CVE-2020-1981 PAN-OS: Predictable temporary filename vulnerability allows local privilege escalation

A predictable temporary filename vulnerability in PAN-OS allows local privilege escalation. This issue allows a local attacker who bypassed the restricted shell to execute commands as a low privileged user and gain root access on the PAN-OS hardware or virtual appliance. This issue affects only...

CVE-2018-20162

Digi TransPort LR54 4.4.0.26 and possible earlier devices have Improper Input Validation that allows users with 'super' CLI access privileges to bypass a restricted shell and execute arbitrary commands as root...

CVE-2018-20162: Improper Input Validation

Digi TransPort LR54 4.4.0.26 and possible earlier devices have Improper Input Validation that allows users with 'super' CLI access privileges to bypass a restricted shell and execute arbitrary commands as root...

PT-2019-10008

Name of the Vulnerable Software and Affected Versions: Digi TransPort LR54 version 4.4.0.26 and possible earlier versions Description: The issue is related to Improper Input Validation, allowing users with 'super' CLI access privileges to bypass a restricted shell and execute arbitrary commands a...

EUVD-2019-13103

Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands...

Brocade Fabric OS Elevation of Privilege Vulnerability (CNVD-2019-05926)

Brocade Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Brocade Communications Systems Brocade in the United States. A security vulnerability exists in the configdownload command of the command line interface in Brocade FOS. A local attacker...

EMC RecoverPoint and EMC RecoverPoint for Virtual Machines Command Injection Vulnerability (CNVD-2018-04836)

EMC RecoverPoint is a disaster recovery solution from EMC Corporation. The solution provides local and remote hypervisor-based replication, continuous data protection by virtual machine recovery to any point in time, automated disaster recovery process orchestration, etc. EMC RecoverPoint for...

PT-2017-13396

Name of the Vulnerable Software and Affected Versions Extreme EXOS versions 16.x through 22.x Description The issue allows administrators to bypass the "exsh restricted shell" protection mechanism, resulting in the ability to obtain an interactive shell. Recommendations For versions 16.x through...

CVE-2017-14331: Undefined Security Weakness

Extreme EXOS 16.x, 21.x, and 22.x allows administrators to bypass the "exsh restricted shell" protection mechanism and obtain an interactive shell...

Extreme EXOS Security Bypass Vulnerability

Extreme EXOS is a new generation modular switch operating system from Extreme Networks. A security bypass vulnerability exists in Extreme EXOS versions 16.x, 21.x, and 22.x. The vulnerability can be exploited to bypass the 'exsh restricted shell' protection mechanism and gain access to the...

ALPINE-CVE-2016-9401

popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address...

CVE-2016-9401

popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address...

CVE-2016-9401

popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address...

CVE-2016-9401: Use After Free

popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address...

PT-2017-10117 · Gnu +5 · Bash +5

Name of the Vulnerable Software and Affected Versions: bash affected versions not specified Description: The issue allows local users to bypass the restricted shell and cause a use-after-free via a crafted address, potentially related to the popd command in bash. There is no information provided...

UBUNTU-CVE-2012-2252

Incomplete blacklist vulnerability in rssh before 2.3.4, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via the --rsh command line option...

CVE-2012-2251

rssh 2.3.2, as used by Debian, Fedora, and others, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via a 1 "-e" or 2 "--" command line option...

PT-2013-1086

Name of the Vulnerable Software and Affected Versions rssh version 2.3.2 Description The issue allows local users to bypass intended restricted shell access. This can be achieved via the -e or -- command line option. Multiple vulnerabilities in the rssh package may lead to a breach of...

CVE-2012-2251: Improper Input Validation

rssh 2.3.2, as used by Debian, Fedora, and others, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via a 1 "-e" or 2 "--" command line option...

CVE-2012-2252: Undefined Security Weakness

Incomplete blacklist vulnerability in rssh before 2.3.4, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via the --rsh command line option...