309 matches found
MGASA-2020-0060 Updated ansible package fixes security vulnerabilities
A flaw was found in the solariszone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the 'ps' bare command on the remote machine. An attacker could take advantage of this flaw by crafting the na...
PT-2020-6675
Name of the Vulnerable Software and Affected Versions Ansible Engine versions 2.9.x before 2.9.3 Ansible Engine versions 2.8.x before 2.8.8 Ansible Engine versions 2.7.x before 2.7.16 and earlier Description The issue is related to the nxos file copy module in Ansible, which can be used to copy...
Ansible: malicious code could craft filename in nxos_file_copy module
A vulnerability in Ansible's nxosfilecopy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craft the filename parameter to perform OS command injections. This could result in a loss of confidentiality of the system among other issues...
Ansible: malicious code could craft filename in nxos_file_copy module
A vulnerability in Ansible's nxosfilecopy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craft the filename parameter to perform OS command injections. This could result in a loss of confidentiality of the system among other issues...
Ansible: malicious code could craft filename in nxos_file_copy module
A vulnerability in Ansible's nxosfilecopy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craft the filename parameter to perform OS command injections. This could result in a loss of confidentiality of the system among other issues...
Ansible: malicious code could craft filename in nxos_file_copy module
A vulnerability in Ansible's nxosfilecopy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craft the filename parameter to perform OS command injections. This could result in a loss of confidentiality of the system among other issues...
The vulnerability of the file_copy_fallback() function in the Glib library allows a hacker to gain unauthorized access to protected information.
The vulnerability of the filecopyfallback function in the Glib library is related to incorrect handling of permissions. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...
Ansible nxos_file_copy module input validation error vulnerability
Ansible is a computer system configuration manager from the American company Ansible. The product can be used to distribute, manage, and program computer systems. nxosfilecopy is one of the modules that supports copying files to remote NXOS devices. An input validation error vulnerability exists ...
CVE-2019-17445
An issue was discovered in Eracent EDA, EPA, EPM, EUA, FLW, and SUM Agent through 10.2.26. The agent executable, when installed for non-root operations scanning, can be forced to copy files from the filesystem to other locations via Symbolic Link Following...
CVE-2011-1588
CVE-2011-1588 affects Thunar up to version 1.3.1, where a crash can occur when copying and pasting a file name containing % format characters due to a format string error. The root cause is a faulty format string handling in the relevant code path. The connected advisories indicate a fix in the O...
glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress
filecopyfallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used...
Exploit for Use After Free in Microsoft
CVE-2019-0708 Bluekeep Metasploit module for CVE-2019-0708...
CVE-2019-11249
CVE-2019-11249 affects Kubernetes/kubectl cp usage. A malicious tar inside the container could be executed when kubectl cp copies data from a container to the user host, potentially writing arbitrary files to the local filesystem by the container’s tar output. Affected Kubernetes versions include...
Security update for proftpd (important)
openSUSE Security Update: Security update for proftpd Announcement ID: openSUSE-SU-2019:1870-1 Rating: important References: 1142281 Cross-References: CVE-2017-7418 CVE-2019-12815 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes two vulnerabilities is now available...
Fedora 30 : proftpd (2019-e9187610c3)
This update addresses an arbitrary file copy vulnerability in modcopy in ProFTPD, which allowed for remote code execution and information disclosure without authentication due to not honoring constraints. Upstream bug: http://bugs.proftpd.org/showbug.cgi?id=4372 Note that Tenable Network Security...
Fedora 29 : proftpd (2019-82b0f48691)
This update addresses an arbitrary file copy vulnerability in modcopy in ProFTPD, which allowed for remote code execution and information disclosure without authentication due to not honoring constraints. Upstream bug: http://bugs.proftpd.org/showbug.cgi?id=4372 Note that Tenable Network Security...
openSUSE: Security Advisory for proftpd (openSUSE-SU-2019:1836-1)
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2016-10785
cPanel before 60.0.25 allows attackers to discover file contents during file copy operations SEC-185...
CVE-2016-10785
cPanel before 60.0.25 allows attackers to discover file contents during file copy operations SEC-185...
CVE-2016-10785
CVE-2016-10785 affects cPanel prior to 60.0.25, where an attacker could disclose file contents during file copy operations (SEC-185). Root cause described as an information disclosure vulnerability in the file-copy process. The practical impact is information disclosure of file contents; exploita...