LibSSH: Information disclosure

Background LibSSH is a C library providing SSHv2 and SSHv1. Description A new connection inherits the state of the PRNG without re-seeding with random data. Impact Servers using ECC ECDSA or DSA certificates in non-deterministic mode may under certain conditions leak their private key. Workaround...

Kernel: futex: forbid uaddr == uaddr2 in futex_wait_requeue_pi()

A NULL pointer dereference flaw was found in the way the futexwaitrequeuepi function of the Linux kernel's futex subsystem handled the requeuing of certain Priority Inheritance PI futexes. A local, unprivileged user could use this flaw to crash the system...

kernel: futex: pi futexes requeue issue

A flaw was found in the way the Linux kernel's futex subsystem handled the requeuing of certain Priority Inheritance PI futexes. A local, unprivileged user could use this flaw to escalate their privileges on the system...

kernel: futex: pi futexes requeue issue

A flaw was found in the way the Linux kernel's futex subsystem handled the requeuing of certain Priority Inheritance PI futexes. A local, unprivileged user could use this flaw to escalate their privileges on the system...

Eric Allman Sendmail 8.8 .x Socket Hijack Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/774/info Through exploiting a combination of seemingly low-risk vulnerabilities in sendmail, it is possible for a malicious local user to have an arbitrary program inherit or hijack the file descriptor for the socket...

Richard Gooch SimpleInit 2.0.2 Open File Descriptor Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5001/info A vulnerability has been reported for simpleinit that may allow users to execute arbitrary commands as the superuser. The vulnerability occurs because simpleinit may allow some child processes to inherit a file...

kernel: futex: pi futexes requeue issue

A flaw was found in the way the Linux kernel's futex subsystem handled the requeuing of certain Priority Inheritance PI futexes. A local, unprivileged user could use this flaw to escalate their privileges on the system...

kernel: futex: pi futexes requeue issue

A flaw was found in the way the Linux kernel's futex subsystem handled the requeuing of certain Priority Inheritance PI futexes. A local, unprivileged user could use this flaw to escalate their privileges on the system...

kernel: futex: pi futexes requeue issue

A flaw was found in the way the Linux kernel's futex subsystem handled the requeuing of certain Priority Inheritance PI futexes. A local, unprivileged user could use this flaw to escalate their privileges on the system...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

openSUSE Security Update : lighttpd (openSUSE-SU-2014:0072-1)

added cve-2013-4508.patch and cve-2013-4508-regression-bug729480.patch: bnc849059 When defining an ssl.cipher-list, it works for the 'default' HTTPS setup $SERVER'socket' 443 block, but when you utilize SNI $HTTP'host' blocks within the $SERVER'socket' block the ssl.cipher-list seems to not...

Threat Outbreak Alert: Fake Inheritance Notice Email Messages on April 21, 2014

Medium Alert ID: 33867 First Published: 2014 April 21 17:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an inheritance notice for the recipient. The text in the email message attempts to convince the recipient to ope...

SuSE 11.3 Security Update : Samba (SAT Patch Number 9010)

"The Samba fileserver suite was updated to fix bugs and security issues. The following security issue have been fixed : - No Password lockout or ratelimiting was enforced for SAMR password changes, making brute force guessing attacks possible. CVE-2013-4496. Also the following feature has been...

Character encoding cross-origin XSS attack — Mozilla

Security researcher Masato Kinugawa discovered that if a web page is missing character set encoding information it can inherit character encodings across navigations into another domain from an earlier site. Only same-origin inheritance is allowed according to the HTML5 specification. This issue...

The story of MS13-002: How incorrectly casting fat pointers can make your code explode

C++ supports developers in object-orientated programming and removes from the developer the responsibility of dealing with many object-oriented programming OOP paradigm problems. But these problems do not magically disappear. Rather it is the compiler that aims to provide a solution to many of th...

[SECURITY] Fedora 18 Update: nodejs-inherits1-1.0.0-11.fc18

A tiny simple way to do classic inheritance in JavaScript. This is the legacy version used by many Node.js modules for many years, and is retained for backward compatibility. New modules should use the inheritance functionality available in core Node.js or use the new version of inherits if they...

CVE-2013-1695

Mozilla Firefox before 22.0 does not properly implement certain DocShell inheritance behavior for the sandbox attribute of an IFRAME element, which allows remote attackers to bypass intended access restrictions via a FRAME element within an IFRAME element...

CVE-2013-1695

Concretely, CVE-2013-1695 affects Mozilla Firefox before 22.0 and is caused by incorrect DocShell inheritance handling of the sandbox attribute on IFRAME elements. This weakness allows a FRAME inside an IFRAME to bypass intended access restrictions. The MFSA reference confirms the issue as Sandbo...

Mozilla Firefox Multiple Vulnerabilities - June 13 (Windows)

The host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmozillafirefoxmultvulnjun13win.nasl 6086 2017-05-09 09:03:30Z teissa $ Mozilla Firefox Multiple Vulnerabilities - June 13 Windows Authors: Arun Kallavi Copyright: Copyright c...

PT-2013-3328

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 22.0 Description The issue arises from improper implementation of certain DocShell inheritance behavior for the sandbox attribute of an IFRAME element. This allows remote attackers to bypass intended access...