OPENSUSE-SU-2023:0206-1 Security update for amanda

This update for amanda fixes the following issues: - CVE-2023-30577: Fixed improper argument checking for runtar.c boo1213701,...

OPENSUSE-SU-2023:0205-1 Security update for amanda

This update for amanda fixes the following issues: - CVE-2023-30577: Fixed improper argument checking for runtar.c boo1213701...

DEBIAN-CVE-2023-30577

AMANDA Advanced Maryland Automatic Network Disk Archiver before tag-community-3.5.4 mishandles argument checking for runtar.c, a different vulnerability than CVE-2022-37705...

UBUNTU-CVE-2023-30577

AMANDA Advanced Maryland Automatic Network Disk Archiver before tag-community-3.5.4 mishandles argument checking for runtar.c, a different vulnerability than CVE-2022-37705...

PT-2023-8692

Name of the Vulnerable Software and Affected Versions AMANDA versions prior to 3.5.4 Description The issue is related to the mishandling of argument checking for runtar.c in the AMANDA software, which can be exploited to elevate privileges. This is a different issue than previously reported...

D-Link DIR-600 B5 Router Command Execution

The vulnerability of the lxmldbcsystem function in D-Link DIR-600 B5 router microprogramming software is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

CVE-2023-30577

AMANDA Advanced Maryland Automatic Network Disk Archiver before tag-community-3.5.4 mishandles argument checking for runtar.c, a different vulnerability than CVE-2022-37705...

TOTOLINK X18 Set Op Mode Buffer Overflow Command Execution

The vulnerability of the setOpModeCfg function in TOTOLINK X18 microprogrammed router software is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2023-3155 · Totolink · Totolink X18

Name of the Vulnerable Software and Affected Versions: TOTOLINK X18 version 9.1.0cu.2024 B20220329 Description: The issue is related to a command injection vulnerability via the hostname parameter in the setOpModeCfg function. This vulnerability is associated with insufficient argument checking,...

D-Link DIR-820L A1 Arbitrary Command Execution

The vulnerability of D-Link DIR-820L A1 microprogrammed router software is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on behalf of the root user in the target system...

D-Link DIR-846 Router Command Injection

The vulnerability of D-Link DIR-846 router’s microprogramming software is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially created request /HNAP1/ within the...

Exploit for Argument Injection in Zmanda Amanda

Suggested description A privilege escalation flaw was foun...

PT-2022-34547 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.326 Description: The issue is related to the i740 calc vclk function in the i740fb module of the Linux Kernel. The problem arises from the lack of proper argument checking in this function. The actual impac...

StarOS Command Line Arbitrary Command Execution Privilege Escalation

The vulnerability of the command-line interface of StarOS systems is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges...

Cisco Expressway Series Telepresence VCS Root Code Execution

The vulnerability of the Web interface for controlling Cisco Expressway Series and Cisco Telepresence VCS devices is related to insufficient checking of the command arguments entered by users. Exploiting this vulnerability allows a malicious actor to execute arbitrary code as a root user remotely...

D-link DDNS Arbitrary Command Execution

The vulnerability of the DDNS function in D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability can allow a remote attacker to perform arbitrary actions...

NETGEAR XR1000 Command Injection

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software is related to insufficient testing of the arguments passed in commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Cisco Firepower Threat Defense CLI Command Execution

The vulnerability of the command-line interface CLI of Cisco Firepower Threat Defense FTD microprogramming systems lies in insufficient checking of command arguments. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

Cisco IOS XE SD-WAN Command Injection

The vulnerability of the Cisco IOS XE SD-WAN software’s command-line interface is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

Cisco Firepower Threat Defense CLI Command Execution

The vulnerability of the command-line interface CLI of Cisco Firepower Threat Defense software-related microprogramming systems lies in insufficient checking of arguments passed in commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands with root privileges...