AMF3 Java implementations Improper Control of Dynamically-Managed Code Resources

Details reference: https://codewhitesec.blogspot.kr/2017/04/amf.html Some Java implementations of AMF3 deserializers may allow instantiation of arbitrary classes via their public parameter-less constructor and subsequently call arbitrary Java Beans setter methods. The ability to exploit this...

Ubuntu 14.04 LTS / 16.04 LTS : Spice vulnerabilities (USN-3202-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3202-1 advisory. Frediano Ziglio discovered that Spice incorrectly handled certain client messages. A remote attacker could use this issue to cause Spice to...

Ubuntu: Security Advisory (USN-3202-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-3202

CVE-2016-3202 affects the Chakra JavaScript, JScript, and VBScript engines used by Internet Explorer 10/11 and Microsoft Edge. The vulnerability allows remote attackers to execute arbitrary code or cause memory corruption via a crafted web site (Scripting Engine Memory Corruption Vulnerability). ...

Microsoft Internet Explorer Multiple Vulnerabilities (3163649)

This host is missing a critical security update according to Microsoft Bulletin MS16-063. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MS16-063: Cumulative Security Update for Internet Explorer (3163649)

The version of Internet Explorer installed on the remote host is missing Cumulative Security Update 3163649. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these issues by...

Gentoo Security Advisory GLSA 201603-04

Gentoo Linux Local Security Checks GLSA 201603-04 SPDX-FileCopyrightText: 2016 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Amazon Linux AMI : fuse (ALAS-2015-558)

It was discovered that fusermount failed to properly sanitize its environment before executing mount and umount commands. A local user could possibly use this flaw to escalate their privileges on the system. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Fedora Update for ntfs-3g FEDORA-2015-8773

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2015-3202

fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking 1 mount or 2 umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNTMTAB environment variable that is used by mount's debugging feature...

CVE-2015-3202

fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking 1 mount or 2 umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNTMTAB environment variable that is used by mount's debugging feature...

CVE-2015-3202

fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking 1 mount or 2 umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNTMTAB environment variable that is used by mount's debugging feature...

CVE-2015-3202

CVE-2015-3202 affects FUSE’s fusermount prior to 2.9.3-15, where environment variables are not fully cleared before invoking mount or umount as root. This allows a local unprivileged user to write to arbitrary files via a crafted LIBMOUNT_MTAB used by mount’s debugging feature, potentially enabli...

Fedora 20 : ntfs-3g-2015.3.14-2.fc20 (2015-8777)

Fix CVE-2015-3202. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Netwo...

SUSE SLED12 / SLES12 Security Update : fuse (SUSE-SU-2015:1053-1)

This update fixes a vulnerability in fuse that did not clear the environment upon execution of external programs. CVE-2015-3202 has been assigned to this issue Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

Fedora 20 : fuse-2.9.4-1.fc20 (2015-8782)

Update to 2.9.4, which fixes CVE-2015-3202. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

SUSE SLED11 / SLES11 Security Update : FUSE (SUSE-SU-2015:1024-1)

This update for FUSE fixes the following security issue : CVE-2015-3202: FUSE did not clear the environment upon execution of external programs. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

Fedora 21 : fuse-2.9.4-1.fc21 (2015-8751)

Update to 2.9.4, which fixes CVE-2015-3202. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Update for ntfs-3g FEDORA-2015-8771

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 22 : fuse-2.9.4-1.fc22 (2015-8756)

Update to 2.9.4, which fixes CVE-2015-3202. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...