Linux kernel kernel local elevation of privilege vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local lift vulnerability exists in Linux kernel v3.18 and above, which is caused by a reference disclosure in the relevant keyring function, allowing an attacker to gain...

2345 Ace Input Method Local Elevation of Privilege Vulnerability

2345 Ace Input Method is a Chinese input software for PC launched by Shanghai 2,3,4,5 Network Technology Co. The system service installed by 2345 Ace Input Method provides the ability to create an elevated privilege process, but a vulnerability exists in the validation process. Due to improper...

Local Elevation of Privilege Vulnerability in Multiple FireEye Products

FireEye is a well-known American cybersecurity company. A local elevation of privilege vulnerability exists in the implementation of multiple FireEye products. A remote attacker could exploit this vulnerability to gain admin privileges and execute arbitrary commands in an affected process...

TrueCrypt 7 / VeraCrypt 1.13 - Drive Letter Symbolic Link Creation Privilege Escalation

Source: https://code.google.com/p/google-security-research/issues/detail?id=538 Truecrypt 7 Derived Code/Windows: Drive Letter Symbolic Link Creation EoP Platform: Windows Class: Local Elevation of Privilege Tested on: VeraCrypt 1.13 x86 on Windows 10 Summary: The Windows driver used by projects...

[security bulletin] HPSBUX03369 SSRT102037 rev.1 - HP-UX execve(2), Local Elevation of Privilege

Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04735247 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04735247 Version: 1 HPSBUX03369 SSRT102037 rev.1 - HP-UX execve2, Local Elevation...

Microsoft Malware Removal Tool DLL Load Local Elevation of Privilege Vulnerability

Microsoft windows is a popular operating system.Microsoft Malicious Software Removal Tool is a malware removal tool on its system. Microsoft Malicious Software Removal Tool tool has a security vulnerability that allows local attackers to elevate privileges by loading a DLL...

PonyOS Local Elevation of Privilege Vulnerability (CNVD-2015-04344)

PonyOS is a new Unix-like operating system. PonyOS suffers from an elevation of privilege vulnerability that allows an attacker to exploit the vulnerability to elevate privileges...

IBM PowerVC Local Elevation of Privilege Vulnerability

IBM PowerVC is a suite of virtualization management solutions. A local elevation of privilege vulnerability exists in IBM PowerVC, allowing a local attacker to exploit the vulnerability to elevate privileges...

CA Common Services Variable Handling Local Elevation of Privilege Vulnerability

CA is a leading global provider of IT management software and solutions, with products and technologies that span the full spectrum of IT environments, from mainframes to distributed systems, from virtualization to the cloud. A security vulnerability in CA Common Services' handling of specially...

McAfee ePolicy Orchestrator Deep Command Path Handling Local Elevation of Privilege Vulnerability

McAfee ePolicy Orchestrator is an industry-leading systems security management solution that helps organizations effectively defend against malicious threats and attacks. McAfee ePolicy Orchestrator Deep Command fails to properly handle paths and directories, allowing local attackers to exploit...

Apple Mac OS X IOBluetoothDevice Local Elevation of Privilege Vulnerability

Apple Mac OS X is a BSD-based operating system of a commercial nature. A local elevation of privilege vulnerability exists in Apple Mac OS X IOBluetoothDevice, which could be exploited by a local attacker to execute arbitrary code to elevate privileges...

Microsoft Windows Local Elevation of Privilege Vulnerability (CNVD-2015-00360)

Microsoft Windows is a family of operating systems from Microsoft. Microsoft Windows Microsoft Windows Application Compatibility Infrastructure fails to properly check the authorization of caller forgery tokens, allowing attackers to exploit a vulnerability for elevated privileges...

Microsoft Windows 'AhcVerifyAdminContext' Local Elevation of Privilege Vulnerability

Microsoft Windows is a popular operating system. A local elevation of privilege vulnerability exists in Microsoft Windows 'AhcVerifyAdminContext', which can be exploited by a local attacker to execute arbitrary code with elevated privileges...

EMC Replication Manager/AppSync Local Elevation of Privilege Vulnerability

EMC Replication Manager is a solution that manages replication technology and coordinates the entire data replication process through a unified management console. A local elevation of privilege vulnerability exists in EMC Replication Manager/AppSync, which can be exploited by a local attacker to...

[security bulletin] HPSBMU03086 rev.1 - HP Operations Agent running Glance, Local Elevation of Privilege

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04394554 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04394554 Version: 1 HPSBMU03086 rev....

CVE-2014-2780: Undefined Security Weakness

DirectShow in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows local users to gain privileges by leveraging control over a low-integrity process to execute a crafted application, aka "DirectShow...

Symantec Endpoint Protection Privilege Assumption, Policy Bypass, Local Elevation of Privilege

SUMMARY The Management Console in Symantec Endpoint Protection does not properly validate user authentication, which could potentially allow a user to assume another users identity and privileges on the console. Symantec Endpoint Protection clients do not sufficiently restrict custom policies,...

Microsoft Releases Security Advisory 2914486

Today we released Security Advisory 2914486 regarding a local elevation of privilege EoP issue that affects customers using Microsoft Windows XP and Server 2003. Windows Vista and later are not affected by this local EoP issue. A member of the Microsoft Active Protections Program MAPP found this...

Vulnerability in VMware VMCI.sys Could Allow Local Elevation of Privilege

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting VMware Workstation version 8.0.4 and earlier versions. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor, VMware...

CVE-2010-1891: Undefined Security Weakness

The Client/Server Runtime Subsystem aka CSRSS in the Win32 subsystem in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2, when a Chinese, Japanese, or Korean locale is enabled, does not properly allocate memory for transactions, which allows local users to gain privileges via a crafted...