28071 matches found
CVE-2012-0425
LanItems.ycp in savey2logs in yast2-network before 2.24.4 in SUSE YaST writes cleartext Wi-Fi credentials to the y2log log file, which allows context-dependent attackers to obtain sensitive information by reading the 1 WIRELESSWPAPASSWORD or 2 WIRELESSCLIENTKEYPASSWORD field...
CVE-2012-0414
Cross-site scripting XSS vulnerability in the Spacewalk service in SUSE Manager 1.2 for SUSE Linux Enterprise SLE 11 SP1 allows remote attackers to inject arbitrary web script or HTML via an image name...
CVE-2012-0414
The CVE-2012-0414 entry concerns a Cross-site scripting (XSS) vulnerability in the Spacewalk service of SUSE Manager 1.2 for SUSE Linux Enterprise 11 SP1. The issue allows remote attackers to inject arbitrary web script or HTML via an image name. According to the linked references, the vulnerabil...
CVE-2012-0426
CVE-2012-0426 affects the SAP SUSE cluster connector: a race condition in the module before version 1.0.0-0.8.1 used with SUSE Linux Enterprise for SAP Applications 11 SP2 . The issue allows local users to cause an unspecified impact via vectors related to a tmp/ directory. The provided documents...
CVE-2012-0425
CVE-2012-0425 affects SUSE YaST, specifically LanItems.ycp in save_y2logs of yast2-network, where before version 2.24.4 the log file y2log can contain cleartext Wi‑Fi credentials. The fields (1) WIRELESS_WPA_PASSWORD and (2) WIRELESS_CLIENT_KEY_PASSWORD may be read by context-dependent attackers,...
CVE-2012-0427
CVE-2012-0427 affects yast2-add-on-creator in SUSE inst-source-utils; local users can gain privileges via crafted (1) file name or (2) directory name. Root cause: inadequate validation in inst-source-utils prior to 0.9.1 (2008.11.26) and 0.8.1 (2012.9.13). Impact: local privilege escalation (CVE ...
CVE-2012-0420
The CVE-2012-0420 issue affects SUSE Zypper’s zypp-refresh-wrapper; local users could create files in arbitrary directories, or suffer other unspecified impact, via the ZYPP_LOCKFILE_ROOT environment variable. Affected versions include Zypper before 1.3.20 and 1.6.x before 1.6.166. The root cause...
CVE-2012-0434
The CVE concerns the Crowbar server used in SUSE Cloud 1.0, where the production.log file has weak permissions. The available connected documents confirm the affected component and the root cause (inappropriate permissions on production.log). The impact is not specified in the provided materials,...
OP5 welcome Remote Command Execution (CVE-2012-0262)
An arbitrary commands execution vulnerability has been reported in OP5 appliances...
Low: augeas
Issue Overview: Multiple flaws were found in the way Augeas handled configuration files when updating them. An application using Augeas to update configuration files in a directory that is writable to by a different user for example, an application running as root that is updating files in a...
[ MDVSA-2013:284 ] glibc
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:284 http://www.mandriva.com/en/support/security/ Package : glibc Date : November 25, 2013 Affected: Enterprise Server 5.0 Problem Description: Multiple vulnerabilities was found and corrected in glibc: Integ...
Kingsoft Office Writer 2012 8.1.0.3385 Buffer Overflow
Kingsoft Office Writer 2012 version 8.1.0.3385 SEH buffer overflow exploit that creates a malicious .wps file that pops calc.exe. !/usr/bin/python Exploit Title: Kingsoft Office Writer v2012 8.1.0.3385 .wps Buffer Overflow Exploit SEH Version: 2012 8.1.0.3385 Date: 2013-11-27 Author: Julien Ahren...
Kingsoft Office Writer 2012 8.1.0.3385 - '.wps' Local Buffer Overflow (SEH)
!/usr/bin/python Exploit Title: Kingsoft Office Writer v2012 8.1.0.3385 .wps Buffer Overflow Exploit SEH Version: 2012 8.1.0.3385 Date: 2013-11-27 Author: Julien Ahrens @MrTuxracer Homepage: http://www.rcesecurity.com Software Link: http://www.kingsoftstore.com Tested on: WinXP-GER, Win7-GER,...
Kingsoft Office Writer 2012 8.1.0.3385 - .wps Local Buffer Overflow (SEH)
Kingsoft Office Writer 2012 8.1.0.3385 - .wps Local Buffer Overflow SEH !/usr/bin/python Exploit Title: Kingsoft Office Writer v2012 8.1.0.3385 .wps Buffer Overflow Exploit SEH Version: 2012 8.1.0.3385 Date: 2013-11-27 Author: Julien Ahrens @MrTuxracer Homepage: http://www.rcesecurity.com Softwar...
GLSA-201311-19 : rssh: Access restriction bypass
The remote host is affected by the vulnerability described in GLSA-201311-19 rssh: Access restriction bypass Multiple command line parsing and validation vulnerabilities have been discovered in rssh. Please review the CVE identifiers referenced below for details. Impact : Multiple parsing and...
Unbreakable Enterprise Kernel security update
2.6.39-400.211.2 - fs/compatioctl.c: VIDEOSETSPUPALETTE missing error check Kees Cook Orabug: 17842208 CVE-2013-1928 - Bluetooth: RFCOMM - Fix info leak via getsockname Mathias Krause Orabug: 17842129 CVE-2012-6545 - Bluetooth: RFCOMM - Fix info leak in ioctlRFCOMMGETDEVLIST Mathias Krause Orabug...
CVE-2012-0016
creationtimestamp| type| source ---|---|--- 2013-11-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/29858...
ibutils, infinipath, libibverbs, libmlx4, librdmacm, mpitests, mstflint, openmpi, perftest, qperf, rdma security update
CentOS Errata and Security Advisory CESA-2013:1661 Updated rdma, libibverbs, libmlx4, librdmacm, qperf, perftest, openmpi, compat-openmpi, infinipath-psm, mpitests, and rds-tools packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat...
Fedora Update for moodle FEDORA-2013-21397
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for moodle FEDORA-2013-21354
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...