4636 matches found
Read-only share recipient can restore old versions of file - ownCloud
The restore capability of ownCloud was not verifying whether an user has only read-only access to a share. Thus an user with read-only access was able to restore old versions. Affected Software ownCloud Server 9.0.4 CVE-2016-???? core/c93eca49c32428ece03dd67042772d5fa62c8d6e ownCloud Server 8.2.7...
Server: Read-only share recipient can restore old versions of file
The restore capability of ownCloud was not verifying whether an user has only read-only access to a share. Thus an user with read-only access was able to restore old versions. For more information please consult the official advisory. This advisory is licensed CC BY-SA 4.0...
Read-only share recipient can restore old versions of file (NC-SA-2016-005)
The restore capability of Nextcloud was not verifying whether an user has only read-only access to a share. Thus an user with read-only access was able to restore old versions...
PT-2016-6610
Name of the Vulnerable Software and Affected Versions libbpg versions 0.9.5 through 0.9.7 Description The issue is related to a "type confusion" problem in the restore tqb pixels function, which mishandles the transquant bypass enable flag value. This allows remote attackers to execute arbitrary...
EMC Avamar ADS and AVE Unauthorized Data Access Vulnerability
EMC Avamar is a remote backup and recovery solution. An unauthorized data access vulnerability exists in EMC Avamar versions prior to 7.1.2 and 7.2.x prior to 7.2.1, ADS, and AVE in the web-restore interface implementation. An authenticated remote user can read or delete directories via a Linux...
CVE-2016-0906
The web-restore interface in Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation...
Design/Logic Flaw
The web-restore interface in Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation...
CVE-2016-0906
The web-restore interface in Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation...
CVE-2016-0906
The web-restore interface in Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation...
CVE-2016-0906: Improper Access Control
The web-restore interface in Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation...
PT-2016-4460
Name of the Vulnerable Software and Affected Versions EMC Avamar versions 7.1.2 and earlier EMC Avamar versions 7.2.x through 7.2.1 Description The issue affects the web-restore interface in Avamar Data Store ADS and Avamar Virtual Edition AVE, allowing remote authenticated users to read or delet...
Nextcloud: Read-only share recipient can restore old versions of file
The restore capability of Nextcloud was not verifying whether an user has only read-only access to a share. Thus an user with read-only access was able to restore old versions. A detailed advisory can be found at https://nextcloud.com/security/advisory/?id=nc-sa-2016-005. ------ Thanks a lot,...
CRIU Privilege Acquisition Vulnerability
CRIU Checkpoint/Restore In Userspace is a set of Linux userspace userspace on the implementation of the checkpoint/restore function of the software to freeze and restore the execution of tools. The tool supports freezing or partially freezing the execution of an application and saving its executi...
CRIU Information Disclosure Vulnerability
CRIU Checkpoint/Restore In Userspace is a set of Linux userspace userspace on the implementation of the checkpoint/restore function of the software to freeze and restore the execution of tools. The tool supports freezing or partially freezing the execution of an application and saving its executi...
UBUNTU-CVE-2015-5231
The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via 1 process dumps or 2 ptrace access...
multi-OS restore fails on Hyper-V 2008R2
To restore individual files and folders from file systems other than Microsoft Windows, you can use the multi-OS File-Level Restore wizard. To restore files from VM guest OS, Veeam Backup & Replic...
SandJacking Attack Puts iOS Devices At Risk to Rogue Apps
Apple has yet to patch a vulnerability disclosed during last week’s Hack in the Box hacker conference in Amsterdam that allows an attacker with physical access—even on the latest versions of iOS—to swap out legitimate apps with malicious versions undetected on the device. Researcher Chilik Tamir ...
SUSE-SU-2016:1346-1 Security update for systemd
This update for SystemD provides fixes and enhancements. The following security issue has been fixed: - Don't allow read access to journal files to users. bsc972612, CVE-2014-9770, CVE-2015-8842 The following non-security issues have been fixed: - Restore initrd-udevadm-cleanup-db.service...
DEBIAN-CVE-2016-3159
The fpufxrstor function in arch/x86/i387.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users to obtain sensitive register content information from another guest by leveraging pending exception and mask bits...
How to Restore NetScaler SDX to Factory Default Settings
This article describes how to restore NetScaler SDX to factory default settings. Important Points to Note 1. The procedure mentioned in this article is for troubleshooting or a last resort step only. The recommend procedure to restoreNetScaler SDX to factory default settings is using SVM GUI . 2...