394 matches found
CVE-2021-33393
lfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/backup.pl is owned by the root account. It might be owned by an unprivileged account, which could potentially be used to install a Trojan horse backup.pl script that is later executed by root. Similar problems with the...
Information disclosure
lfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/backup.pl is owned by the root account. It might be owned by an unprivileged account, which could potentially be used to install a Trojan horse backup.pl script that is later executed by root. Similar problems with the...
CVE-2021-33393
lfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/backup.pl is owned by the root account. It might be owned by an unprivileged account, which could potentially be used to install a Trojan horse backup.pl script that is later executed by root. Similar problems with the...
CVE-2021-33393
lfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/backup.pl is owned by the root account. It might be owned by an unprivileged account, which could potentially be used to install a Trojan horse backup.pl script that is later executed by root. Similar problems with the...
CVE-2021-33393
IPFire 2.25-core155 contains an ownership/permissions issue in backup scripts (backup.pl) under /var/ipfire/backup, which can be exploited to execute code as root. Connected details show an authenticated command-injection path in pakfire.cgi used to achieve root-level RCE on IPFire 2.25 Core Upda...
CVE-2021-33393
lfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/backup.pl is owned by the root account. It might be owned by an unprivileged account, which could potentially be used to install a Trojan horse backup.pl script that is later executed by root. Similar problems with the...
PT-2021-20131
Name of the Vulnerable Software and Affected Versions IPFire version 2.25-core155 Description The issue is related to the ownership of certain files, specifically /var/ipfire/backup/bin/backup.pl, which may not be owned by the root account. This could potentially allow an unprivileged account to...
IPFire Firewall security vulnerabilities
IPFire Firewall is an open source Linux-based firewall system from the IPFire organization. IPFire Firewall suffers from a remote code execution vulnerability, and no detailed vulnerability details are provided at this time...
CVE-2021-33393: Undefined Security Weakness
lfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/backup.pl is owned by the root account. It might be owned by an unprivileged account, which could potentially be used to install a Trojan horse backup.pl script that is later executed by root. Similar problems with the...
IPFire Remote Code Execution (CVE-2021-33393)
A remote code execution vulnerability exists in IPFire. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
IPFire 2.25 - Remote Code Execution (Authenticated)
Exploit Title: IPFire 2.25 - Remote Code Execution Authenticated Date: 15/05/2021 Exploit Author: Mücahit Saratar Vendor Homepage: https://www.ipfire.org/ Software Link: https://downloads.ipfire.org/releases/ipfire-2.x/2.25-core156/ipfire-2.25.x8664-full-core156.iso Version: 2.25 - core update 15...
IPFire 2.25 Core Update 156 and Prior pakfire.cgi Authenticated RCE
This module exploits an authenticated command injection vulnerability in the /cgi-bin/pakfire.cgi web page of IPFire devices running versions 2.25 Core Update 156 and prior to execute arbitrary code as the root user. Module Options msf use exploit/linux/http/ipfire/pakfireexec msf...
IPFire 2.25 - Remote Code Execution (Authenticated) Exploit
Exploit Title: IPFire 2.25 - Remote Code Execution Authenticated Exploit Author: Mücahit Saratar Vendor Homepage: https://www.ipfire.org/ Software Link: https://downloads.ipfire.org/releases/ipfire-2.x/2.25-core156/ipfire-2.25.x8664-full-core156.iso Version: 2.25 - core update 156 Tested on: parr...
IPFire 2.25 Remote Code Execution
Exploit Title: IPFire 2.25 - Remote Code Execution Authenticated Date: 15/05/2021 Exploit Author: Mücahit Saratar Vendor Homepage: https://www.ipfire.org/ Software Link: https://downloads.ipfire.org/releases/ipfire-2.x/2.25-core156/ipfire-2.25.x8664-full-core156.iso Version: 2.25 - core update 15...
ipfire-2-25-auth-rce
Ipfire 2-25 core update 156 authenticated rce - system run...
Security update for tor (moderate)
openSUSE Security Update: Security update for tor Announcement ID: openSUSE-SU-2021:0474-1 Rating: moderate References: 1183726 Cross-References: CVE-2021-28089 CVE-2021-28090 Affected Products: openSUSE Backports SLE-15-SP2 An update that fixes two vulnerabilities is now available. Description:...
IPFire Firewall Web Interface Command Injection (CVE-2018-16232)
A command injection vulnerability exists in the web interface of IPFire firewall. The vulnerability is due to improper validation of user-supplied requests in the backup.cgi script. Successful exploitation could lead to arbitrary command injection as the nobody user...
IPFire 2.21 - Cross-Site Scripting
IPFire 2.21 - Cross-Site Scripting Exploit Title: IPFire 2.21 - Core Update 127 | Cross-Site Scripting Date: 08.02.2019 Exploit Author: Ozer Goker Vendor Homepage: https://www.ipfire.org Software Link: https://downloads.ipfire.org/releases/ipfire-2.x/2.21-core127/ipfire-2.21.x8664-full-core127.is...
IPFire 2.21 - Cross-Site Scripting
Exploit Title: IPFire 2.21 - Core Update 127 | Cross-Site Scripting Date: 08.02.2019 Exploit Author: Ozer Goker Vendor Homepage: https://www.ipfire.org Software Link: https://downloads.ipfire.org/releases/ipfire-2.x/2.21-core127/ipfire-2.21.x8664-full-core127.iso Version: IPFire 2.21 - Core Updat...
IPFire 2.21 - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: IPFire 2.21 - Core Update 127 | Cross-Site Scripting Exploit Author: Ozer Goker Vendor Homepage: https://www.ipfire.org Software Link:...