UBUNTU-CVE-2016-10011

authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process...

DEBIAN-CVE-2015-8709

kernel/ptrace.c in the Linux kernel through 4.4.1 mishandles uid and gid mappings, which allows local users to gain privileges by establishing a user namespace, waiting for a root process to enter that namespace with an unsafe uid or gid, and then using the ptrace system call. NOTE: the vendor...

(0Day) Advantech WebAccess Local Escalation Of Privilege Vulnerability

This vulnerability allows local users to elevate to administrator status on vulnerable installations of Advantech WebAccess. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

VulnCheck KEV: CVE-2015-2387

ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server allows local users to gain privileges via a crafted application...

DEBIAN-CVE-2014-4943

The PPPoL2TP feature in net/l2tp/l2tpppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket...

DEBIAN-CVE-2013-1061

dbus/SoftwarePropertiesDBus.py in Software Properties 0.92.17 before 0.92.17.3, 0.92.9 before 0.92.9.3, and 0.82.7 before 0.82.7.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProce...

PT-2013-2201 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.7.6 Description: The issue allows local users to bypass intended capability restrictions by executing a crafted application as root. This is demonstrated by the msr32.c application, which exploits the msr open...

PT-2013-3018 · Microsoft · Windows Server 2003 +4

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Description: A...

Zoner Photo Studio v15 b3 - Buffer Overflow Vulnerabilities

Document Title: =============== Zoner Photo Studio v15 b3 - Buffer Overflow Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=759 Release Date: ============= 2012-11-13 Vulnerability Laboratory ID VL-ID: ====================================...

UBUNTU-CVE-2012-0957

The overriderelease function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26 personality...

PT-2011-2542 · Microsoft · Windows Server 2003 +4

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through R2 SP1 Microsoft Windows 7 versions Gold through SP1...

CVE-2011-1658

ld.so in the GNU C Library aka glibc or libc6 2.13 and earlier expands the $ORIGIN dynamic string token when RPATH is composed entirely of this token, which might allow local users to gain privileges by creating a hard link in an arbitrary directory to a 1 setuid or 2 setgid program with this RPA...

PT-2011-1077 · Suse +2 · Suse Linux Enterprise Kernel-Kdumppae +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.38.5 SUSE Linux Enterprise kernel-kdumppae affected versions not specified Description: The issue concerns an integer overflow in the Linux kernel, specifically in the agp generic insert memory function,...

CVE-2010-2020: FreeBSD kernel NFS client local vulnerabilities

Census ID: census-2010-0001 URL: http://census-labs.com/news/2010/05/26/freebsd-kernel-nfsclient/ CVE ID: CVE-2010-2020 Affected Products: FreeBSD 8.0-RELEASE, 7.3-RELEASE, 7.2-RELEASE Class: Improper Input Validation CWE-20 Remote: No Discovered by: Patroklos Argyroudis We have discovered two...

Avast! 4.8.1335 Professional Buffer Overflow

include include include include include include / Program : avast! 4.8.1335 Professionnel Homepage : http://www.avast.com Discovery : 2009/07/29 Author Contacted : 2009/07/31 Found by : Heurs This Advisory : Heurs Contact : [email protected] //----- Application description avast! antiviru...

Avast! 4.8.1335 Professional - Kernel Local Buffer Overflow

Avast! 4.8.1335 Professional - Kernel Local Buffer Overflow include include include include include include / Program : avast! 4.8.1335 Professionnel Homepage : http://www.avast.com Discovery : 2009/07/29 Author Contacted : 2009/07/31 Found by : Heurs This Advisory : Heurs Contact :...

Avast! 4.8.1335 Professional Local Kernel Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ================================================================= Avast! 4.8.1335 Professional Local Kernel Buffer Overflow Exploit ================================================================= include include include include include...

kernel: nfsd should drop CAP_MKNOD for non-root

nfsd in the Linux kernel before 2.6.28.9 does not drop the CAPMKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the rootsquash option...

HP-UX Update for VERITAS File System (VRTSvxfs) or VERITAS Oracle Disk Manager (VRTSodm) HPSBUX02409

Check for the Version of VERITAS File System VRTSvxfs or VERITAS Oracle Disk Manager VRTSodm OpenVAS Vulnerability Test HP-UX Update for VERITAS File System VRTSvxfs or VERITAS Oracle Disk Manager VRTSodm HPSBUX02409 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks...

HP-UX Update for VERITAS File System (VRTSvxfs) or VERITAS Oracle Disk Manager (VRTSodm) HPSBUX02409

Check for the Version of VERITAS File System VRTSvxfs or VERITAS Oracle Disk Manager VRTSodm OpenVAS Vulnerability Test HP-UX Update for VERITAS File System VRTSvxfs or VERITAS Oracle Disk Manager VRTSodm HPSBUX02409 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks...