CVE-2015-6745: Undefined Security Weakness

Basware Banking Maksuliikenne 8.90.07.X relies on the client to enforce account locking, which allows local users to bypass that security mechanism by deleting the entry from the locking table. NOTE: this identifier was SPLIT from CVE-2015-0942 per ADT2 and ADT3 due to different vulnerability typ...

IPPUSBXD 'ippusbxd.c' Local Security Bypass Vulnerability

IPPUSBXD is a daemon for the IPP-over-USB printer support program. A local security bypass vulnerability exists in IPPUSBXD. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

Linux Kernel Local Security Bypass Vulnerability (CNVD-2015-05214)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local security bypass vulnerability exists in the Linux Kernel. An attacker could exploit the vulnerability to bypass certain security restrictions and perform unauthorized...

PT-2015-6606

Name of the Vulnerable Software and Affected Versions EMC RecoverPoint for Virtual Machines VMs version 4.2 Description The issue allows local users to bypass the Installation Manager Boxmgmt CLI interface, resulting in root-shell access. Recommendations For version 4.2, at the moment, there is n...

Kankun Smart Socket Device and Mobile Application Local Security Bypass Vulnerability

Kankun Smart Socket device is a wireless smart socket. mobile application is a mobile application for wireless smart socket. The Kankun Smart Socket device and mobile application use hard-coded AES 256-bit keys, which allow remote attackers to sniff the network, obtain sensitive information or...

Apple iOS 8.0.2 Authentication Bypass Vulnerability

Apple IOS versions 8.0 through 8.0.2 suffer from a lock bypass vulnerability. Document Title: =============== Apple iOS 8.0 - 8.0.2 - Controls Re Auth Bypass Vulnerability Product & Service Introduction: =============================== iOS previously iPhone OS is a mobile operating system develop...

PuTTY DHE Sanity Checks Local Security Bypass Vulnerability

PuTTY is a free Telnet, Rlogin and SSH client software developed by software developer Simon Tatham. The software is mainly used for remote administration of Linux systems. PuTTY suffers from a local security bypass vulnerability. A local attacker can exploit this vulnerability to bypass security...

Multiple Local Security Bypass Vulnerabilities in Dropbear SSH

Dropbear is a relatively small SSH server and client. Dropbear SSH suffers from multiple local security bypass vulnerabilities that could allow an attacker to bypass certain security restrictions and perform unauthorized operations...

Todd Miller Sudo Local Security Bypass Vulnerability

Sudo is a program that allows users to securely execute commands with other user privileges and is widely used under Linux and Unix operating systems. A local security bypass vulnerability exists in Todd Miller Sudo, which allows local attackers to exploit the vulnerability to bypass security...

Linux Kernel Crypto API Local Security Bypass Vulnerability (CNVD-2015-00753)

Linux is an open source computer operating system kernel. A local security bypass vulnerability exists in the Linux Kernel Crypto API, which can be exploited by an attacker to bypass certain security restrictions and perform unauthorized operations...

PT-2015-4165

Name of the Vulnerable Software and Affected Versions Symantec Critical System Protection versions 5.2.9 through MP6 Symantec Data Center Security: Server Advanced versions 6.0.x through 6.0 MP1 Description The issue allows local users to bypass intended Protection Policies via unspecified vector...

Multiple Symantec Product Local Security Bypass Vulnerabilities

Symantec Critical System Protection is a suite of intrusion detection software that defends against zero-day threats, strengthens systems, and assists in maintaining compliance.Symantec Data Center Security: Server Advanced is a system protection software from Symantec. Multiple Symantec products...

OpenSSL Certificate fingerprints local security bypass vulnerability

OpenSSL is an open source implementation of SSL used to enable strong encryption of network communications and is now widely used in a variety of web applications. A local security bypass vulnerability exists in OpenSSL, which can be exploited by a local attacker to bypass certain security...

CVE-2014-8133: Undefined Security Weakness

arch/x86/kernel/tls.c in the Thread Local Storage TLS implementation in the Linux kernel through 3.18.1 allows local users to bypass the espfix protection mechanism, and consequently makes it easier for local users to bypass the ASLR protection mechanism, via a crafted application that makes a...

CVE-2014-1421: Undefined Security Weakness

mountall 1.54, as used in Ubuntu 14.10, does not properly handle the umask when using the mount utility, which allows local users to bypass intended access restrictions via unspecified vectors...

PT-2014-8598

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions prior to 9.2.2 Description The issue allows local users to bypass intended restrictions on unspecified functionality. Recommendations For versions prior to 9.2.2, update to version 9.2.2 or lat...

Apple iOS v7.1.2 - Merge Apps Service Local Bypass Vulnerability

Document Title: =============== Apple iOS v7.1.2 - Merge Apps Service Local Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1280 Video: http://www.vulnerability-lab.com/getcontent.php?id=1281 Vulnerability Magazine:...

Apple iOS 7.1.2 Merge Apps Service Local Bypass Vulnerability

Apple iOS version 7.1.2 suffered from a merge apps service local bypass vulnerability. Document Title: =============== Apple iOS v7.1.2 - Merge Apps Service Local Bypass Vulnerability Product & Service Introduction: =============================== iOS previously iPhone OS is a mobile operating...

CVE-2014-4157

arch/mips/include/asm/threadinfo.h in the Linux kernel before 3.14.8 on the MIPS platform does not configure TIFSECCOMP checks on the fast system-call path, which allows local users to bypass intended PRSETSECCOMP restrictions by executing a crafted application without invoking a trace or audit...

PT-2014-5708

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.14.8 Description The issue allows local users to bypass intended PR SET SECCOMP restrictions by executing a crafted application without invoking a trace or audit subsystem, due to the lack of TIF SECCOMP checks...