Fedora Update for postgresql FEDORA-2018-937c789f2a

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security fix for the ALT Linux 7 package postgresql10 version 10.4-alt0.M70P.1

10.4-alt0.M70P.1 built May 22, 2018 Alexei Takaseev in task 205931 May 9, 2018 Alexei Takaseev - 10.4 - Fix CVE-2018-1115...

Security fix for the ALT Linux 7 package postgresql9.6 version 9.6.9-alt0.M70P.1

9.6.9-alt0.M70P.1 built May 22, 2018 Alexei Takaseev in task 205931 May 9, 2018 Alexei Takaseev - 9.6.9 - Fix CVE-2018-1115...

Security fix for the ALT Linux 7 package postgresql9.3 version 9.3.23-alt0.M70P.1

9.3.23-alt0.M70P.1 built May 22, 2018 Alexei Takaseev in task 205931 May 9, 2018 Alexei Takaseev - 9.3.23 - Fix CVE-2018-1115...

Security fix for the ALT Linux 7 package postgresql9.6-1C version 9.6.9-alt0.M70P.1

9.6.9-alt0.M70P.1 built May 22, 2018 Alexei Takaseev in task 205931 May 9, 2018 Alexei Takaseev - 9.6.9 - Fix CVE-2018-1115...

Security fix for the ALT Linux 7 package postgresql9.5 version 9.5.13-alt0.M70P.1

9.5.13-alt0.M70P.1 built May 22, 2018 Alexei Takaseev in task 205931 May 9, 2018 Alexei Takaseev - 9.5.13 - Fix CVE-2018-1115...

Security fix for the ALT Linux 8 package postgresql9.6 version 9.6.9-alt0.M80P.1

9.6.9-alt0.M80P.1 built May 18, 2018 Alexei Takaseev in task 205920 May 9, 2018 Alexei Takaseev - 9.6.9 - Fixes CVE-2018-1115...

Security fix for the ALT Linux 8 package postgresql10 version 10.4-alt0.M80P.1

10.4-alt0.M80P.1 built May 18, 2018 Alexei Takaseev in task 205920 May 9, 2018 Alexei Takaseev - 10.4 - Fixes CVE-2018-1115...

PostgreSQL logrotate Vulnerability (May 2018) - Windows

PostgreSQL is vulnerable in the adminpack extension, the pgcatalog.pglogfilerotate function doesn SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

CVE-2018-1115

postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pgcatalog.pglogfilerotate function doesn't follow the same ACLs than pgroratelogfile. If the adminpack is added to a database, an attacker able to connect to it could exploit this to force log rotation...

CVE-2018-1115

postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pgcatalog.pglogfilerotate function doesn't follow the same ACLs than pgroratelogfile. If the adminpack is added to a database, an attacker able to connect to it could exploit this to force log rotation...

CVE-2018-1115

CVE-2018-1115 affects PostgreSQL deployments using the adminpack extension, where pg_catalog.pg_logfile_rotate() does not enforce the same ACLs as pg_rotate_logfile. This could allow an attacker who can connect to a database with adminpack loaded to trigger log rotation, bypassing intended access...

KLA11263 DoS vulnerability in PostgreSQL

A security bypass vulnerability was found in PostgreSQL. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a built-in module “adminpack”. Original advisories PostgreSQL 10.4, 9.6.9, 9.5.13, 9.4.18, and 9.3.23 released!...

Vulnerability in contrib module (CVE-2018-1115)

Too-permissive access control list on function pglogfilerotate...

Security fix for the ALT Linux 8 package postgresql11 version 10.4-alt1

May 9, 2018 Alexei Takaseev 10.4-alt1 - 10.4 - Fix CVE-2018-1115...

Security fix for the ALT Linux 9 package postgresql12 version 10.4-alt1

May 9, 2018 Alexei Takaseev 10.4-alt1 - 10.4 - Fixes CVE-2018-1115...

Linux/x86 - execve(/bin/sh) + Polymorphic Shellcode (26 bytes)

/ Description ; Title : Polymorphic execve /bin/sh - Shellcode ; Author : Hashim Jawad ; Website : ihack4falafel.com ; Twitter : @ihack4falafel ; SLAE ID : SLAE-1115 ; Purpose : spawn /bin/sh shell ; OS : Linux ; Arch : x86 ; Size : 26 bytes sh.nasm global start section .text start: ; zero out EA...

Linux/x86 - execve /bin/dash Shellcode (30 bytes)

/ Description ; Title : exec /bin/dash - Shellcode ; Author : Hashim Jawad ; Website : ihack4falafel.com ; Twitter : @ihack4falafel ; SLAE ID : SLAE-1115 ; Purpose : spawn /bin/dash shell ; OS : Linux ; Arch : x86 ; Size : 30 bytes dash.nasm global start section .text start: ; push NULL into the...

Linux/x86 - chmod 777 /etc/sudoers Shellcode (36 bytes)

Linux/x86 - chmod 777 /etc/sudoers Shellcode 36 bytes. Shellcode exploit for Linuxx86 platform / Description ; Title : chmod 777 /etc/sudoers - Shellcode ; Author : Hashim Jawad ; Website : ihack4falafel.com ; Twitter : @ihack4falafel ; SLAE ID : SLAE-1115 ; Purpose : chmod /etc/sudoers permissio...

CVE-2016-1115

Adobe ColdFusion is affected by CVE-2016-1115 due to a wildcard handling flaw in X.509 certificate name fields, enabling MITM server spoofing via crafted certs. Affected products: ColdFusion 10 before Update 19, ColdFusion 11 before Update 8, and ColdFusion 2016 before Update 1. Root cause: impro...