CLI: Insecure default permissions on history file

It was found that the Command Line Interface, as provided by Red Hat Enterprise Application Platform, created a history file named .jboss-cli-history in the user's home directory with insecure default file permissions. This could allow a malicious local user to gain information otherwise not...

CLI: Insecure default permissions on history file

It was found that the Command Line Interface, as provided by Red Hat Enterprise Application Platform, created a history file named .jboss-cli-history in the user's home directory with insecure default file permissions. This could allow a malicious local user to gain information otherwise not...

Intel Network Adapter Diagnostic Driver - IOCTL Handling

/ Intel Network Adapter Diagnostic Driver IOCTL Handling Vulnerability Vendor: Intel Product webpage: http://www.intel.com Affected products: Network Adapter Driver for Windows XP Network Adapter Driver for Windows 7 Network Adapter Driver for Windows 8 Network Adapter Driver for Windows 2008/R2...

CodeMeter < 5.20 Local Privilege Escalation Vulnerability

According to its self-reported version, the CodeMeter WebAdmin server installed on the remote host is prior to 5.20a 5.20.1458.500. It is affected by insecure read/write permissions for the 'codemeter.exe' service, which a local attacker can exploit to gain elevated privileges via a trojan horse...

ZTE Datacard MF19 Privilege Escalation / DLL Hijacking

/ Exploit Title:ZTE Datacard MF19 0V1.0.0B04 PCWMOBILISALGV1.0.0B03 mobilis Insecure Permissions Local Privilege Escalation & PoC Local crash & DLL Hijacking Exploit mmsdllr.dll, mediaplayerdll.dll Date: 1/01/2015 Author: Hadji Samir [email protected] Link...

MobiConnect 23.009.17.00.216 Privilege Escalation / DLL Hijacking

/ Exploit Title: MobiConnect 23.009.17.00.216 HUAWEI Insecure Permissions Local Privilege Escalation & DLL Hijacking Exploit wintab32.dll Date: 25/12/2014 Author: Hadji Samir [email protected] Vendor Homepage: http://www.mobilis.dz/entreprises/mobiconnect.php Vendor: http://www.huawei.com/ Tested o...

GLSA-201412-30 : Varnish: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201412-30 Varnish: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Varnish. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could cause a Denial of Service...

iBackup Local Privilege Escalation Vulnerability - Windows

iBackup is prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Vanilla Forums 2.0.18.8 - Multiple Vulnerabilities

No description provided by source. Exploit Title: Vanilla Forums Insecure Permissions Vulnerability Date: 15/5/13 Exploit Author: Henry Hoggard Author Website: http://henryhoggard.co.uk Vendor Homepage: http://vanillaforums.org Software Link: http://vanillaforums.org Version: 2.0.18.8 Tested on:...

Parallels PLESK 9.x - Insecure Permissions

No description provided by source. Exploit Title: PLESK 9.x insecure directory permission admin password revealed Date: 25/04/2012 Author: Nicolas Krassas , twitter.com/dinosn Software Link: www.parallels.com/plesk/ Version: 9.x Tested on: ubuntu / centos During backup procedures, PLESK panel is...

Apple Mac OS X 10.3.x Multiple Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/12863/info Multiple security vulnerabilities are reported to affect Apple Mac OS X. These issues were disclosed in the referenced vendor advisory. Insecure permissions are reported to be set on certain Apple Mac OS X...

Newsgrab 0.5.0pre4 Multiple Local And Remote Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/12428/info Newsgrab is reported prone to multiple vulnerabilities. The following individual issues are reported: Newsgrab is reported prone to a directory traversal vulnerability. This vulnerability exists because the...

Nortel SSL VPN Linux Client <= 6.0.3 - Local Privilege Escalation Exploit

No description provided by source. !/bin/sh Nortel SSL VPN Linux Client race condition Jon Hart [email protected] The Linux client that is utilized by versions priot to 6.05 of the Nortel SSL VPN appliance suffers from a number of problems that, in combination, allow an unprivileged local user to...

CVE-2014-4039

ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict permissions for /tmp/diagSEsnap/snapH.tar.gz, which allows local users to obtain sensitive information by reading files in this archive, as demonstrated by /var/log/messages and /etc/yaboot.conf...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2013:0777-1)

java-160-openjdk was updated to 1.12.5 bnc817157 - Security fixes - S6657673, CVE-2013-1518: Issues with JAXP - S7200507: Refactor Introspector internals - S8000724, CVE-2013-2417: Improve networking serialization - S8001031, CVE-2013-2419: Better font processing - S8001040, CVE-2013-1537: Rework...

openSUSE Security Update : qemu (openSUSE-SU-2013:1202-1)

The qemu guest agent creates a bunch of files with insecure permissions when started in daemon mode. For now mask all file mode bits for 'group' and 'others' in becomedaemon. Temporarily, for compatibility reasons, stick with the 0666 file-mode in case of files newly created by the...

Apple iTunes < 11.2.1 User Directory Insecure Permissions Vulnerability (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 11.2.1. It is, therefore, affected by an insecure permissions vulnerability. An insecure permissions vulnerability exists when the '/Users' and '/Users/Shared' directories have world-writable permissions. This can allow a local...

iTunes < 11.2.1 User Directory Insecure Permissions Vulnerability (Mac OS X)

The version of iTunes installed on the remote Mac OS X host is older than 11.2.1. It is, therefore, affected by an insecure permissions vulnerability. An insecure permissions vulnerability exists where the '/Users' and '/Users/Shared' directories have world-writable permissions. This could allow ...

Adobe Reader 'Download Manager' Privilege Escalation Vulnerability - Mac OS X

Adobe Reader is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Reader 'Download Manager' Privilege Escalation Vulnerability - Linux

Adobe Reader is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...