Deepin Linux 15 - lastore-daemon Privilege Escalation

Exploit for linux platform in category local exploits !/usr/bin/env python encoding=utf8 Exploit Title: Lastore-daemon in Deepin 15 results in privilege escalation Date: 20160208 Exploit Author: King's Way Vendor Homepage: http://www.deepin.org Software Link:...

Deepin Linux 15 - 'lastore-daemon' Local Privilege Escalation

!/usr/bin/env python encoding=utf8 Exploit Title: Lastore-daemon in Deepin 15 results in privilege escalation Date: 20160208 Exploit Author: King's Way Vendor Homepage: http://www.deepin.org Software Link: http://cdimage.linuxdeepin.com/releases/15.1/deepin-15.1-amd64.iso Version: Deepin 15 & 15....

lastore-daemon D-Bus Privilege Escalation

This module attempts to gain root privileges on Deepin Linux systems by using lastore-daemon to install a package. The lastore-daemon D-Bus configuration on Deepin Linux permits any user in the sudo group to install arbitrary system packages without providing a password, resulting in code executi...

[SECURITY] Fedora 23 Update: xen-4.5.2-7.fc23

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

IBM Spectrum Protect Denial of Service Vulnerability

IBM Spectrum Protect formerly known as Tivoli Storage Manager is a suite of data protection platforms from U.S.-based IBM that provides organizations with a single point of control and management, and support for backup and recovery of virtual, physical and cloud environments of all sizes. A deni...

F5 Networks BIG-IP : BIND vulnerability (SOL14601)

ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service assertion failure and named daemon exit via a query for an AAAA record. C Tenable...

Sensord local root

A vulnerability exploiting the sensord daemon, which runs as root on some devices...

quagga -- stack based buffer overflow vulnerability

Donald Sharp reports: A malicious BGP peer may execute arbitrary code in particularly configured remote bgpd hosts...

RHEL 6 / 7 : ntp (RHSA-2016:0063)

Updated ntp packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

ISC BIND 9.3.0 < 9.9.8-P3 / 9.9.x-Sx < 9.9.8-S4 / 9.10.x < 9.10.3-P3 Multiple DoS

According to its self-reported version number, the installation of ISC BIND running on the remote name server is affected by multiple denial of service vulnerabilities : - A denial of service vulnerability exists due to improper handling of certain string formatting options. An authenticated,...

Important: Red Hat Security Advisory: ntp security update

Updated ntp packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

Juniper Junos RTSP Packet Handling flowd DoS (JSA10721)

According to its self-reported version number, the remote Juniper Junos device is affected by denial of service vulnerability due to a flaw in the Real Time Streaming Protocol Application Layer Gateway RTSP ALG implementation. An unauthenticated, remote attacker can exploit this, via a crafted RT...

NTP - Local Privilege Escalation

NTP - Local Privilege Escalation Source: http://www.halfdog.net/Security/2015/NtpCronjobUserNtpToRootPrivilegeEscalation/ Introduction Problem description: The cronjob script bundled with ntp package is intended to perform cleanup on statistics files produced by NTP daemon running with statistics...

Network Time Protocol Daemon (ntpd) 3.x / 4.x < 4.2.8p6 Multiple Vulnerabilities

The version of the remote NTP server is 3.x or 4.x prior to 4.2.8p6. It is, therefore, affected by the following vulnerabilities : - A flaw exists in the receive function due to the use of authenticated broadcast mode. A man-in-the-middle attacker can exploit this to conduct a replay attack...

NTP - Local Privilege Escalation

Source: http://www.halfdog.net/Security/2015/NtpCronjobUserNtpToRootPrivilegeEscalation/ Introduction Problem description: The cronjob script bundled with ntp package is intended to perform cleanup on statistics files produced by NTP daemon running with statistics enabled. The script is run as ro...

CVE-2015-4951

Client Acceptor Daemon CAD in the client in IBM Spectrum Protect formerly Tivoli Storage Manager 5.5 and 6.x before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.3 allows remote attackers to cause a denial of service daemon crash via a crafted Web client URL...

CVE-2015-4951

Client Acceptor Daemon CAD in the client in IBM Spectrum Protect formerly Tivoli Storage Manager 5.5 and 6.x before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.3 allows remote attackers to cause a denial of service daemon crash via a crafted Web client URL...

CVE-2015-4951

IBM Spectrum Protect (formerly Tivoli Storage Manager) Client Acceptor Daemon (CAD) is vulnerable to a remote DoS via a specially crafted URL to the Web client. Affected: CAD in the client side; includes 5.5, 6.x up to 6.3.2.5, 6.4 up to 6.4.3.1, and 7.1 up to 7.1.3. The root cause is a CAD crash...

CVE-2015-4951

Client Acceptor Daemon CAD in the client in IBM Spectrum Protect formerly Tivoli Storage Manager 5.5 and 6.x before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.3 allows remote attackers to cause a denial of service daemon crash via a crafted Web client URL...

openssh, pam_ssh_agent_auth security update

CentOS Errata and Security Advisory CESA-2016:0043 Updated openssh packages that fix two security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which...