CID Mismatch in VMware on Restore with Backup and Replication V9 installed on Server 2008R2

Challenge Upon restore using Veeam Backup and Replication V9X you receive a CID mismatch error when you are on vSphere 5.5 Update 3b Cause This is a known issue with restoring with the option to use VM tags is enabled in vSphere 5.5 Update 3b Solution Known workarounds: 1. Upgrade Backup and...

WordPress XCloner 3.1.5 Denial Of Service / Code Execution Vulnerabilities

WordPress XCloner plugin versions 3.1.5 and below suffer from remote command execution and denial of service vulnerabilities. Exploit Title: XCloner = 3.1.5 Multiple Vulnerabilities Google Dork: inurl:"plugins/xcloner-backup-and-restore/readme.txt" -site:wordpress.org Date: 08/11/2016 Exploit...

WordPress Plugin 'XCloner' 3.1.5 - Multiple Vulnerabilities

WordPress Plugin 'XCloner' 3.1.5 - Multiple Vulnerabilities. Webapps exploit for PHP platform Exploit Title: XCloner = 3.1.5 Multiple Vulnerabilities Google Dork: inurl:"plugins/xcloner-backup-and-restore/readme.txt" -site:wordpress.org Date: 08/11/2016 Exploit Author: Felipe Molina @felmoltor...

User Profile name changes from User Name to "My Documents" or "Documents"

Under certain circumstances, the Desktop.ini file may cause the User Profile folder name on the User Store to change from the User Name to "My Documents". If we delete the "desktop.ini" file in the "My Documents" folder, it changes the folder name back to the correct user name...

Linux Kernel 2.6.22 3.9 (x86x64) - Dirty COW procselfmem Race Condition Privilege Escalation (SUID Method)

Linux Kernel 2.6.22 3.9 x86x64 - Dirty COW procselfmem Race Condition Privilege Escalation SUID Method / EDB-Note: After getting a shell, doing "echo 0 /proc/sys/vm/dirtywritebackcentisecs" may make the system more stable. uncomment correct payload first x86 or x64! $ gcc cowroot.c -o cowroot...

CVE-2003-0584

The vulnerability CVE-2003-0584 affects the Backup and Restore Utility for Unix (BRU) versions 17.0 and earlier. The root cause is a format string vulnerability in a command line argument when BRU runs with setuid privileges, allowing a local attacker to execute arbitrary code. The available docu...

CVE-2003-0584

Format string vulnerability in Backup and Restore Utility for Unix BRU 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via format string specifiers in a command line argument...

VM Disk Labels Out of Order After Restore

Challenge After Instant VM Recovery or Full VM Restore, a VMware VM appears to have been restored with its disks out of order. However, the disk files are each associated with the correct SCSI, IDE, or SATA disk IDs, disks are not out of order within the VM guest OS, and the VM otherwise function...

pvcreate --restorefile fails "/dev/sdx device not found or ignored by filtering" in XenServer

When trying to restore the lvm metadata on a Physical volume from backup using the command pvcreate --restorefile, it is failing with the error /dev/sdx device not found...

Windows FLR fails with "Failed to create or open file [C:\Windows\system32\config\systemprofile\"

Challenge When attempting to perform a Guest OS File Level Restore from a Windows Filesystem the mount Backup Browser displays the error: The system cannot find the path specified. Failed to create or open file C:\Windows\system32\config\systemprofile...\veeamflr-.flat. Agent failed to process...

BSNL Teracom Router Firmware Rewrite / Link Modification

Multiple Vulnerabilities in TERACOM ROUTER Author: Ajay Gowtham aka AJOXR Contact: gowtham.ajay5 at gmail.com Vulnerability Type: Insecure Upload File Permissions Affected Module: Upload Functionality Criticality: Medium Device Model: BSNL Teracom T2-B-Gawv1.4U10Y-BI is WiFi enabled ADSL2+...

Windows File Level Restore hangs on "Starting restore session"

Challenge Windows File Level Restore hangs on "Starting restore session" for abnormally long period of time while free disk space on drive C:\ keeps decreasing dramatically on the machine where the Veeam Backup & Replication Console is launched. You may that find the following location of the cac...

OwnCloud Restore Actions Security Bypass Vulnerability

OwnCloud is a free and open source personal cloud storage solution from German company OwnCloud. The solution offers file management, music storage, calendars and more. A security bypass vulnerability exists in OwnCloud Restore Actions, which allows attackers to bypass security restrictions and...

USN-3047-2 qemu, qemu-kvm regression

USN-3047-1 fixed vulnerabilities in QEMU. The patch to fix CVE-2016-5403 caused a regression which resulted in save/restore failures when virtio memory balloon statistics are enabled. This update temporarily reverts the security fix for CVE-2016-5403 pending further investigation. We apologize fo...

USN-3047-2: QEMU regression

USN-3047-1 fixed vulnerabilities in QEMU. The patch to fix CVE-2016-5403 caused a regression which resulted in save/restore failures when virtio memory balloon statistics are enabled. This update temporarily reverts the security fix for CVE-2016-5403 pending further investigation. We apologize fo...

CVE-2016-5260

Mozilla Firefox before 48.0 mishandles changes from 'INPUT type="password"' to 'INPUT type="text"' within a single Session Manager session, which might allow attackers to discover cleartext passwords by reading a session restoration file...

Ubee EVW3226 ModemRouter 1.0.20 - Multiple Vulnerabilities

Ubee EVW3226 ModemRouter 1.0.20 - Multiple Vulnerabilities ''' Ubee EVW3226 modem/router multiple vulnerabilities -------------------------------------------------- Platforms / Firmware confirmed affected: - Ubee EVW3226, 1.0.20 - Product page: http://www.ubeeinteractive.com/products/cable/evw322...

Read-only share recipient can restore old versions of file - ownCloud

The restore capability of ownCloud was not verifying whether an user has only read-only access to a share. Thus an user with read-only access was able to restore old versions. Affected Software ownCloud Server 9.0.4 CVE-2016-???? core/c93eca49c32428ece03dd67042772d5fa62c8d6e ownCloud Server 8.2.7...

Server: Read-only share recipient can restore old versions of file

The restore capability of ownCloud was not verifying whether an user has only read-only access to a share. Thus an user with read-only access was able to restore old versions. For more information please consult the official advisory. This advisory is licensed CC BY-SA 4.0...

Read-only share recipient can restore old versions of file (NC-SA-2016-005)

The restore capability of Nextcloud was not verifying whether an user has only read-only access to a share. Thus an user with read-only access was able to restore old versions...