Security Bulletin: IBM Security Key Lifecycle Manager is affected by active debugging code (CVE-2016-6117)

Summary IBM Security Key Lifecycle Manager can be deployed with active debugging code that can create unintended entry points. Vulnerability Details CVEID: CVE-2016-6117 DESCRIPTION: IBM Tivoli Key Lifecycle Manager can be deployed with active debugging code that can disclose sensitive informatio...

CVE-2016-6117

IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 can be deployed with active debugging code that can disclose sensitive information...

CVE-2016-6117: Exposure of Sensitive Information to an Unauthorized Actor

IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 can be deployed with active debugging code that can disclose sensitive information...

PT-2017-8907

Name of the Vulnerable Software and Affected Versions IBM Tivoli Key Lifecycle Manager versions 2.5 through 2.6 Description The issue concerns the deployment of IBM Tivoli Key Lifecycle Manager with active debugging code, which can lead to the disclosure of sensitive information. Recommendations...

swfdump Debugging Code Denial of Service Vulnerability

SWFTools is a set of SWF manipulation and creation of utility authoring software tools. swfdump displays the id, name and depth of objects defined in the SWF file. It can also further decompose Actionscript, extract text, and display location information objects. A debugging code denial of servic...

Design/Logic Flaw

Lenovo USB Enhanced Performance Keyboard software before 2.0.2.2 includes active debugging code in SKHOOKS.DLL, which allows local users to obtain keypress information by accessing debug output...

CVE-2015-3320

Lenovo USB Enhanced Performance Keyboard software before 2.0.2.2 includes active debugging code in SKHOOKS.DLL, which allows local users to obtain keypress information by accessing debug output...

CVE-2015-3320: Exposure of Sensitive Information to an Unauthorized Actor

Lenovo USB Enhanced Performance Keyboard software before 2.0.2.2 includes active debugging code in SKHOOKS.DLL, which allows local users to obtain keypress information by accessing debug output...

Ubuntu Update for txt2man USN-1979-1

Check for the Version of txt2man OpenVAS Vulnerability Test $Id: gbubuntuUSN19791.nasl 7958 2017-12-01 06:47:47Z santu $ Ubuntu Update for txt2man USN-1979-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software...

Ubuntu: Security Advisory (USN-1979-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 12.04 LTS / 12.10 / 13.04 : txt2man vulnerability (USN-1979-1)

Patrick J Cherry discovered that txt2man contained leftover debugging code that incorrectly created a temporary file. A local attacker could possibly use this issue to overwrite arbitrary files. In the default Ubuntu installation, this should be prevented by the Yama link restrictions. Note that...

USN-1979-1: txt2man vulnerability

Patrick J Cherry discovered that txt2man contained leftover debugging code that incorrectly created a temporary file. A local attacker could possibly use this issue to overwrite arbitrary files. In the default Ubuntu installation, this should be prevented by the Yama link restrictions...

Fedora 15 : NetworkManager-0.8.9997-2.git20110531.fc15 (2011-7919)

This update includes no changes to NetworkManager but ensures that the latest update is installed to fix a security issue in NetworkManager-0.8.999-3.git20110526. This issue was previously fixed in NetworkManager-0.8.9997-1.git20110531.fc15 but was not marked as a security update...

Code injection

The AES encryption module 7.x-1.4 for Drupal leaves certain debugging code enabled in release, which records the plaintext password of the last logged-in user and allows remote attackers to gain privileges as that user...

CVE-2011-0899

The AES encryption module 7.x-1.4 for Drupal leaves certain debugging code enabled in release, which records the plaintext password of the last logged-in user and allows remote attackers to gain privileges as that user...

PT-2011-2744

Name of the Vulnerable Software and Affected Versions Drupal AES encryption module version 7.x-1.4 Description The issue allows remote attackers to gain privileges as the last logged-in user due to certain debugging code being left enabled in the release, which records the plaintext password of...

CVE-2011-0899: Undefined Security Weakness

The AES encryption module 7.x-1.4 for Drupal leaves certain debugging code enabled in release, which records the plaintext password of the last logged-in user and allows remote attackers to gain privileges as that user...

Buffer overflow

Buffer overflow in the wpaprintf function in the debugging code in wpasupplicant in the Fedora NetworkManager package before 0.6.5-3.fc7 allows user-assisted remote attackers to execute arbitrary code via malformed frames on a WPA2 network. NOTE: some of these details are obtained from third part...

DSA-1184-2 kernel-source-2.6.8 - several vulnerabilities

Bulletin has no description...

CVE-2006-4146

Buffer overflow in the 1 DWARF dwarfread.c and 2 DWARF2 dwarf2read.c debugging code in GNU Debugger GDB 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code via a crafted file with a location block DWFORMblock that contains a large number of operations...