SAP Afaria 'XeService.exe' Insecure File Permissions Vulnerability

SAP Afaria is a mobile device management and security solution. A security vulnerability exists in the Windows client of SAP Afaria version 7.0.6398.0, which can be exploited by a local attacker to gain privileges with the help of the Trojan horse XeService.exe file...

java security update

CentOS Errata and Security Advisory CESA-2015:1228 Updated java-1.8.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System...

docker: insecure opening of file-descriptor 1 leading to privilege escalation

Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a symlink attack in an image...

Kexec-tools Temporary File Handling Vulnerability

kexec-tools is a package containing the /sbin/kexec binary and the accompanying userspace components that make up the kernel's kexec functionality. kexec-tools insecurely creates temporary files, allowing a local attacker to manipulate arbitrary files and elevate privileges by implementing symbol...

docker security update

1.6.1-1.0.1 - Update source to 1.6.1 from https://github.com/docker/docker/releases/tag/v1.6.1 Symlink traversal on container respawn allows local privilege escalation CVE-2015-3629 Insecure opening of file-descriptor 1 leading to privilege escalation CVE-2015-3627 Read/write proc paths allow hos...

Docker Insecure File Descriptor Handling Elevation of Privilege Vulnerability

Docker is an open-source application container engine that allows developers to package their applications, along with dependency packages, into a portable container and then distribute it to any popular Linux machine, also enabling virtualization. Docker's handling of container redistribution...

Debian DLA-75-1 : mysql-5.1 security update

CVE-2014-4274 Insecure handling of a temporary file that could lead to abritrary execution of code through the creation of a mysql configuration file pointing to an attacker-controlled plugindir. CVE-2013-2162 Insecure creation of the debian.cnf credential file. Credentials could be stolen by a...

Ubisoft Uplay 5.0 Insecure File Permissions Local Privilege Escalation Vulnerability

Uplay for PC suffers from an elevation of privileges vulnerability which can be used by a simple user that can change the executable file with a binary of choice. The vulnerability exist due to the improper permissions, with the 'F' flag Full for 'Users' group, making the entire directory 'Ubisof...

Ubisoft Uplay 5.0 - Insecure File Permissions Privilege Escalation

Ubisoft Uplay 5.0 Insecure File Permissions Local Privilege Escalation Vendor: Ubisoft Entertainment S.A. Product web page: http://www.ubi.com Affected version: 5.0.0.3914 PC Summary: Uplay is a digital distribution, digital rights management, multiplayer and communications service created by...

Ubisoft Uplay 5.0 Insecure File Permissions Local Privilege Escalation

Ubisoft Uplay 5.0 Insecure File Permissions Local Privilege Escalation Vendor: Ubisoft Entertainment S.A. Product web page: http://www.ubi.com Affected version: 5.0.0.3914 PC Summary: Uplay is a digital distribution, digital rights management, multiplayer and communications service created by...

Ubisoft Uplay 5.0 Insecure File Permissions Local Privilege Escalation

Summary Uplay PC is a desktop client which replaces individual game launchers previously used for Ubisoft games. With Uplay PC, you have all your Uplay enabled games and Uplay services in the same place and you get access to a whole new set of features for your PC games. Description Uplay for PC...

Cisco Unified IP Phone 9900 Series Insecure Device Permissions Vulnerability

A vulnerability in the Cisco Unified IP Phone 9900 Series could allow an authenticated, local attacker to cause a complete denial of service DoS on an affected device. The vulnerability is due to insecure file permissions on some devices. An attacker could exploit this vulnerability by writing to...

RHEL 7 : java-1.6.0-sun (RHSA-2015:0086)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:0086 advisory. Oracle Java SE version 6 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. This update fixes severa...

LabTech Insecure File Permissions Vulnerability

LabTech is an international company specializing in providing analytical chemistry laboratories from sample pre-treatment to analytical testing solutions for food safety, environmental testing, disease control and materials analysis. LabTech has an insecure file permission vulnerability that can ...

Updated java-1.7.0-openjdk packages fix security vulnerabilities

Updated java-1.7.0 packages fix security vulnerabilities: A flaw was found in the way the Hotspot component in OpenJDK verified bytecode from the class files. An untrusted Java application or applet could possibly use this flaw to bypass Java sandbox restrictions CVE-2014-6601. Multiple improper...

Scientific Linux Security Update : java-1.7.0-openjdk on SL6.x, SL7.x i386/x86_64 (20150121) (POODLE)

A flaw was found in the way the Hotspot component in OpenJDK verified bytecode from the class files. An untrusted Java application or applet could possibly use this flaw to bypass Java sandbox restrictions. CVE-2014-6601 Multiple improper permission check issues were discovered in the JAX-WS, and...

Scientific Linux Security Update : java-1.7.0-openjdk on SL5.x i386/x86_64 (20150121) (POODLE)

A flaw was found in the way the Hotspot component in OpenJDK verified bytecode from the class files. An untrusted Java application or applet could possibly use this flaw to bypass Java sandbox restrictions. CVE-2014-6601 Multiple improper permission check issues were discovered in the JAX-WS, and...

pxz Insecure File Permissions Vulnerability

pxz is a compression tool for linux. An insecure file permission vulnerability exists in pxz, which allows local attackers to exploit the vulnerability to access globally readable files and obtain sensitive information...

WordPress WP Symposium plugin has multiple cross-site scripting vulnerabilities

WordPress WP Symposium plugins are web plugins that add social features. WP Symposium 14.11 and prior versions fail to properly validate uploaded file types, allowing under attackers to upload and execute arbitrary php code...

[CVE-2014-7301] SGI Tempo System Database Password Exposure

SGI Tempo System Database Password Exposure Software: SGI Tempo SGI ICE-X Supercomputers Affected Versions: Unknown CVE Reference: CVE-2014-7301 Author: John Fitzpatrick, MWR Labs Severity: Medium Risk Vendor: Silicon Graphics International Corp SGI Vendor Response: Uncooperative Description It i...