CVE-2015-1328

creationtimestamp| type| source ---|---|--- 2015-06-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37292 2015-06-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37293 2016-11-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40688 2018-05-29...

Overlayfs Privilege Escalation

This module attempts to exploit two different CVEs related to overlayfs. CVE-2015-1328: Ubuntu specific - 3.13.0-24 14.04 default use exploit/linux/local/overlayfs/privesc msf undefinedprivesc show actions ...actions... msf undefinedprivesc set ACTION msf undefinedprivesc show options ...show and...

Ubuntu 12.04 LTS : linux vulnerability (USN-2640-1)

Philip Pettersson discovered a privilege escalation when using overlayfs mounts inside of user namespaces. A local user could exploit this flaw to gain administrative privileges on the system. Note that Tenable Network Security has extracted the preceding description block directly from the Ubunt...

Linux Kernel 3.13.0 < 3.19 (Ubuntu 12.04/14.04/14.10/15.04) - 'overlayfs' Local Privilege Escalation

/ Exploit Title: ofs.c - overlayfs local root in ubuntu Date: 2015-06-15 Exploit Author: rebel Version: Ubuntu 12.04, 14.04, 14.10, 15.04 Kernels before 2015-06-15 Tested on: Ubuntu 12.04, 14.04, 14.10, 15.04 CVE : CVE-2015-1328...

CVE-2015-1328

The overlayfs implementation in the linux aka Linux kernel package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file creation in the upper filesystem directory, which allows local users to obtain root access by leveraging a configuration in which overlayfs i...

Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 Buffer Overflow (ASLR and DEP Bypass)

No description provided by source. Exploit Title: Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 local buffer overflow \w ASLR and DEP bypass Date: 26 July 2012 Exploit Author: Gianni Gnesa Vendor Homepage: http://mini-stream.net/ Software Link: http://mini-stream.net/rm-to-mp3-converter/downloa...

Cisco Collaboration Server 5 XSS, Source Code Disclosure

No description provided by source. Cisco Collaboration Server 5 XSS, Source Code Disclosure Discovered by: s4squatch of SecureState R&D Team www.securestate.com Discovered: 08/26/2008 Note: End of Engineering --...

openSUSE Security Update : jasper (openSUSE-SU-2011:1328-1)

Specially crafted JPEG2000 files could cause a heap buffer overflow in jasper CVE-2011-4516, CVE-2011-4517 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update jasper-5543. The text description of...

CVE-2013-1328

CVE-2013-1328 affects Microsoft Publisher components: Publisher 2003 SP3, 2007 SP3, and 2010 SP1. It enables remote code execution when a user opens a specially crafted Publisher file, due to an incorrect pointer handling vulnerability in Publisher. Exploitation could allow arbitrary code executi...

Microsoft Office Publisher Remote Code Execution Vulnerability (2830397)

This host is missing an important security update according to Microsoft Bulletin MS13-042. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS13-042: Vulnerabilities in Microsoft Publisher Could Allow Remote Code Execution (2830397)

The Publisher component of Microsoft Office installed on the remote host is affected by multiple vulnerabilities : - The application has a negative value allocation vulnerability. CVE-2013-1316 - The application has an integer overflow vulnerability. CVE-2013-1317 - The application has a corrupt...

Microsoft Publisher CVE-2013-1328 Remote Code Execution Vulnerability

Description Microsoft Publisher is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user into opening a specially crafted Publisher file. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of t...

Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 - Local Buffer Overflow (ASLR + DEP Bypass)

Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 - Local Buffer Overflow ASLR + DEP Bypass Exploit Title: Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 local buffer overflow \w ASLR and DEP bypass Date: 26 July 2012 Exploit Author: Gianni Gnesa Vendor Homepage: http://mini-stream.net/ Software...

Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 - Local Buffer Overflow (ASLR + DEP Bypass)

Exploit Title: Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 local buffer overflow \w ASLR and DEP bypass Date: 26 July 2012 Exploit Author: Gianni Gnesa Vendor Homepage: http://mini-stream.net/ Software Link: http://mini-stream.net/rm-to-mp3-converter/download Version: 3.1.2.1.2010.03.30 Teste...

Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 Buffer Overflow (ASLR and DEP Bypass)

Exploit for windows platform in category local exploits Exploit Title: Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 local buffer overflow \w ASLR and DEP bypass Date: 26 July 2012 Exploit Author: Gianni Gnesa Vendor Homepage: http://mini-stream.net/ Software Link:...

Mini-Stream RM-MP3 Converter 3.1.2.1.2010.03.30 Buffer Overflow

Exploit Title: Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 local buffer overflow \w ASLR and DEP bypass Date: 26 July 2012 Exploit Author: Gianni Gnesa Vendor Homepage: http://mini-stream.net/ Software Link: http://mini-stream.net/rm-to-mp3-converter/download Version: 3.1.2.1.2010.03.30 Teste...

CVE-2012-1328

Cisco Unified IP Phones 9900 series devices with firmware 9.1 and 9.2 are affected by a code/injection vulnerability in the handling of configuration data downloads to an RT phone, allowing local users to gain privileges via injected data (Bug ID CSCts32237). The issue is triggered by improper pr...

Ubuntu Update for linux-mvl-dove USN-1328-1

Ubuntu Update for Linux kernel vulnerabilities USN-1328-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13281.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux-mvl-dove USN-1328-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.n...

CVE-2011-1328

SQL injection vulnerability in RADVISION iVIEW Suite before 7.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2011-1328

The CVE-2011-1328 issue affects RADVISION’s iVIEW Suite (pre-7.5). The connected sources confirm a SQL injection vulnerability in iVIEW Suite that allows a remote attacker to view or alter data via unspecified vectors. Affected product/version: iVIEW Suite prior to v7.5. Root cause: SQL injection...