Huawei HG530 Reboot / Restore Authentication Bypass

Huawei HG530 Multiple Unauthenticated reboot and restore Vulnerability =========================== The Huawei HG530 suffers from multiple Unauthenticated reboot and restore vulnerability allows local attackers to reboot the device or to restore to factory Configuration without user interaction...

netfilter iptables buffer overflow vulnerability

netfilter is a packet filtering framework used on Linux systems. iptables is one of the modules. A buffer overflow vulnerability exists in netfilter iptables-restore in version 1.8.2. The vulnerability stems from a network system or product performing operations in memory without properly...

CVE-2019-11360

A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to at least crash the program or potentially gain code execution via a specially crafted iptables-save file. This is related to addparamtoargv in xshared.c...

DEBIAN-CVE-2019-11360

A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to at least crash the program or potentially gain code execution via a specially crafted iptables-save file. This is related to addparamtoargv in xshared.c...

Buffer overflow

A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to at least crash the program or potentially gain code execution via a specially crafted iptables-save file. This is related to addparamtoargv in xshared.c...

CVE-2019-11360

A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to at least crash the program or potentially gain code execution via a specially crafted iptables-save file. This is related to addparamtoargv in xshared.c...

CVE-2019-11360

CVE-2019-11360 is a buffer overflow in iptables-restore (netfilter iptables) version 1.8.2. The root cause is in add_param_to_argv() within xshared.c, which can be triggered by a crafted iptables-save file. Impact listed in the sources includes at least crashing the iptables-restore process and p...

CVE-2019-11360

A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to at least crash the program or potentially gain code execution via a specially crafted iptables-save file. This is related to addparamtoargv in xshared.c...

AlwaysOn Availability Groups cannot be selected while restoring a SQL database to Microsoft SQL Server 2017 after installation of CU15

Challenge You try to restore a SQL database to Microsoft SQL Server 2017 with CU15 that supports AlwaysOn Availability Groups, but you are not able to select an availability group at the "Specify AlwaysON Restore Options" step. Cause ServerNetworkProtocolProperty is missing in CU15 for SQL Server...

Huawei HG530 Cross Site Request Forgery

Multiple CSRF reboot and restore Vulnerability =========================== The Huawei HG530 suffers from multiple CSRF vulnerability allows local attackers to reboot the device or to restore to factory Configuration. ================== The vulnerability is located in form POST data parameter in...

CVE-2019-4140

IBM Tivoli Storage Manager Server IBM Spectrum Protect 7.1 and 8.1 could allow a local user to replace existing databases by restoring old data. IBM X-Force ID: 158336...

Odoo Access Control Error Vulnerability (CNVD-2019-30569)

Odoo is an open source commercial system from the Belgian company Odoo. An access control error vulnerability exists in the database manager component of Odoo, which can be exploited by an attacker to restore a database and change arbitrary passwords...

PT-2019-16921 · Ibm · Ibm Spectrum Protect +1

Name of the Vulnerable Software and Affected Versions: IBM Tivoli Storage Manager Server IBM Spectrum Protect versions 7.1 through 8.1 Description: The issue allows a local user to replace existing databases by restoring old data. Recommendations: For versions 7.1 through 8.1, update to a version...

CVE-2019-4357

When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle, DB2 or MongoDB databases, a redirected restore operation specifying a target path may allow execution of arbitrary code on the system. IBM X-Force ID: 161667,...

CVE-2019-4357

When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle, DB2 or MongoDB databases, a redirected restore operation specifying a target path may allow execution of arbitrary code on the system. IBM X-Force ID: 161667,...

CVE-2019-4383

When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle or MongoDB databases, a redirected restore operation may result in an escalation of user privileges. IBM X-Force ID: 162165...

Design/Logic Flaw

When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle, DB2 or MongoDB databases, a redirected restore operation specifying a target path may allow execution of arbitrary code on the system. IBM X-Force ID: 161667,...

CVE-2019-4357

When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle, DB2 or MongoDB databases, a redirected restore operation specifying a target path may allow execution of arbitrary code on the system. IBM X-Force ID: 161667,...

PT-2019-17045 · Ibm +2 · Ibm Spectrum Protect Plus +3

Name of the Vulnerable Software and Affected Versions: IBM Spectrum Protect Plus versions 10.1.0 through 10.1.3 Description: The issue allows execution of arbitrary code on the system when performing a redirected restore operation that specifies a target path, particularly when protecting Oracle,...

Security Bulletin: Password disclosure in IBM Spectrum Protect Server (CVE-2019-4140)

Summary The IBM Spectrum Protect formerly Tivoli Storage Manager Server may disclose the database restore password when using the dsmserv restore db command. This could allow another user to perform a database restore or possibly result in an old backup replacing the database. Vulnerability Detai...