5242 matches found
DEBIAN-CVE-2014-2079
X File Explorer aka xfe might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba and NFS shares...
CVE-2014-2079
X File Explorer aka xfe might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba and NFS shares...
CVE-2014-2079
X File Explorer aka xfe might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba and NFS shares...
CVE-2014-2079
CVE-2014-2079 affects X File Explorer (xfe). The issue arises when creating new files on Samba or NFS shares: the user’s MASK is applied for permission settings instead of the share/server configuration, enabling local users to bypass intended access restrictions and potentially access arbitrary ...
Network Share Sniffer and Auto-Mounter for Crawling Remote File Systems: sharesniffer
sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares: python...
Security update for ceph (important)
This update for ceph fixes the following issues: Security issues fixed: - CVE-2018-7262: rgw: malformed http headers can crash rgw bsc1081379. - CVE-2017-16818: User reachable asserts allow for DoS bsc1063014. Bug fixes: - bsc1061461: OSDs keep generating coredumps after adding new OSD node to...
kernel security, bug fix, and enhancement update
3.10.0-862.2.3.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey bug 24817676 3.10.0-862.2.3 - x86 kvm: fix icebp instruction handling Paolo Bonzini 1566849 1566845...
Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20180508) (Meltdown)
Security Fixes : - hw: cpu: speculative execution permission faults handling CVE-2017-5754 - Kernel: error in exception handling leads to DoS CVE-2018-8897 - kernel: nfsd: Incorrect handling of long RPC replies CVE-2017-7645 - kernel: Use-after-free vulnerability in DCCP socket CVE-2017-8824 -...
The Ugly Duckling in factoring aka the filtering steps part I
People that knows me well are well aware that prime numbers have been my obsession since my childhood and they are source of continue interest for me. Actually thanks to cryptography they are a relevant part of my everyday life. One of the most important problem in cryptography since the discover...
CVE-2018-2764
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Solaris. Successful attacks of this...
Code injection
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RPC. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Solaris. Successful attacks of this...
CVE-2018-2718
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RPC. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Solaris. Successful attacks of this...
Code injection
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Solaris. Successful attacks of this...
CVE-2018-2764
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Solaris. Successful attacks of this...
CVE-2018-2764
CVE-2018-2764 affects the Solaris kernel: vulnerable in Solaris on supported 10 and 11.3 systems, exploitable via network access to Solaris over NFS, leading to possible hang or complete denial of service. CVSS 3.0 base score 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The advisory context from th...
CVE-2018-2718
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RPC. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Solaris. Successful attacks of this...
CVE-2018-2718
CVE-2018-2718 affects the Solaris component of Oracle Sun Systems Product Suite (RPC). Affected: Solaris 10 and 11.3. Vulnerability allows an unauthenticated attacker who can access the host over NFS to cause a hang or a frequently repeatable crash (complete DoS). CVSS 3.0 base score 7.5 (Availab...
Amazon Linux 2 : kernel (ALAS-2018-956) (Dirty COW) (Spectre)
Stack-based out-of-bounds read via vmcall instruction Linux kernel compiled with the KVM virtualization CONFIGKVM support is vulnerable to an out-of-bounds read access issue. It could occur when emulating vmcall instructions invoked by a guest. A guest user/process could use this flaw to disclose...
Solaris 10 (x86) : 152261-04
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RPC. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Solaris. Successful attacks of this...
Solaris 10 (sparc) : 152260-04
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RPC. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Solaris. Successful attacks of this...