109 matches found
IBM PowerVM Hypervisor Access Control Error Vulnerability
IBM PowerVM Hypervisor is an application from Universal Business Machines IBM, Inc. provides a secure and scalable virtualization environment for applications built on the advanced RAS capabilities and leading performance of the Power Systems platform.An access control error vulnerability exists ...
CVE-2021-38917
IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read and write arbitrary host system memory through a series of carefully crafted service procedures. IBM X-Force ID: 210018...
Security Bulletin: The PowerVM hypervisor can allow an attacker that gains service access to the FSP to read and write system memory
Summary On PowerVM systems an attacker that gains service access to the FSP can read and write system memory through a series of carefully crafted service procedures Vulnerability Details CVEID: CVE-2021-38917 DESCRIPTION: IBM PowerVM Hypervisor could allow an attacker that gains service access t...
CVE-2021-29765
IBM PowerVM Hypervisor FW940 and FW950 could allow an attacker to obtain sensitive information if they gain service access to the FSP. IBM X-Force ID: 202476...
Design/Logic Flaw
IBM PowerVM Hypervisor FW940 and FW950 could allow an attacker to obtain sensitive information if they gain service access to the FSP. IBM X-Force ID: 202476...
CVE-2021-29765
IBM PowerVM Hypervisor FW940 and FW950 could allow an attacker to obtain sensitive information if they gain service access to the FSP. IBM X-Force ID: 202476...
Security Bulletin: The PowerVM Platform KeyStore functionality can be compromised if an attacker gains service access to the FSP
Summary An attacker that gains service access to the FSP can locate and through a series of service procedures decrypt data contained in the Platform KeyStore Vulnerability Details CVEID: CVE-2021-29765 DESCRIPTION: IBM PowerVM Hypervisor could allow an attacker to obtain sensitive information if...
EulerOS Virtualization 2.9.0 : edk2 (EulerOS-SA-2021-1668)
According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - EFI Development Kit II AARCH64 UEFI FirmwareSecurity Fixes:AuthenticodeVerify calls OpenSSLs d2iPKCS7 API to parse asn encoded signe...
MODX Revolution Cross-Site Scripting Vulnerability
MODX Revolution is a collection of easy-to-use content management systems CMS and application frameworks. A cross-site scripting vulnerability exists in login-fsp.html in MODX Revolution, which can be exploited by remote attackers to inject arbitrary web script or HTML via QUERYSTRING...
FreeBSD : fsp buffer overflow and directory traversal vulnerabilities (20be2982-4aae-11d8-96f2-0020ed76ef5a)
The Debian security team reported a pair of vulnerabilities in fsp : A vulnerability was discovered in fsp, client utilities for File Service Protocol FSP, whereby a remote user could both escape from the FSP root directory CAN-2003-1022, and also overflow a fixed-length buffer to execute arbitra...
Debian Security Advisory DSA 416-1 (fsp)
The remote host is missing an update to fsp announced via advisory DSA 416-1. OpenVAS Vulnerability Test $Id: deb4161.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 416-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian: Security Advisory (DSA-416)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FSP Suite Directory Traversal Vulnerability
The FSP Suite daemon has been found to improperly filter out paths with trailing / or starting with /. This would allow an attacker access to files that reside outside the bounding FSP root directory. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a...
Detect FSP Compatible Hosts
The remote host is running a FSP File Service Protocol compatible product. FSP is a protocol designed to serve file on top of the UDP protocol. SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...
Debian DSA-416-1 : fsp - buffer overflow, directory traversal
A vulnerability was discovered in fsp, client utilities for File Service Protocol FSP, whereby a remote user could both escape from the FSP root directory CAN-2003-1022, and also overflow a fixed-length buffer to execute arbitrary code CAN-2004-0011. %NASLMINLEVEL 70300 C Tenable Network Security...
CVE-2004-0011
CVE-2004-0011 concerns a buffer overflow in fsp (File Service Protocol client utilities) prior to version 2.81.b18, enabling remote code execution. The issue affects the fsp component and is repeatedly referenced in Debian (DSA-416), FreeBSD/ VuXML entries, and OpenVAS advisories, which document ...
CVE-2003-1022
Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files outside the FSP root directory...
CVE-2003-1022
CVE-2003-1022: FSP Suite daemon directory traversal vulnerability. The FSP client/server allowed remote access to files outside the FSP root due to improper filtering of paths (trailing slash or leading slash). Affects FSP Suite prior to 2.81.b18; impact is partial confidentiality/integrity/avail...