84 matches found
CVE-2014-5207
fs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNTNODEV, MNTNOSUID, and MNTNOEXEC and changing MNTATIMEMASK during a remount of a bind mount, which allows local users to gain privileges, interfere with backups and auditing on systems that had atime enabled, ...
CVE-2014-5207
CVE-2014-5207 affects the Linux kernel up to version 3.16.1. The flaw occurs in fs/namespace.c where clearing MNT_NODEV, MNT_NOSUID, MNT_NOEXEC and changing MNT_ATIME_MASK during a remount of a bind mount is not properly restricted, allowing local users to gain privileges, interfere with backups/...
USN-2318-1: Linux kernel vulnerabilities
Eric W. Biederman discovered a flaw with the mediation of mount flags in the Linux kernel's user namespace subsystem. An unprivileged user could exploit this flaw to by-pass mount restrictions, and potentially gain administrative privileges. CVE-2014-5207 Kenton Varda discovered a flaw with...
USN-2317-1: Linux kernel (Trusty HWE) vulnerabilities
Eric W. Biederman discovered a flaw with the mediation of mount flags in the Linux kernel's user namespace subsystem. An unprivileged user could exploit this flaw to by-pass mount restrictions, and potentially gain administrative privileges. CVE-2014-5207 Kenton Varda discovered a flaw with...
Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-2318-1)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2318-1 advisory. Eric W. Biederman discovered a flaw with the mediation of mount flags in the Linux kernel's user namespace subsystem. An unprivileged user could exploit...
[USN-2318-1] Linux kernel vulnerabilities
========================================================================== Ubuntu Security Notice USN-2318-1 August 18, 2014 linux vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
Ubuntu 12.04 LTS : linux-lts-trusty vulnerabilities (USN-2317-1)
Eric W. Biederman discovered a flaw with the mediation of mount flags in the Linux kernel's user namespace subsystem. An unprivileged user could exploit this flaw to by-pass mount restrictions, and potentially gain administrative privileges. CVE-2014-5207 Kenton Varda discovered a flaw with...
Fedora 20 : kernel-3.15.10-200.fc20 (2014-9466)
The 3.15.10 stable update contains a number of important fixes across the tree. Fix CVE-2014-5206, CVE-2014-5207: ro bind mount bypass with namespaces Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted...
CVE-2014-5207
fs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNTNODEV, MNTNOSUID, and MNTNOEXEC and changing MNTATIMEMASK during a remount of a bind mount, which allows local users to gain privileges, interfere with backups and auditing on systems that had atime enabled, ...
HP Intelligent Management Center < 5.2 E401 Multiple Vulnerabilities
The version of HP Intelligent Management Center running on the remote host is potentially affected by multiple vulnerabilities : - A cross-site scripting vulnerability exists in the 'opentoposymbolid' parameter of the 'topoContent.jsf' script. CVE-2012-5200 - Multiple code execution vulnerabiliti...
CVE-2012-5207
Unspecified vulnerability in HP Intelligent Management Center iMC and Intelligent Management Center for Automated Network Manager ANM before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1661...
CVE-2011-5207
Cross-site scripting XSS vulnerability in admin/OptionsPostsList.php in the TheCartPress plugin for WordPress before 1.1.6 before 2011-12-31 allows remote attackers to inject arbitrary web script or HTML via the tcpnamepostXXXXX parameter...
CVE-2011-5207
The CVE-2011-5207 entry concerns TheCartPress WordPress plugin. Affected component: admin/OptionsPostsList.php. Vulnerability: cross-site scripting (XSS) allowing remote attackers to inject arbitrary script/HTML via the tcp_name_post_XXXXX parameter, prior to TheCartPress 1.1.6 (before 2011-12-31...
CVE-2010-5207
Multiple untrusted search path vulnerabilities in CelFrame Office 2008 Standard Edition allow local users to gain privileges via a Trojan horse 1 javamsci.dll or 2 mscijava.dll file in the current working directory, as demonstrated by a directory that contains a .doc, .xls, or .odg file. NOTE: so...
CVE-2010-5207
CVE-2010-5207 affects CelFrame Office 2008 Standard Edition. It is a local privilege escalation via untrusted search path: a Trojan horse can be introduced by placing (1) java_msci.dll or (2) msci_java.dll in the current working directory, demonstrated with a directory containing a .doc, .xls, or...
CVE-2011-5207
creationtimestamp| type| source ---|---|--- 2011-12-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36481...
CVE-2008-5207
CVE-2008-5207 affects Jonascms 1.2. It describes multiple directory traversal vulnerabilities that allow remote attackers to include and execute arbitrary local files by injecting a .. (dot dot) in the taal parameter to backup.php and gb_voegtoe.php. The connected documents confirm the vulnerable...
CVE-2008-5207
Multiple directory traversal vulnerabilities in Jonascms 1.2 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the taal parameter to 1 backup.php and 2 gbvoegtoe.php. NOTE: the provenance of this information is unknown; the details are obtained solely from...
