CVE-2018-3879

CVE-2018-3879 describes a JSON injection in Samsung SmartThings Hub video-core’s credentials handler that leads to a SQL injection in the SQLite database. Affected device: Samsung SmartThings Hub STH-ETH-250 with firmware 0.20.17. Root cause: the video-core HTTP server parses user-controlled JSON...

Samsung SmartThings Hub SQL Injection (CVE-2018-3879)

An SQL injection vulnerability exists in Samsung SmartThings Hub. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Samsung SmartThings Hub video-core credentials Parsing SQL Injection Vulnerability(CVE-2018-3879)

Summary An exploitable JSON injection vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub. The video-core process incorrectly parses the user-controlled JSON payload, leading to a JSON injection which in turn leads to a SQL injection in the...

Linux/x86 - Bind TCP (3879/TCP) Shell (/bin/sh) Shellcode (113 bytes)

/ Connecting shellcode written by lamagra http://lamagra.seKure.de May 2000 .file "connect" .version "01.01" .text .align 4 start: socketAFINET,SOCKSTREAM,IPPROTOIP; movl %esp,%ebp xorl %edx,%edx movb $102,%edx movl %edx,%eax 102 = socketcall xorl %ecx,%ecx movl %ecx,%ebx incl %ebx socket movl...

Debian DSA-3879-1 : libosip2 - security update

Multiple security vulnerabilities have been found in oSIP, a library implementing the Session Initiation Protocol, which might result in denial of service through malformed SIP messages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

Debian Security Advisory DSA 3879-1 (libosip2 - security update)

Multiple security vulnerabilities have been found in oSIP, a library implementing the Session Initiation Protocol, which might result in denial of service through malformed SIP messages. OpenVAS Vulnerability Test $Id: deb3879.nasl 6607 2017-07-07 12:04:25Z cfischer $ Auto-generated from advisory...

Cisco NX-OS Failed Authentication Handling Remote DoS (cisco-sa-20170315-nss1)

According to its version and configuration, the Cisco NX-OS software running on the remote device is affected by a denial of service vulnerability in the remote login functionality due to improper handling of failed authentication during login. An unauthenticated, remote attacker can exploit this...

CVE-2017-3879

CVE-2017-3879 affects Cisco Nexus 9000 Series Switches running NX-OS where remote login (Telnet/SSH) handling can terminate the login process due to improper handling of failed authentication. This results in a Denial of Service on the login subsystem, with no impact to in-flight user traffic. Af...

Cisco Nexus 9000 Series Switches Remote Login Denial of Service Vulnerability (cisco-sa-20170315-nss1)

A vulnerability in the remote login functionality for Cisco NX-OS Software running on Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause a process used for login to terminate unexpectedly and the login attempt to fail. There is no impact to user traffic...

CVE-2016-3879

arm-wt-22k/libsrc/easmdls.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 allows remote attackers to cause a denial of service NULL pointer dereference, and device hang or reboot via a crafted media file, aka internal bug 29770686...

CVE-2016-3879

CVE-2016-3879 concerns a denial-of-service vulnerability in Android’s Mediaserver. The issue resides in arm-wt-22k/lib_src/eas_mdls.c within Mediaserver and is triggered by processing a crafted media file, leading to a NULL pointer dereference and potentially device hang or reboot. Affected produ...

Oracle: Security Advisory (ELSA-2009-1584)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-3879

CVE-2015-3879 affects the Android Media Player Framework (Android 5.1.1 LMY48T and earlier). The issue allows an attacker via a crafted application to gain privileges in mediaserver through memory corruption in media processing paths. Connected sources frame this as an elevation-of-privilege vuln...

Oracle: Security Advisory (ELSA-2011-1083)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : fuse (openSUSE-SU-2011:0264-1)

Race conditions in fuse allowed unprivileged users to umount arbitrary mount points CVE-2011-0541,CVE-2010-3879,CVE-2011-0543. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update fuse-4184. The te...

FreeBSD-SA-14:13.pam

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-14:13.pam Security Advisory The FreeBSD Project Topic: Incorrect error handling in PAM policy parser Category: contrib Module: pam Announced: 2014-06-03 Credits...

CVE-2013-3879

Win32k Use After Free Vulnerability (CVE-2013-3879): a local privilege-escalation in the win32k.sys kernel-mode driver affecting Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, 7 SP1, 8, Server 2012, and RT. Root cause: use-after-free in memory object handling within the W...

Microsoft Windows Kernel 'Win32k.sys' CVE-2013-3879 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of the affected...

Oracle Linux 6 : fuse (ELSA-2011-1083)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1083 advisory. 2.8.3-3 - Bump the release since the bz was set to the wrong target 2.8.3-2 - Fix another umount race bz 673250, CVE-2010-3879 Tenable has extracted th...

[ MDVSA-2013:154 ] util-linux

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:154 http://www.mandriva.com/en/support/security/ Package : util-linux Date : April 29, 2013 Affected: Business Server 1.0, Enterprise Server 5.0 Problem Description: A vulnerability has been found and...