58 matches found
CVE-2015-6866
CVE-2015-6866 is rejected/not used and does not represent an active vulnerability entry.
CVE-2016-6866
slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...
CVE-2016-6866
CVE-2016-6866 affects the screen-locker slock. A null pointer dereference can occur when verifying a password for a user with an invalid shadow hash entry, caused by calling crypt(3) and using its return value in strcmp(3) without checking for NULL. This can lead to a crash and potential local im...
CVE-2016-6866
slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...
Fedora Update for slock FEDORA-2016-1b7e66c08b
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[ASA-201611-21] slock: access restriction bypass
Arch Linux Security Advisory ASA-201611-21 ========================================== Severity: Medium Date : 2016-11-21 CVE-ID : CVE-2016-6866 Package : slock Type : access restriction bypass Remote : No Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package slock before...
Fedora 25 : slock (2016-1b7e66c08b)
This release fixes CVE-2016-6866, a crash when verifying a password for a user without a valid shadow hash entry. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and forma...
MGASA-2016-0308 Updated slock packages fix security vulnerability
The slock utility is susceptible to crash when verifying a password for a user without a valid shadow hash entry CVE-2016-6866...
Fedora 23 : slock (2016-7e817cbf55)
This release fixes CVE-2016-6866, a crash when verifying a password for a user without a valid shadow hash entry. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and forma...
Fedora 24 : slock (2016-985b68721b)
This release fixes CVE-2016-6866, a crash when verifying a password for a user without a valid shadow hash entry. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and forma...
[SECURITY] [DLA 598-1] suckless-tools security update
Package : suckless-tools Version : 38-2+deb7u1 CVE ID : CVE-2016-6866 It was discovered that the slock screen locking tool would segfault when the users account had been disabled. slock called crypt3 and used the return value for strcmp3 without checking to see if the return value of crypt3 was a...
CVE-2014-6866
The CVE-2014-6866 entry concerns HomeAdvisor Mobile (com.servicemagic.consumer) app v3.0.3 on Android. The issue is the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate. The NV...
Fedora Update for mingw-readline FEDORA-2014-6866
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-6866
SAP Sybase Adaptive Server Enterprise ASE before 15.0.3 ESD4.3, 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka CR736689...
CVE-2013-6866
SAP Sybase ASE is affected prior to 15.0.3 ESD#4.3, prior to 15.5 ESD#5.3, and prior to 15.7 SP50/SP100, where remote authenticated users can execute arbitrary code via unspecified vectors (CR736689). The connected sources confirm these versions and the broad impact described, but do not provide ...
CVE-2008-6866
The CVE-2008-6866 entry describes a SQL injection vulnerability in PHP-Nuke’s Current_Issue module (in modules.php). The vulnerability is triggered via the id parameter in a summary action, potentially allowing remote attackers to construct and execute arbitrary SQL commands. The affected compone...
