4396 matches found
ForeScout CounterACT Insecure File Creation Vulnerability
ForeScout CounterACT is a network access control product. A security vulnerability exists in ForeScout CounterACT that originates when the program creates files in an insecure manner. An attacker could exploit the vulnerability to gain SYSTEM privileges...
ForeScout CounterACT Insecure File Creation Vulnerability (CNVD-2016-12429)
ForeScout CounterACT is a network access control product. A security vulnerability exists in ForeScout CounterACT that originates when the program creates files in an insecure manner. An attacker could exploit the vulnerability to gain SYSTEM privileges...
CVE-2015-1328
The overlayfs implementation in the linux aka Linux kernel package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file creation in the upper filesystem directory, which allows local users to obtain root access by leveraging a configuration in which overlayfs i...
NetworkManager, libnl3, libnm, libnma, network, nm security update
CentOS Errata and Security Advisory CESA-2016:2581 An update for NetworkManager is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...
Teradata Virtual Machine Community Edition 15.0 Insecure File Creation Vulnerability
Teradata Virtual Machine Community Edition version 15.10 suffers from an insecure creation of files in /tmp that may lead to elevated code execution. Title: Teradata Virtual Machine Community Edition v15.10 Insecure creation of files in /tmp Author: Larry W. Cashdollar, @larry0 Date: 2016-10-01...
Teradata Virtual Machine Community Edition 15.0 Insecure File Creation
Title: Teradata Virtual Machine Community Edition v15.10 Insecure creation of files in /tmp Author: Larry W. Cashdollar, @larry0 Date: 2016-10-01 Download Site: http://downloads.teradata.com/download/database/teradata-virtual-machine-community-edition-for-vmware Vendor: Teradata Vendor Notified:...
Microsoft Windows - VHDMP Arbitrary File Creation Privilege Escalation (MS16-138)
Microsoft Windows - VHDMP Arbitrary File Creation Privilege Escalation MS16-138 / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=914 Windows: VHDMP Arbitrary File Creation EoP Platform: Windows 10 10586 and 14393. Unlikely to work on 7 or 8.1 as I think it’s new functionality...
Microsoft Windows - VHDMP Arbitrary File Creation Privilege Escalation (MS16-138)
/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=914 Windows: VHDMP Arbitrary File Creation EoP Platform: Windows 10 10586 and 14393. Unlikely to work on 7 or 8.1 as I think it’s new functionality Class: Elevation of Privilege Summary: The VHDMP driver doesn’t safely create fil...
Teradata Virtual Machine Community Edition Code Execution Vulnerability
Teradata Virtual Machine Community Edition is a Teradata virtual container packaged with the SUSE Linux Enterprise Server SLES operating system and Teradata databases to run in a virtualized environment on third-party hardware. A code execution vulnerability exists in Teradata Virtual Machine...
WordPress W3 Total Cache 0.9.4.1 Race Condition Vulnerability
An information disclosure vulnerability was found in the W3 Total Cache plugin. This issue allows an attacker to hijack sensitive information, such as the administrator's session cookie. Exploiting the vulnerability is possible during a short period of time when an administrator submits the suppo...
WordPress W3 Total Cache 0.9.4.1 Race Condition
------------------------------------------------------------------------ Information disclosure race condition in W3 Total Cache WordPress Plugin ------------------------------------------------------------------------ Sipke Mellema, July 2016...
CVE-2016-7490
The installation script studioexpressinstall for Teradata Studio Express 15.12.00.00 creates files in /tmp insecurely. A malicious local user could create a symlink in /tmp and possibly clobber system files or perhaps elevate privileges...
CVE-2016-7489
Teradata Virtual Machine Community Edition v15.10's perl script /opt/teradata/gsctools/bin/t2a.pl creates files in /tmp in an insecure manner, this may lead to elevated code execution...
Code injection
Teradata Virtual Machine Community Edition v15.10's perl script /opt/teradata/gsctools/bin/t2a.pl creates files in /tmp in an insecure manner, this may lead to elevated code execution...
CVE-2016-7489
Teradata Virtual Machine Community Edition v15.10 is affected by an insecure file-creation flaw in the perl script /opt/teradata/gsctools/bin/t2a.pl, which creates temporary files in /tmp. The root cause is insecure handling of /tmp files, enabling a local user to inject/execute commands (e.g., b...
CVE-2016-7490
The CVE concerns Teradata Studio Express 15.12.00.00, where the installation script studioexpressinstall insecurely creates files under /tmp. A local attacker could place a symlink in /tmp and potentially clobber system files or escalate privileges. Technical details in related records confirm th...
PT-2016-7348
Name of the Vulnerable Software and Affected Versions Teradata Virtual Machine Community Edition version 15.10 Description The issue arises from the perl script /opt/teradata/gsctools/bin/t2a.pl in Teradata Virtual Machine Community Edition, which creates files in /tmp in an insecure manner. This...
CVE-2016-7489: Undefined Security Weakness
Teradata Virtual Machine Community Edition v15.10's perl script /opt/teradata/gsctools/bin/t2a.pl creates files in /tmp in an insecure manner, this may lead to elevated code execution...
