Microsoft Windows WmiTraceMessageVa Local Kernel Vulnerability

This vulnerability allows local attackers to execute arbitrary code from the context of kernelspace on vulnerable installations of Microsoft Windows. The ability to make a system call is required in order to exploit this vulnerability. The specific flaw exists within the kernel's support for Trac...

Oracle Java GlassFish Server Privilege Escalation Vulnerability (Jan 2011)

GlassFish Server is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Oracle Java GlassFish Server Privilege Escalation Vulnerability

The host is running GlassFish Server and is prone to privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: secpodoracleGlassFishprevesclvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ Oracle Java GlassFish Server Privilege Escalation Vulnerability Authors: Antu Sanadi Copyright:...

Request Tracker (RT) 3.6.x - 3.6.7, 3.8.x - 3.8.8 Information Disclosure Vulnerability

Request Tracker RT is prone to an information disclosure vulnerability because it fails to securely store passwords. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Mono/Moonlight Generic Type Argument - Privilege Escalation

Sources: https://www.chrishowie.com/2010/11/24/mutable-strings-in-mono/ https://www.securityfocus.com/bid/45051/info Mono and Moonlight is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with elevated privileges. Successful...

MonoMoonlight Generic Type Argument - Privilege Escalation

MonoMoonlight Generic Type Argument - Privilege Escalation Sources: https://www.chrishowie.com/2010/11/24/mutable-strings-in-mono/ https://www.securityfocus.com/bid/45051/info Mono and Moonlight is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to...

[USN-1028-1] ImageMagick vulnerability

=========================================================== Ubuntu Security Notice USN-1028-1 December 07, 2010 imagemagick vulnerability CVE-2010-4167 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 8.04 LTS Ubuntu 9.10...

Apple iOS 4.0.2 - Networking Packet Filter Rules Privilege Escalation

Apple iOS 4.0.2 - Networking Packet Filter Rules Privilege Escalation // source: https://www.securityfocus.com/bid/45010/info // // Apple iOS is prone to a local privilege-escalation vulnerability. // // Local attackers running malicious code can exploit this issue to elevate their privileges...

Linux Kernel 2.6.x - netcorefilter.c Local Information Disclosure

Linux Kernel 2.6.x - netcorefilter.c Local Information Disclosure / source: https://www.securityfocus.com/bid/44758/info The Linux kernel is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further...

Linux Kernel 2.6.x - 'net/core/filter.c' Local Information Disclosure

/ source: https://www.securityfocus.com/bid/44758/info The Linux kernel is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. / / You've done it. After hours of gdb and caffeine, you've...

openSUSE Security Update : kernel (openSUSE-SU-2010:0919-1)

This update of the openSUSE 11.2 Linux kernel fixes two critical security issues and some bugs. Following security issues were fixed: CVE-2010-3904: A local privilege escalation in RDS sockets allowed local attackers to gain root privileges. CVE-2010-2963: A problem in the compat ioctl handling i...

OCS Inventory NG Agent 'Backend.pm' Perl Module Handling Code Execution Vulnerability

OCS Inventory NG Agent is prone to a vulnerability that lets local attackers execute arbitrary Perl code. This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

OCS Inventory NG Agent 'Backend.pm' Perl Module Handling Code Execution Vulnerability

OCS Inventory NG Agent is prone to a vulnerability that lets local attackers execute arbitrary Perl code. Local attackers can leverage this issue to execute arbitrary code via the application's insecure Perl module search path. This may allow attackers to elevate their privileges and compromise t...

Microsoft Windows 32-bit Platforms Unspecified vulnerabilities

This host is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: gbmswindowsstuxnetunspecifiedvuln.nasl 7172 2017-09-18 11:07:34Z cfischer $ Microsoft Windows 32-bit Platforms Unspecified vulnerabilities Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone Network...

Microsoft Windows Failover Clustering File Permissions Security Bypass Vulnerability

Description Microsoft Windows Failover Clustering is prone to a security-bypass vulnerability. Local attackers can exploit this issue to perform unauthorized actions against the administrative shares on the failover cluster disk. Technologies Affected Microsoft Windows Server 2008 R2 Itanium...

SuSE 10 Security Update : kdm (ZYPP Patch Number 6941)

The KDE display manager kdm contains a race condition which allows local attackers to make arbitrary files orld writable. CVE-2010-0436 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

[USN-983-1] Sudo vulnerability

=========================================================== Ubuntu Security Notice USN-983-1 September 07, 2010 sudo vulnerability CVE-2010-2956 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 9.10 Ubuntu 10.04 LTS This...

Microsoft Windows TCP/IP Privilege Elevation Vulnerabilities (978886)

This host is missing a critical security update according to Microsoft Bulletin MS10-058. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Bug in Linux Kernel Allows Root Privileges

A conceptual problem in the memory management area of Linux allows local attackers to execute code at root level which is caused by potential overlaps between the memory areas of the stack and shared memory segments, according to a report by Rafal Wojtczuk. Read the full article. The H Security...

openSUSE Security Update : ghostscript-devel (openSUSE-SU-2010:0425-1)

Specially crafted postscript .ps files could cause buffer overflows in ghostscript that could potentially be exploited to execute arbitrary code CVE-2010-1628, CVE-2010-1869, CVE-2009-4270 ghostscript by default read some initialization files from the current working directory. Local attackers...