188 matches found
CVE-2018-4008
An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the RunVpncScript command. The command takes a user-supplied script argument and executes it under root context. A user with local access can use this vulnerability to raise their privileges to roo...
CVE-2018-4008
CVE-2018-4008 affects Shimo VPN 4.1.5.1: the helper service’s RunVpncScript command executes a user-supplied script argument as root, enabling local privilege escalation. The exploits require local access; no remote access needed, and the script is executed with root privileges without input vali...
CVE-2019-4008
CVE-2019-4008 affects IBM API Connect V2018.1–2018.4.1.1. The issue is an access token leak where authorization tokens in some URLs could be written to log files, enabling disclosure of credentials. Affected product: IBM API Connect (API Management) 2018.x. Root cause: tokens exposed via logging ...
Security Bulletin: API Connect V2018 is impacted by access token leak (CVE-2019-4008)
Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2019-4008 DESCRIPTION: API Connect V2018 is impacted by access token leak. Authorization tokens in some URLs can result in the tokens being written to log files. CVSS Base Score: 9 CVSS Temporal...
CVE-2018-18756
Local Server 1.0.9 has a Buffer Overflow via crafted data on Port 4008...
CVE-2018-18756
Local Server 1.0.9 has a Buffer Overflow via crafted data on Port 4008...
Buffer overflow
Local Server 1.0.9 has a Buffer Overflow via crafted data on Port 4008...
CVE-2018-18756
CVE-2018-18756 affects Local Server 1.0.9. A buffer overflow is triggered by crafted data sent to port 4008, leading to Denial of Service. Multiple connected sources (NVD entry, CNVD/PRION/CVE lists, Exploit-DB/Exploit-Pack) corroborate a DoS risk with PoC evidence showing repeated socket connect...
CVE-2018-18756
Local Server 1.0.9 has a Buffer Overflow via crafted data on Port 4008...
PT-2018-14630
Name of the Vulnerable Software and Affected Versions Local Server version 1.0.9 Description The issue is related to a Buffer Overflow that can be triggered by crafted data. This occurs on Port 4008. Recommendations For Local Server version 1.0.9, consider restricting access to Port 4008 until a...
CVE-2018-18756: Improper Restriction of Operations within the Bounds of a Memory Buffer
Local Server 1.0.9 has a Buffer Overflow via crafted data on Port 4008...
CVE-2017-4008
CVE-2017-4008 entry is rejected/not used as stated; not an active vulnerability.
Debian DSA-4008-1 : wget - security update
Antti Levomaeki, Christian Jalio, Joonas Pihlaja and Juhani Eronen discovered two buffer overflows in the HTTP protocol handler of the Wget download tool, which could result in the execution of arbitrary code when connecting to a malicious HTTP server. %NASLMINLEVEL 70300 C Tenable Network...
GLSA-201703-05 : GNU Libtasn1: Denial of Service
The remote host is affected by the vulnerability described in GLSA-201703-05 GNU Libtasn1: Denial of Service Libtasn1 does not correctly handle certain malformed DER certificates. Impact : A remote attacker could entice a user or automated system to process a specially crafted certificate using...
SUSE SLED12 / SLES12 Security Update : libtasn1 (SUSE-SU-2016:1601-1)
This update for libtasn1 fixes the following issues : - Malformed asn1 definitions could have caused a segmentation fault in the asn1 definition parser bsc961491 - CVE-2015-3622: Fixed invalid read in octet string decoding bsc929414 - CVE-2016-4008: Fixed infinite loop while parsing DER...
SUSE-SU-2016:1600-1 Security update for libtasn1
This update for libtasn1 fixes the following issues: - Malformed asn1 definitions could have caused a segmentation fault in the asn1 definition parser bsc961491 - CVE-2015-3622: Fixed invalid read in octet string decoding bsc929414 - CVE-2016-4008: Fixed infinite loop while parsing DER certificat...
openSUSE Security Update : libtasn1 (openSUSE-2016-716)
This update for libtasn1 fixes the following issues : - Malformed asn1 definitions could have caused a segmentation fault in the asn1 definition parser bsc961491 - CVE-2015-3622: Fixed invalid read in octet string decoding bsc929414 - CVE-2016-4008: Fixed infinite loop while parsing DER...
Debian DLA-495-1 : libtasn1-3 security update
CVE-2016-4008: infinite loop while parsing DER certificates The asn1extractderoctet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1DECODEFLAGSTRICTDER flag, allows remote attackers to cause a denial of service infinite recursion via a crafted certificate. For...
[SECURITY] [DLA 495-1] libtasn1-3 security update
Package : libtasn1-3 Version : 2.13-2+deb7u3 CVE ID : CVE-2016-4008 CVE-2016-4008: infinite loop while parsing DER certificates The asn1extractderoctet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1DECODEFLAGSTRICTDER flag, allows remote attackers to cause a...