4276 matches found
CVE-2024-6354
Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via the use of the PAM dashboard...
CVE-2024-6354
Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via the use of the PAM dashboard...
CVE-2024-6354
Devolutions Remote Desktop Manager versions 2024.2.11 and earlier on Windows are affected by an improper access control vulnerability in the PAM dashboard . This flaw allows an authenticated user to bypass the execute permission through the dashboard. As a temporary workaround, it is recommended ...
CVE-2024-6354
Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via the use of the PAM dashboard...
CVE-2024-6354
Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via the use of the PAM dashboard...
Devolutions Remote Desktop Manager Security Vulnerability
Devolutions Remote Desktop Manager is an application from Devolutions Canada Inc. It provides remote desktop management functionality. A security vulnerability exists in Devolutions Remote Desktop Manager version 2024.2.11 and prior versions, which stems from an improper access control issue in t...
PT-2024-37560
Name of the Vulnerable Software and Affected Versions Devolutions Remote Desktop Manager versions 2024.2.11 and earlier Description The issue is related to improper access control in the PAM dashboard, allowing an authenticated user to bypass execute permission via the PAM dashboard...
CVE-2024-6354: Improper Access Control for Register Interface
Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via the use of the PAM dashboard...
SUSE CVE-2024-38439
Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibufPASSWDLEN to '\0' in FPLoginExt in login in etc/uams/uamspam.c. 2.4.1 and 3.1.19 are also fixed versions...
SUSE CVE-2024-38440
Netatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow and segmentation violation, because of incorrectly using FPLoginExt in BNbin2bn in etc/uams/uamsdhxpam.c. The original issue 1097 report stated: 'The latest version of Netatalk v3.2.0 contains a security...
Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to libssh, Linux-pam ,Kerberos 5, systemd and idna packages/liberaries.
Summary IBM MQ Operator and Queue manager container images are vulnerable to libssh, Linux-pam ,Kerberos 5, systemd and idna. This bulletin identifies the steps required to address these vulnerabilities Vulnerability Details CVEID:CVE-2023-6004 DESCRIPTION: libssh could allow a local authenticate...
UBUNTU-CVE-2024-38439
Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibufPASSWDLEN to '\0' in FPLoginExt in login in etc/uams/uamspam.c. 2.4.1 and 3.1.19 are also fixed versions...
UBUNTU-CVE-2024-38440
Netatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow and segmentation violation, because of incorrectly using FPLoginExt in BNbin2bn in etc/uams/uamsdhxpam.c. The original issue 1097 report stated: 'The latest version of Netatalk v3.2.0 contains a security...
Netatalk Security Vulnerabilities
Netatalk is open source software that provides AFP file server functionality for Classic Mac OS and macOS on Unix-like OS. A security vulnerability exists in Netatalk version 3.2.0, which stems from etc/uams/uamspam.c setting ibufPASSWDLEN to 0 in FPLoginExt...
CVE-2024-38440
Netatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow and segmentation violation, because of incorrectly using FPLoginExt in BNbin2bn in etc/uams/uamsdhxpam.c. The original issue 1097 report stated: 'The latest version of Netatalk v3.2.0 contains a security...
OPENSUSE-SU-2024:11140-1 pam-1.5.2-1.1 on GA media
These are all security issues fixed in the pam-1.5.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10043-1 pam-modules-12.1-27.4 on GA media
These are all security issues fixed in the pam-modules-12.1-27.4 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10464-1 pam_ssh-2.1-1.7 on GA media
These are all security issues fixed in the pamssh-2.1-1.7 package on the GA media of openSUSE Tumbleweed...