GLSA-201412-44 : policycoreutils: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201412-44 policycoreutils: Privilege escalation The seunshare utility is owned by root with 4755 permissions which can be exploited by a setuid system call. Impact : A local attacker may be able to gain escalated privileges...

GLSA-201412-35 : RSYSLOG: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201412-35 RSYSLOG: Denial of Service Multiple vulnerabilities have been discovered in RSYSLOG. Please review the CVE identifiers referenced below for details. Impact : A context-dependent attacker may be able to create a Denial of...

GLSA-201412-23 : Nagios: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201412-23 Nagios: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Nagios. Please review the CVE identifiers referenced below for details. Impact : A remote attacker may be able to execute arbitrary code,...

GLSA-201412-20 : GNUstep Base library: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201412-20 GNUstep Base library: Denial of Service GNUstep Base library does not properly handle the file descriptor for logging, when run as a daemon. Impact : A remote attacker could send a specially crafted request, possibly...

GLSA-201412-01 : QEMU: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201412-01 QEMU: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details. Impact : A context-dependent attacker could cause a Denial of Service...

GLSA-201411-05 : GNU Wget: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201411-05 GNU Wget: Arbitrary code execution An absolute path traversal vulnerability has been found in GNU Wget. Impact : A remote FTP server is able to write to arbitrary files, and consequently execute arbitrary code. Workaroun...

GLSA-201409-09 : Bash: Code Injection (Shellshock)

The remote host is affected by the vulnerability described in GLSA-201409-09 Bash: Code Injection Stephane Chazelas reported that Bash incorrectly handles function definitions, allowing attackers to inject arbitrary code. Impact : A remote attacker could exploit this vulnerability to execute...

PT-2014-1904

Name of the Vulnerable Software and Affected Versions rsyslog versions prior to 8.4.2 sysklogd version 1.5 and earlier Description The issue affects the rsyslog package in Gentoo Linux and can lead to a disruption in the confidentiality, integrity, and availability of protected information. It is...

GLSA-201409-05 : Adobe Flash Player: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201409-05 Adobe Flash Player: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly...

GLSA-201408-10 : Libgcrypt: Side-channel attack

The remote host is affected by the vulnerability described in GLSA-201408-10 Libgcrypt: Side-channel attack A vulnerability in the implementation of ElGamal decryption procedures of Libgcrypt leaks information to various side-channels. Impact : A physical side-channel attack allows a remote...

GLSA-201408-13 : Jinja2: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201408-13 Jinja2: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Jinja2. Please review the CVE identifiers referenced below for details. Impact : A local attacker could gain escalated privileges via a...

GLSA-201408-15 : PostgreSQL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201408-15 PostgreSQL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details. Impact : A remote authenticated attacker may be able to...

GLSA-201408-01 : Zend Framework: SQL injection

The remote host is affected by the vulnerability described in GLSA-201408-01 Zend Framework: SQL injection Developers using non-ASCII-compatible encodings in conjunction with the MySQL PDO driver of PHP may be vulnerable to SQL injection attacks. Impact : A remote attacker could use specially...

GLSA-201407-04 : GnuPG: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201407-04 GnuPG: Denial of Service GnuPG does not properly handle a specially crated compressed packet resulting in an infinite loop. Impact : A context-dependent attacker can cause a Denial of Service. Workaround : There is no...

Mozilla Firefox <= 1.5.0.4 - Javascript Navigator Object Code Execution PoC

No description provided by source. !-- Firefox = 1.5.0.4 Javascript navigator Object Code Execution PoC http://browserfun.blogspot.com/ The following bug mfsa2006-45 was tested on the Firefox 1.5.0.4 running on Windows 2000 SP4, Windows XP SP4, and a recently updated Gentoo Linux system. This bug...

Gentoo-Specific MPG123 - URI Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18794/info The mpg123 application is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. This issue may...

lighttpd 1.4.31 Denial of Service PoC

No description provided by source. !/bin/bash Exploit Title: simple lighttpd 1.4.31 DOS POC Date: 11/21/2012 Exploit Author: [email protected] Vendor Homepage: http://www.lighttpd.net Software Link: http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.31.tar.gz Version: 1.4.31 Tested on:...

Salim Gasmi GLD 1.x Postfix Greylisting Daemon Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13129/info It is reported that GLD contains a buffer overflow vulnerability. This issue is due to a failure of the application to properly ensure that a fixed-size memory buffer is sufficiently large prior to copying...

GLSA-201406-30 : sudo: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201406-30 sudo: Privilege escalation When the Sudo envreset option is disabled it is enabled by default, certain environment variables are not blacklisted as expected. Impact : A local attacker, authorized to run commands using...

GLSA-201405-24 : Apache Portable Runtime, APR Utility Library: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201405-24 Apache Portable Runtime, APR Utility Library: Denial of Service Multiple vulnerabilities have been discovered in Apache Portable Runtime and APR Utility Library. Please review the CVE identifiers referenced below for...