GnuTLS Local Security Bypass Vulnerability

GnuTLS is a free secure communications library for implementing the SSL, TLS and DTLS protocols developed by Nikos Mavrogiannopoulos of Belgium and Simon Josefsson of Sweden, software developers. A local security bypass vulnerability exists in GnuTLS version 3.4.12, which can be exploited by an...

The vulnerability of the Windows operating system, which allows a hacker to circumvent access restrictions to the file system

The vulnerability of the Windows operating system’s kernel is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to circumvent restrictions on access to the file system locally...

Linux kernel 'securelevel/secureboot' local security bypass vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local security bypass vulnerability exists in the Linux kernel. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized...

CVE-2007-5900

PHP before 5.2.5 allows local users to bypass protection mechanisms configured through phpadminvalue or phpadminflag in httpd.conf by using iniset to modify arbitrary configuration variables, a different issue than CVE-2006-4625...

IPPUSBXD 'ippusbxd.c' Local Security Bypass Vulnerability

IPPUSBXD is a daemon for the IPP-over-USB printer support program. A local security bypass vulnerability exists in IPPUSBXD. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

Linux Kernel Local Security Bypass Vulnerability (CNVD-2015-05214)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local security bypass vulnerability exists in the Linux Kernel. An attacker could exploit the vulnerability to bypass certain security restrictions and perform unauthorized...

Kankun Smart Socket Device and Mobile Application Local Security Bypass Vulnerability

Kankun Smart Socket device is a wireless smart socket. mobile application is a mobile application for wireless smart socket. The Kankun Smart Socket device and mobile application use hard-coded AES 256-bit keys, which allow remote attackers to sniff the network, obtain sensitive information or...

Apple iOS 8.0.2 Authentication Bypass Vulnerability

Apple IOS versions 8.0 through 8.0.2 suffer from a lock bypass vulnerability. Document Title: =============== Apple iOS 8.0 - 8.0.2 - Controls Re Auth Bypass Vulnerability Product & Service Introduction: =============================== iOS previously iPhone OS is a mobile operating system develop...

PuTTY DHE Sanity Checks Local Security Bypass Vulnerability

PuTTY is a free Telnet, Rlogin and SSH client software developed by software developer Simon Tatham. The software is mainly used for remote administration of Linux systems. PuTTY suffers from a local security bypass vulnerability. A local attacker can exploit this vulnerability to bypass security...

Multiple Local Security Bypass Vulnerabilities in Dropbear SSH

Dropbear is a relatively small SSH server and client. Dropbear SSH suffers from multiple local security bypass vulnerabilities that could allow an attacker to bypass certain security restrictions and perform unauthorized operations...

Todd Miller Sudo Local Security Bypass Vulnerability

Sudo is a program that allows users to securely execute commands with other user privileges and is widely used under Linux and Unix operating systems. A local security bypass vulnerability exists in Todd Miller Sudo, which allows local attackers to exploit the vulnerability to bypass security...

Linux Kernel Crypto API Local Security Bypass Vulnerability (CNVD-2015-00753)

Linux is an open source computer operating system kernel. A local security bypass vulnerability exists in the Linux Kernel Crypto API, which can be exploited by an attacker to bypass certain security restrictions and perform unauthorized operations...

Multiple Symantec Product Local Security Bypass Vulnerabilities

Symantec Critical System Protection is a suite of intrusion detection software that defends against zero-day threats, strengthens systems, and assists in maintaining compliance.Symantec Data Center Security: Server Advanced is a system protection software from Symantec. Multiple Symantec products...

OpenSSL Certificate fingerprints local security bypass vulnerability

OpenSSL is an open source implementation of SSL used to enable strong encryption of network communications and is now widely used in a variety of web applications. A local security bypass vulnerability exists in OpenSSL, which can be exploited by a local attacker to bypass certain security...

Apple iOS v7.1.2 - Merge Apps Service Local Bypass Vulnerability

Document Title: =============== Apple iOS v7.1.2 - Merge Apps Service Local Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1280 Video: http://www.vulnerability-lab.com/getcontent.php?id=1281 Vulnerability Magazine:...

Apple iOS 7.1.2 Merge Apps Service Local Bypass Vulnerability

Apple iOS version 7.1.2 suffered from a merge apps service local bypass vulnerability. Document Title: =============== Apple iOS v7.1.2 - Merge Apps Service Local Bypass Vulnerability Product & Service Introduction: =============================== iOS previously iPhone OS is a mobile operating...

UBUNTU-CVE-2013-0296

Race condition in pigz before 2.2.5 uses permissions derived from the umask when compressing a file before setting that file's permissions to match those of the original file, which might allow local users to bypass intended access permissions while compression is occurring...

DEBIAN-CVE-2011-1835

The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not properly ensure that the passphrase file is created, which might allow local users to bypass intended access restrictions at a certain time in the new-user creation steps...

DEBIAN-CVE-2011-1836

utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations during the recovery process...

UBUNTU-CVE-2013-2929

The Linux kernel before 3.12.2 does not properly use the getdumpable function, which allows local users to bypass intended ptrace restrictions or obtain sensitive information from IA64 scratch registers via a crafted application, related to kernel/ptrace.c and arch/ia64/include/asm/processor.h...