4220 matches found
Huawei Mobile Partner Poor Permissions
DESCRIPTION Huawei Mobile Partner application contains a flaw that may allow an attacker to gain access to unauthorized privileges. The issue is due to the application installing with insecure permissions. This allows a less privileged local attacker or compromised process to replace the...
Ubuntu: Security Advisory (USN-1634-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu Update for python-keyring USN-1634-1
Ubuntu Update for Linux kernel vulnerabilities USN-1634-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16341.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for python-keyring USN-1634-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.n...
Ubuntu 11.10 / 12.04 LTS / 12.10 : python-keyring vulnerabilities (USN-1634-1)
Dwayne Litzenberger discovered that Python Keyring's CryptedFileKeyring file format used weak cryptography. A local attacker may use this issue to brute-force CryptedFileKeyring keyring files. This issue only affected Ubuntu 11.10 and Ubuntu 12.04 LTS. CVE-2012-4571 It was discovered that Python...
USN-1634-1: Python Keyring vulnerabilities
Dwayne Litzenberger discovered that Python Keyring's CryptedFileKeyring file format used weak cryptography. A local attacker may use this issue to brute-force CryptedFileKeyring keyring files. This issue only affected Ubuntu 11.10 and Ubuntu 12.04 LTS. CVE-2012-4571 It was discovered that Python...
Visual Tools DVR multiple vulnerabilities
Title: Visual Tools DVR multiple vulnerabilities Version affected: VS Series = 3.0.6.16, VX Series = 4.2.19.2 Vendor: http://www.visual-tools.com/ Discovered By: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Status: unpatched Visual Tools develops, manufactures a...
Visual Tools DVR Command Injection / Password Disclosure
Exploit for hardware platform in category web applications Title: Visual Tools DVR multiple vulnerabilities Version affected: VS Series = 3.0.6.16, VX Series = 4.2.19.2 Vendor: http://www.visual-tools.com/ Discovered By: Andrea Fabrizi Email: email protected Web: http://www.andreafabrizi.it Statu...
Visual Tools DVR Command Injection / Password Disclosure
Title: Visual Tools DVR multiple vulnerabilities Version affected: VS Series = 3.0.6.16, VX Series = 4.2.19.2 Vendor: http://www.visual-tools.com/ Discovered By: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Status: unpatched Visual Tools develops, manufactures a...
Visual Tools DVR3.0.6.16_ vx series 4.2.19.2 - Multiple Vulnerabilities
Exploit Title: Visual Tools DVR multiple vulnerabilities Date: 2012-10-15 Exploit Author: Andrea Fabrizi Vendor Homepage: http://www.visual-tools.com/ Version: VS Series = 3.0.6.16, VX Series = 4.2.19.2 Tested on: VS Series 3.0.6.16/VX Series 4.2.19.2 Visual Tools develops, manufactures and...
Privilege Escalation Vulnerability in Microsoft Windows
High-Tech Bridge Security Research Lab has discovered a vulnerability in Microsoft Windows which could be exploited to escalate privileges under certain conditions. The vulnerability exists due to the “IKE and AuthIP IPsec Keying Modules” system service, which tries to load the “wlbsctrl.dll” DLL...
Scientific Linux Security Update : rhn-client-tools on SL5.x i386/x86_64
It was discovered that rhn-client-tools set insecure permissions on the loginAuth.pkl file, used to store session credentials for authenticating connections to servers. A local, unprivileged user could use these credentials to download packages they wouldn't normally have permission to download...
Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : icedtea-web, openjdk-6 vulnerabilities (USN-1505-1)
It was discovered that multiple flaws existed in the CORBA Common Object Request Broker Architecture implementation in OpenJDK. An attacker could create a Java application or applet that used these flaws to bypass Java sandbox restrictions or modify immutable object data. CVE-2012-1711,...
Fedora 17 : mumble-1.2.3-7.fc17.1 (2012-8903)
This update fixes a number of startup problems of the mumble server murmur. Additionally it contains a fix for CVE-2012-0863 insecure world-readable permissions on database file of the mumble client. Note that Tenable Network Security has extracted the preceding description block directly from th...
Symantec LiveUpdate Administrator Insecure Permissions Local Privilege Escalation (credentialed check)
The version of Symantec LiveUpdate Administrator LUA installed on the remote host has a privilege escalation vulnerability. The installation directory allows write access to the Everyone group. This directory contains batch files that are periodically executed as SYSTEM. A local, unprivileged...
Parallels PLESK 9.x - Insecure Permissions
Exploit Title: PLESK 9.x insecure directory permission admin password revealed Date: 25/04/2012 Author: Nicolas Krassas , twitter.com/dinosn Software Link: www.parallels.com/plesk/ Version: 9.x Tested on: ubuntu / centos During backup procedures, PLESK panel is keeping a detailed log of the proce...
Parallels PLESK 9.x - Insecure Permissions
Parallels PLESK 9.x - Insecure Permissions Exploit Title: PLESK 9.x insecure directory permission admin password revealed Date: 25/04/2012 Author: Nicolas Krassas , twitter.com/dinosn Software Link: www.parallels.com/plesk/ Version: 9.x Tested on: ubuntu / centos During backup procedures, PLESK...
Parallels PLESK 9.x Insecure Permissions
Exploit for linux platform in category local exploits Exploit Title: PLESK 9.x insecure directory permission admin password revealed Date: 25/04/2012 Author: Nicolas Krassas , twitter.com/dinosn Software Link: www.parallels.com/plesk/ Version: 9.x Tested on: ubuntu / centos During backup...
Parallels PLESK 9.x Insecure Permissions
Exploit Title: PLESK 9.x insecure directory permission admin password revealed Date: 25/04/2012 Author: Nicolas Krassas , twitter.com/dinosn Software Link: www.parallels.com/plesk/ Version: 9.x Tested on: ubuntu / centos During backup procedures, PLESK panel is keeping a detailed log of the proce...
Zend Optimizer 3.3.3 Insecure Permissions
Zend Optimizer 3.3.3 Windows Insecure Permissions Vendor: Zend Technologies Ltd. Product web page: http://www.zend.com Affected version: 3.3.3 and 3.3.0 Note: The patch did not change the version number of the affected product, so the updated version is still 3.3.3, but with proper permissions...
Zend Optimizer 3.3.3 (Windows) Insecure Permissions
Exploit for windows platform in category local exploits Zend Optimizer 3.3.3 Windows Insecure Permissions Vendor: Zend Technologies Ltd. Product web page: http://www.zend.com Affected version: 3.3.3 and 3.3.0 Note: The patch did not change the version number of the affected product, so the update...