[slackware-security] libssh2

New libssh2 packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libssh2-1.8.1-i586-1slack14.2.txz: Upgraded. Fixed several security issues. For more information, see:...

Ubuntu 18.04 LTS : GNOME Bluetooth vulnerability (USN-3856-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3856-1 advisory. Chris Marchesi discovered that BlueZ incorrectly handled disabling Bluetooth visibility. A remote attacker could possibly pair to devices, contrary to expectation...

Ubuntu: Security Advisory (USN-3856-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-3856

CVE-2018-3856 affects Samsung SmartThings Hub STH-ETH-250 (firmware 0.20.17). Cisco Talos reports an OS command-injection in the video-core RTSP handling: if the camera-password contains spaces, the hub builds an ffmpeg command with attacker-controlled options, leading to arbitrary code execution...

Samsung SmartThings Hub video-core RTSP Configuration Command Injection Vulnerability(CVE-2018-3856)

Summary An exploitable vulnerability exists in the smart cameras RTSP configuration of the Samsung SmartThings Hub. The device incorrectly handles spaces in the URL field, leading to an arbitrary operating system command injection. An attacker can send a series of HTTP requests to trigger this...

glibc - 'LD_AUDIT' Arbitrary DSO Load Privilege Escalation (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/local/linux' require 'msf/core/exploit/exe' class MetasploitModule 'glibc LDAUDIT Arbitrary DSO Load Privilege Escalation', 'Description' = %q...

Debian DSA-3856-1 : deluge - security update

Two vulnerabilities have been discovered in the web interface of the Deluge BitTorrent client directory traversal and cross-site request forgery. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisor...

Debian Security Advisory DSA 3856-1 (deluge - security update)

Two vulnerabilities have been discovered in the web interface of the Deluge BitTorrent client directory traversal and cross-site request forgery. OpenVAS Vulnerability Test $Id: deb3856.nasl 6607 2017-07-07 12:04:25Z cfischer $ Auto-generated from advisory DSA 3856-1 using nvtgen 1.0 Script...

CVE-2017-3856

Cisco IOS XE Web UI Denial of Service (CVE-2017-3856) affects IOS XE releases 3.1–3.17 when the web UI is enabled. The root cause is insufficient resource handling under high HTTP load, allowing an unauthenticated, remote attacker to cause a device reload by flooding the web UI with requests. Imp...

CVE-2016-3856

CVE-2016-3856 affects Android’s netd daemon, where versions prior to 2016-08-05 mishandle tethering and stdio streams. The root cause is a handling flaw in tethering/stdio data processing, which can be exploited by a crafted application to cause a denial of service and potentially other unspecifi...

GNU libc 2.12.1 LD_AUDIT libpcprofile.so Local Root

!/bin/sh Exploit Title: GNU libc /tmp/libxpl.c /dev/null cat /tmp/libxpl.so /lib/libxpl.so rm -rf /tmp/libxpl.c /tmp/libxpl.so LDAUDIT="libxpl.so" ping...

Updated fish package fixes multiple security vulnerabilities

Updated fish packages fix security vulnerability: fish, from at least version 1.16.0 to version 2.1.0 inclusive, does not check the credentials of processes communicating over the fishd universal variable server UNIX domain socket. This allows a local attacker to elevate their privileges to those...

glibc LD_AUDIT arbitrary DSO load Privilege Escalation

No description provided by source. !/bin/sh I Can't Read and I Won't Race You Either by zx2c4 This is an exploit for CVE-2010-3856. A while back, Tavis showed us three ways to exploit flaws in glibc's dynamic linker involving LDAUDIT. 1 2 The first way involved opening a file descriptor and using...

openSUSE Security Update : glibc (openSUSE-SU-2010:0912-1)

This update of glibc fixes two bugs and security issues : CVE-2010-3847: Decoding of the $ORIGIN special value in various LD environment variables allowed local attackers to execute code in context of e.g. setuid root programs, elevating privileges. This issue does not affect SUSE as an assertion...

CVE-2013-3856

CVE-2013-3856 affects Microsoft Word 2003 SP3 and Word Viewer. A memory corruption flaw in crafted Office documents allows remote code execution or a denial of service. Affected products are Word 2003 SP3 and Word Viewer; the vulnerability is addressed by Microsoft MS13-072 (security update). The...

CVE-2013-3856

Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Word Memory Corruption Vulnerability."...

MS13-072: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2845537)

The remote Windows host is running a version of Microsoft Office, Microsoft Word, Office Compatibility Pack, or Microsoft Word Viewer that is affected by the following remote code execution vulnerabilities : - A remote code execution vulnerability exists due to the way the XML parser used by Word...

Microsoft Word CVE-2013-3856 Remote Memory Corruption Vulnerability

Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...

Microsoft Word Memory Corruption (MS13-072: CVE-2013-3856)

A remote code execution vulnerability has been reported in Microsoft Word...

Oracle Linux 5 : glibc (ELSA-2010-0793)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0793 advisory. 2.5-49.el55.7 - Require suid bit on audit objects in privileged programs 645677, CVE-2010-3856 Tenable has extracted the preceding description block directly fr...