1131 matches found
[SECURITY] [DSA 3268-1] ntfs-3g security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3268-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 22, 2015 http://www.debian.org/security/faq -...
DLA-226-1 ntfs-3g - security update
Bulletin has no description...
USN-2617-2: NTFS-3G vulnerability
USN-2617-1 fixed a vulnerability in FUSE. This update provides the corresponding fix for the embedded FUSE copy in NTFS-3G. Original advisory details: Tavis Ormandy discovered that FUSE incorrectly filtered environment variables. A local attacker could use this issue to gain administrative...
[SECURITY] [DSA 3268-1] ntfs-3g security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3268-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 22, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3268-1] ntfs-3g security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3268-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 22, 2015 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 3268-1 (ntfs-3g - security update)
Tavis Ormandy discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing mount or umount with elevated privileges. A local user can take advantage of this flaw to overwrite arbitrary files and gain elevated privileges by accessing debugging feature...
DSA-3268-1 ntfs-3g - security update
Bulletin has no description...
Debian: Security Advisory (DSA-3268-2)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mobilis 3g Cross Site Scripting
Exploit Title: Mobilis 3g mobiconnect 3G++ Stored XSS vulnerability Date: 07/01/2015 Author: kabanni [email protected] Product web page: http://www.3G.dz/ http://www.mobilis.dz/ Version Of software WEBMOBILISDZMF667V1.0.0B03 Version The firmware BDHDW5MF667V1.0.0B01 Version Equipment MF667-2.0...
ZTE Ucell 3G Modem App / Datacard privilege escalation
Weak permissions for sustem service files...
Cellular Privacy, SS7 Security Shattered at 31C3
The recently concluded Chaos Communications Congress 31c3 in Hamburg, Germany was an all-out assault on cellular call privacy and security. Of particular interest was the SS7 protocol used to route calls between switching centers. Researchers, doing parallel research as it turns out, found gaping...
ZTE Ucell 3G Modem App - Privilege Escalation Vulnerability
Document Title: =============== ZTE Ucell 3G Modem App - Privilege Escalation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1387 Release Date: ============= 2014-12-24 Vulnerability Laboratory ID VL-ID: ===================================...
Mobilis MobiConnect 3G ZDServer privilege escalation
Weak permissions for system service and executable files...
ZTE Ucell 3G Modem App - Privilege Escalation Vulnerability
Document Title: =============== ZTE Ucell 3G Modem App - Privilege Escalation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1387 Release Date: ============= 2014-12-24 Vulnerability Laboratory ID VL-ID: ===================================...
Mobilis MobiConnect 3G ZDServer 1.x - Privilege Escalation
Document Title: =============== Mobilis MobiConnect 3G ZDServer 1.x - Privilege Escalation References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1385 Release Date: ============= 2014-12-19 Vulnerability Laboratory ID VL-ID: ====================================...
Mobilis MobiConnect 3G ZDServer 1.x - Privilege Escalation
Document Title: =============== Mobilis MobiConnect 3G ZDServer 1.x - Privilege Escalation References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1385 Release Date: ============= 2014-12-19 Vulnerability Laboratory ID VL-ID: ====================================...
Mobilis 3G mobiconnect Privilege Escalation
Exploit Title:mobilis 3g mobiconnect 3G++ ZDServer 1.0.1.2 Service Trusted Path Privilege Escalation Date: 07/12/2014 Author: Hadji Samir [email protected] Product web page: http://www.3G.dz/ http://www.mobilis.dz/ Affected version: 1.0.1.2 Tested on: Windows 7 FR Thanks Rachid Ben elkharchi mobili...
Backdoor access to Techboard/Syac devices
ADVISORY INFORMATION Title: Backdoor access to Techboard/Syac devices Discovery date: 02/04/2014 Release date: 07/07/2014 Advisory URL: http://blog.emaze.net/2014/07/backdoor-techboardsyac.html Credits: Roberto Paleari @rpaleari, Luca Giancane [email protected] VULNERABILITY INFORMATION...
Security Advisory-XSS Security Vulnerability on Huawei E355
Huawei E355 portable 3G wireless routers have the stored cross-site scripting XSS vulnerability. Attackers can exploit the vulnerability to plant malicious scripts into the configuration file to interrupt the services of legitimate users. Vulnerability ID: HWPSIRT-2014-0516 The CVE No. of the...
