bash (important)

The command-line shell 'bash' evaluates environment variables, which allows the injection of characters and might be used to access files on the system in some circumstances CVE-2014-7169. Please note that this issue is different from a previously fixed vulnerability tracked under CVE-2014-6271 a...

bash (important)

The command-line shell 'bash' evaluates environment variables, which allows the injection of characters and might be used to access files on the system in some circumstances CVE-2014-7169. Please note that this issue is different from a previously fixed vulnerability tracked under CVE-2014-6271 a...

VMSA-2014-0010:VMware product updates address CRITICAL Bash security vulnerabilities

VMSA-2014-0010.13 VMware product updates address critical Bash security vulnerabilities VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2014-0010.13 VMware Security Advisory Synopsis: VMware product updates address critical Bash security vulnerabilities VMware Security Advisor...

USN-2364-1: Bash vulnerabilities

Florian Weimer and Todd Sabin discovered that the Bash parser incorrectly handled memory. An attacker could possibly use this issue to bypass certain environment restrictions and execute arbitrary code. CVE-2014-7186, CVE-2014-7187 In addition, this update introduces a hardening measure which add...

Bash 4.3 远程命令执行漏洞 (破壳)

更新情况版本时间描述第一版2014/9/26 中午第一版完成。第二版2014/9/26 下午1. 新增：加速乐防御平台的攻击统计细节；2. 完善：修复建议；第三版2014/9/27 下午1. 破壳漏洞官网出现：shellshocker.net2. 更新：漏洞概要；3. 新增：补丁绕过后（CVE-2014-7169）的漏洞源码级分析；4. 新增：ZoomEye第四组数据：QNAP NAS漏洞情况；5. 新增：ZoomEye第五组数据：CheckPoint安全网关漏洞情况；6. 完善：修复建议；7. 新增：相关资源链接；第四版2014/10/14 晚1...

GNU Bash Remote Code Execution (CVE-2014-6271; CVE-2014-6277; CVE-2014-6278; CVE-2014-7169; CVE-2014-7186; CVE-2014-7187)

A remote code execution vulnerability has been reported in several versions of GNU Bash. The vulnerability, aka ShellShock, is due to an error in the way GNU Bash processes trailing strings after function definitions in the values of environment variables...

CVE-2013-7186

CVE-2013-7186 affects Steinberg MyMp3PRO 5.0 (Build 5.1.0.21). The issue is a buffer overflow in the handling of long strings within a .m3u file, which can allow a remote attacker to execute arbitrary code. The documents confirm the affected product and root cause but do not provide exploit detai...

CVE-2013-7186

creationtimestamp| type| source ---|---|--- 2013-12-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/30032...

SuSE 10 Security Update : PostgreSQL (ZYPP Patch Number 7186)

PostgreSQL functions implemented in Perl or TCL shared a global state even across different user user ids. A user could therefore influence functions of other users in an unexpected or even malicious way. CVE-2010-3433 PostgreSQL was updated to version 8.1.22 which fixes the security issue...

CVE-2008-7186

Coppermine Photo Gallery CPG 1.4.14 does not restrict access to update.php, which allows remote attackers to obtain sensitive information such as the database table prefix via a direct request. NOTE: this might be leveraged for attacks against CVE-2008-0504...

CVE-2008-7186

Coppermine Photo Gallery (CPG) 1.4.14 exposes update.php to direct requests, allowing remote attackers to obtain sensitive information such as the database table prefix. This is a local information disclosure issue stemming from improper access restriction, and it may be leveraged in connection w...

CVE-2006-7186

The CVE-2006-7186 entry concerns WebAPP (WebAPP) CGI component cgi-lib/subs.pl, affected in versions before 0.9.9.3.5. The vulnerability enables attackers to open list files in the profile and other functions, per the description, and is noted as distinct from CVE-2005-0927. No remediation steps ...