2041 matches found
CVE-2019-19519
OpenBSD 6.6 vulnerability CVE-2019-19519: a logic error in su.c enables a local user to use su -L to login with another user’s login class, enabling local privilege escalation. Affected software is OpenBSD 6.6; the flaw resides in the main function of su/su.c. Consequences include bypassing inten...
CVE-2019-19519
In OpenBSD 6.6, local users can use the su -L option to achieve any login class often excluding root because there is a logic error in the main function in su/su.c...
CVE-2019-19520
OpenBSD 6.6 is affected by CVE-2019-19520 (xlock) where local attackers can escalate to the auth group by manipulating LIBGL_DRIVERS_PATH. Root cause: xenocara/lib/mesa/src/loader/loader.c mishandles dlopen. Impact, per sources, is local privilege escalation; OpenBSD patches exist via syspatch/Op...
CVE-2019-19521
libc in OpenBSD 6.6 allows authentication bypass via the -schallenge username, as demonstrated by smtpd, ldapd, or radiusd. This is related to gen/authsubr.c and gen/authenticate.c in libc and login/login.c and xenocara/app/xenodm/greeter/verify.c...
CVE-2019-19521
CVE-2019-19521 affects OpenBSD 6.6 libc and enables authentication bypass via the -schallenge username, exploitable remotely in smtpd, ldapd, or radiusd. Root cause ties to libc code paths gen/auth_subr.c and gen/authenticate.c (also related login.c and xenocara/greeter/verify.c). OpenBSD patches...
CVE-2019-19522
OpenBSD 6.6 is affected when S/Key or YubiKey authentication is enabled (non-default). A local attacker in the auth group can escalate to root because root’s file can be written to /etc/skey or /var/db/yubikey and need not be owned by root. This CVE corresponds to CVE-2019-19522. Reported impact ...
CVE-2019-19522
OpenBSD 6.6, in a non-default configuration where S/Key or YubiKey authentication is enabled, allows local users to become root by leveraging membership in the auth group. This occurs because root's file can be written to /etc/skey or /var/db/yubikey, and need not be owned by root...
PT-2019-15866
Name of the Vulnerable Software and Affected Versions OpenBSD version 6.6 Description The issue allows authentication bypass via the username variable, as demonstrated by smtpd, ldapd, or radiusd. This is related to gen/auth subr.c and gen/authenticate.c in libc, as well as login/login.c and...
CVE-2019-19519: Improper Authentication
In OpenBSD 6.6, local users can use the su -L option to achieve any login class often excluding root because there is a logic error in the main function in su/su.c...
CVE-2019-19522: Incorrect Permission Assignment for Critical Resource
OpenBSD 6.6, in a non-default configuration where S/Key or YubiKey authentication is enabled, allows local users to become root by leveraging membership in the auth group. This occurs because root's file can be written to /etc/skey or /var/db/yubikey, and need not be owned by root...
OpenBSD Multiple Privilege Escalation and Authentication Bypass Vulnerabilities
Description OpenBSD is prone to multiple privilege-escalation and authentication-bypass vulnerabilities. An attacker may leverage these issues to bypass the authentication mechanism and gain elevated privileges. This may aid in further attacks. OpenBSD 6.6 version is vulnerable; other versions ma...
Multiple Linux Distributions CVE-2019-14899 Security Bypass Vulnerability
Description Multiple Linux Distributions are prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Technologies Affected Apple iOS Apple macOS Archlinux Linux 2019.05...
PT-2019-15867
Name of the Vulnerable Software and Affected Versions OpenBSD version 6.6 Description The issue allows local users to gain root access in a specific non-default configuration where S/Key or YubiKey authentication is enabled. This is possible because a user can write to the /etc/skey or...
PT-2019-15865
Name of the Vulnerable Software and Affected Versions OpenBSD version 6.6 Description The issue allows local users to gain the privileges of the auth group by providing a LIBGL DRIVERS PATH environment variable. This is due to a mishandling of dlopen in xenocara/lib/mesa/src/loader/loader.c...
PT-2019-15864
Name of the Vulnerable Software and Affected Versions OpenBSD version 6.6 Description A logic error in the main function in su/su.c allows local users to achieve any login class, often excluding root, by using the su -L option. Recommendations For OpenBSD version 6.6, at the moment, there is no...
CVE-2019-19521: Improper Authentication
libc in OpenBSD 6.6 allows authentication bypass via the -schallenge username, as demonstrated by smtpd, ldapd, or radiusd. This is related to gen/authsubr.c and gen/authenticate.c in libc and login/login.c and xenocara/app/xenodm/greeter/verify.c...
CVE-2019-19520: Incorrect Authorization
xlock in OpenBSD 6.6 allows local users to gain the privileges of the auth group by providing a LIBGLDRIVERSPATH environment variable, because xenocara/lib/mesa/src/loader/loader.c mishandles dlopen...
Xorg X11 Server - Local Privilege Escalation (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Xorg X11 Server Local Privilege Escalation', 'Description' = %q WARNING: Successful execution of this module results in /etc/passwd being...
Xorg X11 Server Local Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Xorg X11 Server Local Privilege Escalation', 'Description' = %q WARNING: Successful execution of this module results in /etc/passwd being...
Unspecified vulnerability in slicer69 doas
slicer69 doas is a utility program used on the OpenBSD platform to execute privileged commands for Root users. A security vulnerability exists in slicer69 doas versions prior to 6.2, which can be exploited by an attacker to execute commands with root privileges...