Ubuntu 12.04 LTS / 12.10 / 13.04 : usb-creator vulnerability (USN-1963-1)

It was discovered that usb-creator was using polkit in an unsafe manner. A local attacker could possibly use this issue to bypass intended polkit authorizations. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable ha...

USN-1963-1: usb-creator vulnerability

It was discovered that usb-creator was using polkit in an unsafe manner. A local attacker could possibly use this issue to bypass intended polkit authorizations...

CVE-2013-1063

usb-creator 0.2.47 before 0.2.47.1, 0.2.40 before 0.2.40ubuntu2, and 0.2.38 before 0.2.38.2 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1...

[RIPS] A static source code analyser for vulnerabilities in PHP scripts

RIPS is a tool written in PHP to find vulnerabilities in PHP applications using static code analysis. By tokenizing and parsing all source code files RIPS is able to transform PHP source code into a program model and to detect sensitive sinks potentially vulnerable functions that can be tainted b...

SuSE 11.3 Security Update : lcms2 (SAT Patch Number 8091)

lcms2 has been updated to the version 2.5 which is a maintenance release to fix various security and other bugs. - User defined parametric curves can now be saved in ICC profiles. - RGB profiles using same tone curves for several channels are storing now only one copy of the curve - update black...

Mobile Atlas Creator 1.9.12 - Persistent Command Injection Vulnerability

Title: ====== Mobile Atlas Creator 1.9.12 - Persistent Command Injection Vulnerability Date: ===== 2013-06-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=970 VL-ID: ===== 970 Common Vulnerability Scoring System: ==================================== 3.5 Introduction:...

Mobile Atlas Creator 1.9.12 - Persistent Command Injection

Mobile Atlas Creator 1.9.12 - Persistent Command Injection Title: ====== Mobile Atlas Creator 1.9.12 - Persistent Command Injection Vulnerability Date: ===== 2013-06-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=970 VL-ID: ===== 970 Common Vulnerability Scoring...

Mobile Atlas Creator 1.9.12 Command Injection

Title: ====== Mobile Atlas Creator 1.9.12 - Persistent Command Injection Vulnerability Date: ===== 2013-06-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=970 VL-ID: ===== 970 Common Vulnerability Scoring System: ==================================== 3.5 Introduction:...

Mobile Atlas Creator 1.9.12 - Persistent Command Injection

Title: ====== Mobile Atlas Creator 1.9.12 - Persistent Command Injection Vulnerability Date: ===== 2013-06-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=970 VL-ID: ===== 970 Common Vulnerability Scoring System: ==================================== 3.5 Introduction:...

Several Flaws Discovered in ZRTPCPP Library Used in Secure Phone Apps

A security researcher has uncovered a number of serious vulnerabilities in one of the core security components of several secure telephony applications, including the Silent Circle system developed by PGP creator Phil Zimmermann. The vulnerabilities in the GNU ZRTPCPP library already have been...

Mobile Atlas Creator 1.9.12 - Persistent Command Injection

Document Title: =============== Mobile Atlas Creator 1.9.12 - Persistent Command Injection References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=970 Release Date: ============= 2013-06-10 Vulnerability Laboratory ID VL-ID: ====================================...

Mobile Atlas Creator 1.9.12 - Persistent Command Injection

Document Title: =============== Mobile Atlas Creator 1.9.12 - Persistent Command Injection References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=970 Release Date: ============= 2013-06-10 Vulnerability Laboratory ID VL-ID: ====================================...

SQLiteManager 1.2.4 PHP Code Injection

Description: =============================================================== Exploit Title: SQLiteManager 0Day Remote PHP Code Injection Vulnerability Google Dork: intitle:SQLiteManager inurl:sqlite/ Date: 23/01/2013 Exploit Author: RealGame Vendor Homepage: http://www.Relagame.co.il Software Lin...

CVE-2012-3329

IBM Advanced Settings Utility ASU through 3.62 and 3.70 through 9.21 and Bootable Media Creator BoMC through 2.30 and 3.00 through 9.21 on Linux allow local users to overwrite arbitrary files via a symlink attack on a 1 temporary file or 2 log file...

[SECURITY] Fedora 18 Update: lorax-18.22-1.fc18

Lorax is a tool for creating the anaconda install images. It also includes livemedia-creator which is used to create bootable livemed ia, including live isos and disk images. It can use libvirtd for the install, or Anaconda's image install feature...

CVE-2010-5236

Untrusted search path vulnerability in Roxio Easy Media Creator Home 9.0.136 allows local users to gain privileges via a Trojan horse homeutils9.dll file in the current working directory, as demonstrated by a directory that contains a .roxio, .c2d, or .gi file. NOTE: some of these details are...

Design/Logic Flaw

Untrusted search path vulnerability in Roxio Easy Media Creator Home 9.0.136 allows local users to gain privileges via a Trojan horse homeutils9.dll file in the current working directory, as demonstrated by a directory that contains a .roxio, .c2d, or .gi file. NOTE: some of these details are...

CVE-2010-5236

CVE-2010-5236 affects Roxio Easy Media Creator Home 9.0.136. The vulnerability is an untrusted search path that allows local users to gain privileges via a Trojan horse homeutils9.dll placed in the current working directory. Demonstrations reference directories containing .roxio, .c2d, or .gi fil...

Alleged Mariposa Botmaster in Court

One of the men authorities allege to have been behind the massive–and now dead–Mariposa botnet, has gone on trial in Slovenia, more than two years after the initial arrests and takedown of the network. Mariposa was one of the first handful of botnets that authorities and security researchers work...

Design/Logic Flaw

lib/db/access.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 assigns incorrect capabilities to the course-creator role, which allows remote authenticated users to modify course filters by leveraging this role...