN ID: CVE-2013-0228 Linux Kernel是Linux操作系统的内核。 Linux kernel内arch/x86/xen/xen-asm32.S的xeniret函数没有正确处理DS段寄存器内的无效值，32-bit PV Xen domain中的guest用户可通过特制的应用利用此漏洞致使guest崩溃甚而提升其权限。 0 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...
Ubuntu: Security Advisory (USN-1756-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for kernel FEDORA-2013-3223
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for kernel FEDORA-2013-3106
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for kernel FEDORA-2013-3106
Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2013-3106 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Fedora Update for kernel FEDORA-2013-2597
Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2013-2597 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Fedora Update for kernel FEDORA-2013-2597
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 17 : kernel-3.7.9-101.fc17 (2013-2597)
Upstream stable kernel 3.7.9 contains a number of bug fixes across the tree, as well as important security fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...
Fedora Update for kernel FEDORA-2013-2635
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for kernel FEDORA-2013-2635
Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2013-2635 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Fedora Update for kernel FEDORA-2013-2728
Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2013-2728 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Wonderware Information Server Multiple Vulnerabilities
Overview ICS-CERT originally released Advisory “ICSA-12-062-01PInvensys Wonderware Information Server Multiple Vulnerabilities” on the US-CERT secure portal on March 02, 2012. This web page release was delayed to allow users time to download and install the update. Independent security researche...
CVE-2012-0228
Invensys Wonderware Information Server 4.0 SP1 and 4.5 does not properly implement client controls, which allows remote attackers to bypass intended access restrictions via unspecified vectors...
CVE-2012-0228
CVE-2012-0228 affects Invensys Wonderware Information Server 4.0 SP1 and 4.5 (Portal and Client). The vulnerability stems from security access permissions issues in client controls, which could allow a remote attacker to cause a denial of service. ICS-CERT notes multiple vulnerabilities across th...
CVE-2011-0228
Affected software: Apple iOS prior to 4.2.10 and 4.3.x prior to 4.3.5. Vulnerability: The Data Security component does not check the basicConstraints parameter when validating X.509 certificate chains, allowing a non-CA certificate to sign a certificate for any domain. This enables a man-in-the-m...
TWSL2011-007: iOS SSL Implementation Does Not Validate Certificate Chain
Trustwave's SpiderLabs Security Advisory TWSL2011-007: iOS SSL Implementation Does Not Validate Certificate Chain https://www.trustwave.com/spiderlabs/advisories/TWSL2011-007.txt Published: 2011-07-25 Version: 1.0 Vendor: Apple http://www.apple.com Product: iOS Version affected: Versions Prior to...
APPLE-SA-2011-07-25-2 iOS 4.2.10 Software Update for iPhone
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-07-25-2 iOS 4.2.10 Software Update for iPhone iOS 4.2.10 Software Update for iPhone is now available and addresses the following: Data Security Available for: iOS 4.2.5 through 4.2.9 for iPhone 4 CDMA Impact: An attacker with a privilege...
CVE-2010-0228
The CVE-2010-0228 entry concerns Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives that use a fixed 256-bit key for accessing cleartext content. The underlying issue is the use of a constant key, enabling physically proximate attackers to read or modify drive data by su...
Windows Print Spooler EnumeratePrintShares buffer overflow
Added: 06/16/2009 CVE: CVE-2009-0228 BID: 35206 Background The Windows Print Spooler manages the printing process on Windows operating systems. Problem A buffer overflow vulnerability in the EnumeratePrintShares function in the Windows Print Spooler service allows arbitrary command execution when...
Windows Print Spooler EnumeratePrintShares buffer overflow
Added: 06/16/2009 CVE: CVE-2009-0228 BID: 35206 Background The Windows Print Spooler manages the printing process on Windows operating systems. Problem A buffer overflow vulnerability in the EnumeratePrintShares function in the Windows Print Spooler service allows arbitrary command execution when...