494 matches found
Design/Logic Flaw
The copytouser function in the PAL emulation functionality for Xen 3.1.2 and earlier, when running on ia64 systems, allows HVM guest users to access arbitrary physical memory by triggering certain mapping operations...
CVE-2007-6416
The copytouser function in the PAL emulation functionality for Xen 3.1.2 and earlier, when running on ia64 systems, allows HVM guest users to access arbitrary physical memory by triggering certain mapping operations...
Ubuntu 7.04 : xen-3.0 vulnerability (USN-527-1)
Joris van Rantwijk discovered that the Xen host did not correctly validate the contents of a Xen guests's grug.conf file. Xen guest root users could exploit this to run arbitrary commands on the host when the guest system was rebooted. Note that Tenable Network Security has extracted the precedin...
CVE-2007-1222
Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which allows local users of the guest operating system to write arbitrary files to the host filesystem, and execute arbitrary code via launchd by writing a plist file to a...
CVE-2007-1182: Undefined Security Weakness
WebAPP before 0.9.9.5 allows remote Guest users to edit a Guest profile, which has unknown impact...
NTFS do a Ghost(break read-write privileges)-vulnerability warning-the black bar safety net
This machine is loaded with Windows 2 0 0 0, because the working relationship will be important information to put in the C:\studio, the C drive is NTFS format, and set the following permissions: Lostar is me full control The Everyone read-only After one day, and found where the file being...
Design/Logic Flaw
Virtual Private Server Vserver 2.0.x before 2.0.2-rc18 and 2.1.x before 2.1.1-rc18 provides certain context capabilities ccaps that allow local guest users to perform operations that were only intended to be allowed by the guest-root...
CVE-2006-2110
Virtual Private Server Vserver 2.0.x before 2.0.2-rc18 and 2.1.x before 2.1.1-rc18 provides certain context capabilities ccaps that allow local guest users to perform operations that were only intended to be allowed by the guest-root...
CVE-2006-2110
Virtual Private Server Vserver 2.0.x before 2.0.2-rc18 and 2.1.x before 2.1.1-rc18 provides certain context capabilities ccaps that allow local guest users to perform operations that were only intended to be allowed by the guest-root...
CVE-2006-2110
Virtual Private Server Vserver 2.0.x before 2.0.2-rc18 and 2.1.x before 2.1.1-rc18 provides certain context capabilities ccaps that allow local guest users to perform operations that were only intended to be allowed by the guest-root...
CVE-2006-2110: Undefined Security Weakness
Virtual Private Server Vserver 2.0.x before 2.0.2-rc18 and 2.1.x before 2.1.1-rc18 provides certain context capabilities ccaps that allow local guest users to perform operations that were only intended to be allowed by the guest-root...
CVE-2006-0424
BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 allows remote authenticated guest users to read the server log and obtain sensitive configuration information...
[Full-disclosure] Undocumented account vulnerability in Enterasys Vertical Horizon switches
Problem Description An undocumented account with a default password exists, additionally guest users can DoS the switch. 2. Tested systems The following versions were tested and found vulnerable: Vertical Horizon VH-2402S with firmware 02.05.00 Vertical Horizon VH-2402S with firmware 02.05.09.07...