EUVD-2012-3307

Malware in sbrugna...

CVE-2017-3743

If multiple users are concurrently logged into a single system where one user is sending a command via the Lenovo ToolsCenter Advanced Settings Utility ASU, UpdateXpress System Pack Installer UXSPI or Dynamic System Analysis DSA to a second machine, the other users may be able to see the user ID...

PT-2017-16077

Name of the Vulnerable Software and Affected Versions Lenovo ToolsCenter Advanced Settings Utility ASU affected versions not specified Lenovo UpdateXpress System Pack Installer UXSPI affected versions not specified Lenovo Dynamic System Analysis DSA affected versions not specified Description The...

CVE-2017-3743: Exposure of Sensitive Information to an Unauthorized Actor

If multiple users are concurrently logged into a single system where one user is sending a command via the Lenovo ToolsCenter Advanced Settings Utility ASU, UpdateXpress System Pack Installer UXSPI or Dynamic System Analysis DSA to a second machine, the other users may be able to see the user ID...

CVE-2012-3329

IBM Advanced Settings Utility ASU through 3.62 and 3.70 through 9.21 and Bootable Media Creator BoMC through 2.30 and 3.00 through 9.21 on Linux allow local users to overwrite arbitrary files via a symlink attack on a 1 temporary file or 2 log file...

CVE-2012-3329: Improper Link Resolution Before File Access

IBM Advanced Settings Utility ASU through 3.62 and 3.70 through 9.21 and Bootable Media Creator BoMC through 2.30 and 3.00 through 9.21 on Linux allow local users to overwrite arbitrary files via a symlink attack on a 1 temporary file or 2 log file...

PT-2012-4653

Name of the Vulnerable Software and Affected Versions IBM Advanced Settings Utility ASU versions 3.62 and 3.70 through 9.21 IBM Bootable Media Creator BoMC versions 2.30 and 3.00 through 9.21 Description The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary...