178 matches found
Apple macOS High Sierra APFS Password Truncation Vulnerability
Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.APFS is one of the file system components for Apple devices. A security vulnerability exists in the APFS component in Apple macOS High Sierra versions prior to 10.13.4. An attacker could exploit the...
Wowza Streaming Engine File System Read/Write Vulnerability
Wowza Streaming Engine is a Unified Streaming Media Server software developed by Wowza Media Systems. A file system read and write vulnerability exists in Wowza Streaming Engine. An attacker can read and write to the file system via JMX using default JMX credentials remote code execution is also...
HP-UX VxFS Unauthorized Access Vulnerability
HP-UX VxFS is a set of commercial logging file software developed by Hewlett-Packard HP that runs on Unix-like operating systems. A security vulnerability exists in the ACL interface of HP-UX VxFS, which can be exploited by a local attacker to gain unauthorized access to a file...
WinREST Remote Privilege Escalation
So a year back I was massively scanning internet. This case ISPs IPs blocks where you can find easily at RIPE for example. Then I found some interesting hosts where SMB were open and the ACL is totally open to root file system with the same netbios name. All file system is writable. I was able to...
IBM General Parallel File System mmfslinux Kernel Module Denial of Service Vulnerability
The IBM General Parallel File System is a shared file system that originated from the virtual shared disk technology used on IBM SP systems. A denial of service vulnerability in the IBM General Parallel File System mmfslinux kernel module allows attackers to cause a memory crash via a specially...
rpm security update
4.11.1-18 - Add check against malicious CPIO file name size 1163060 - Fixes CVE-2014-8118 4.11.1-17 - Fix race condidition where unchecked data is exposed in the file system 1163060 - Fixes CVE-2013-6435...
MiniWeb 300 - Arbitrary File Upload (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 /MiniWeb/ include...
Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2012:147)
Security issues were identified and fixed in mozilla thunderbird : Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we...
Ubuntu 10.10 : linux vulnerabilities (USN-1160-1)
Dan Rosenberg discovered that IRDA did not correctly check the size of buffers. On non-x86 systems, a local attacker could exploit this to read kernel heap memory, leading to a loss of privacy. CVE-2010-4529 Dan Rosenburg discovered that the CAN subsystem leaked kernel addresses into the /proc...
GLSA-200712-13 : E2fsprogs: Multiple buffer overflows
The remote host is affected by the vulnerability described in GLSA-200712-13 E2fsprogs: Multiple buffer overflows Rafal Wojtczuk McAfee AVERT Research discovered multiple integer overflows in libext2fs, that are triggered when processing information from within the file system, resulting in...
Fedora Core 6 : gnucash-2.0.5-1.fc6 (2007-256)
This updates GnuCash to version 2.0.5, the latest upstream release. Major changes in this release include; o Fix some strings not being translated. o Use guiles native sort and record. o Adjust how payment dialog resizes. o Don't abort when F::Q fails to return a quote. o Change Russian Ruble fro...
CVE-2005-0471
CVE-2005-0471 affects Sun Java JRE 1.1.x through 1.4.x. The vulnerability arises when the Java runtime writes temporary files with long filenames that become predictable on file systems using 8.3 short names, enabling remote attackers to write arbitrary files to known locations and potentially ex...
CVE-2005-0471
Sun Java JRE 1.1.x through 1.4.x writes temporary files with long filenames that become predictable on a file system that uses 8.3 style short names, which allows remote attackers to write arbitrary files to known locations and facilitates the exploitation of vulnerabilities in applications that...
[SECURITY] [DSA 557-1] New rp-pppoe packages fix potential root compromise
-------------------------------------------------------------------------- Debian Security Advisory DSA 557-1 [email protected] http://www.debian.org/security/ Martin Schulze October 4th, 2004 http://www.debian.org/security/faq -...
RHEL 2.1 : wget (RHSA-2002:256)
The wget packages shipped with Red Hat Linux Advanced Server 2.1 contain a security bug which, under certain circumstances, can cause local files to be written outside the download directory. Updated 09 Jan 2003 Added fixed packages for the Itanium IA64 architecture. Updated 06 Feb 2003 Added fix...
CVE-2004-0133
The XFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the XFS file system, which allows local users to obtain sensitive information by reading the raw device...
CVE-2001-1506
Unknown vulnerability in the file system protection subsystem in HP Secure OS Software for Linux 1.0 allows additional user privileges on some files beyond what is specified in the file system protection rules, which allows local users to conduct unauthorized operations on restricted files...
