Overland Guardian OS 5.1.041 - Local Privilege Escalation

Device: Snap Server 410 OS: GuardianOS 5.1.041 Description: When logged in to CLI via ssh as admin uid=1 you can escalate your privileges to uid 0 and get /bin/sh. In order to achieve this open 'less' which is available as default for viewing files ie. less /tmp/top.log and type in '!/bin/sh'. Th...

Overland Guardian OS 5.1.041 - Local Privilege Escalation

Overland Guardian OS 5.1.041 - Local Privilege Escalation Device: Snap Server 410 OS: GuardianOS 5.1.041 Description: When logged in to CLI via ssh as admin uid=1 you can escalate your privileges to uid 0 and get /bin/sh. In order to achieve this open 'less' which is available as default for...

Overland Guardian OS 5.1.041 privilege escalation

No description provided by source. Device: Snap Server 410 OS: GuardianOS 5.1.041 Description: When logged in to CLI via ssh as admin uid=1 you can escalate your privileges to uid 0 and get /bin/sh. In order to achieve this open 'less' which is available as default for viewing files ie. less...

Ubuntu: Security Advisory (USN-410-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in multiple Century Systems routers including XR-410 before 1.6.9, XR-510 before 3.5.3, XR-440 before 1.7.8, and other XR series routers from XR-510 to XR-730 allows remote attackers to modify configuration as the administrator via unknown vectors...

Multiple Century Systems routers vulnerable to cross-site request forgery

Overview The web interface in multiple Century Systems routers is vulnerable to cross-site request forgery. Multiple Century Systems Co., Ltd. routers provide a web-based interface for users to configure the routers. The web interface is vulnerable to cross-site request forgery. Hirotaka Katagiri...

JVN#67573833 Multiple Century Systems routers vulnerable to cross-site request forgery

Multiple Century Systems Co., Ltd. routers provide a web-based interface for users to configure the routers. The web interface is vulnerable to cross-site request forgery. Impact If the administrator views a malicious website while logged onto the web interface, the password and other configurati...

Debian: Security Advisory (DSA-410)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 410-1 (libnids)

The remote host is missing an update to libnids announced via advisory DSA 410-1. OpenVAS Vulnerability Test $Id: deb4101.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 410-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

RHEL 4 : gftp (RHSA-2005:410)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:410 advisory. gFTP is a multi-threaded FTP client for the X Window System. A directory traversal bug was found in gFTP. If a user can be tricked into downloading a...