65 matches found
CVE-2020-1620
CVE-2020-1620 : A local, authenticated user can obtain hashed login passwords via the configd streamer log in Juniper Networks Junos OS Evolved before version 19.3R1. Affected component: configd streamer log. Root cause: disclosure of password hashes through log output. Impact: confidential data ...
CVE-2020-1620 Junos OS Evolved: Configd leaks hashes via log file and is world readable
A local, authenticated user with shell can obtain the hashed values of login passwords via configd streamer log. This issue affects all versions of Junos OS Evolved prior to 19.3R1...
PT-2020-4131
Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 19.3R1 Description: The issue is related to insufficient protection of registration data in the configd Trace Handler component of the JunOS Evolved operating system. It allows a local, authenticated user wi...
CVE-2020-1620: Improper Control of a Resource Through its Lifetime
A local, authenticated user with shell can obtain the hashed values of login passwords via configd streamer log. This issue affects all versions of Junos OS Evolved prior to 19.3R1...
PT-2020-4130
Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 19.3R1 Description: The issue is related to insufficient protection of registration data in the configd Streamer Log component of the JunOS Evolved operating system. Exploitation of this issue may allow an...
CVE-2020-1621: Improper Control of a Resource Through its Lifetime
A local, authenticated user with shell can obtain the hashed values of login passwords via configd traces. This issue affects all versions of Junos OS Evolved prior to 19.3R1...
About the security content of tvOS 12.2 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
Apple iOS, tvOS and macOS Mojave configd elevation of privilege vulnerability
Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS Mojave is a specialized operating system developed for Mac computers. configd is one of the system configuration daemon component. A security vulnerability exists in the...
About the security content of tvOS 12.2
About the security content of tvOS 12.2 This document describes the security content of tvOS 12.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
Mac OS X 10.9.5 or later < 10.11.1 Multiple Vulnerabilities
Binary data 9324.prm...
Apple iOS < 9.1 Multiple Vulnerabilities
Binary data 9328.prm...
Apple iOS/OS X/watchOS Heap Buffer Overflow Vulnerability
OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. iOS is an operating system developed by Apple for mobile devices. Apple iOS versions prior to 9.1, Apple OS X versions prior to 10.11.1, and watchOS versions prior to 2.0.1, DNS client...
APPLE-SA-2015-10-21-2 watchOS 2.0.1
APPLE-SA-2015-10-21-2 watchOS 2.0.1 watchOS 2.0.1 is now available and addresses the following: Apple Pay Available for: Apple Watch Sport, Apple Watch, Apple Watch Edition, and Apple Watch Hermes Impact: Some cards may allow a terminal to retrieve limited recent transaction information when maki...
APPLE-SA-2015-10-21-1 iOS 9.1
APPLE-SA-2015-10-21-1 iOS 9.1 iOS 9.1 is now available and addresses the following: Accelerate Framework Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: Visiting a maliciously crafted website may lead to arbitrary code execution Description: A...
CVE-2015-7015
Heap-based buffer overflow in the DNS client library in configd in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code via a crafted app that sends a spoofed configd response to a client...
Heap overflow
Heap-based buffer overflow in the DNS client library in configd in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code via a crafted app that sends a spoofed configd response to a client...
CVE-2015-7015
Heap-based buffer overflow in the DNS client library in configd in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code via a crafted app that sends a spoofed configd response to a client...
PT-2015-7458
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.1 Apple OS X versions prior to 10.11.1 Apple watchOS versions prior to 2.0.1 Description A heap-based buffer overflow issue exists in the DNS client library in configd, allowing attackers to execute arbitrary code...
CVE-2015-7015: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in the DNS client library in configd in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code via a crafted app that sends a spoofed configd response to a client...