Cisco IOS Software Secure Copy Privilege Escalation Vulnerability - Cisco Systems

The server side of the Secure Copy SCP implementation in Cisco IOS software contains a vulnerability that could allow authenticated users with an attached command-line interface CLI view to transfer files to and from a Cisco IOS device that is configured to be an SCP server, regardless of what...

rssh -- configuration restrictions bypass

Derek Martin rssh maintainer reports: John Barber reported a problem where, if the system administrator misconfigures rssh by providing too few access bits in the configuration file, the user will be given default permissions scp to the entire system, potentially circumventing any configured...

MDVA-2008:125 : bash-completion

The bash-completion package shipped in Mandriva Linux 2008 Spring had a problem with scp remote host completion, as reported in bug 42063. The updated package fixes the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...

Mandriva Update for bash-completion MDVA-2008:125 (bash-completion)

Check for the Version of bash-completion OpenVAS Vulnerability Test Mandriva Update for bash-completion MDVA-2008:125 bash-completion Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute i...

Mandriva Update for bash-completion MDVA-2008:125 (bash-completion)

Check for the Version of bash-completion OpenVAS Vulnerability Test Mandriva Update for bash-completion MDVA-2008:125 bash-completion Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute i...

Cisco IOS multiple security vulnerabilities

Multiple DoS conditions in TCP, cTCP, Mobile IP/Mobile IPv6, WebVPN, SSLVPN implementations, SCP privilege escalation...

CVE-2009-0637

The SCP server in Cisco IOS 12.2 through 12.4, when Role-Based CLI Access is enabled, does not enforce the CLI view configuration for file transfers, which allows remote authenticated users with an attached CLI view to 1 read or 2 overwrite arbitrary files via an SCP command...

Command injection

The SCP server in Cisco IOS 12.2 through 12.4, when Role-Based CLI Access is enabled, does not enforce the CLI view configuration for file transfers, which allows remote authenticated users with an attached CLI view to 1 read or 2 overwrite arbitrary files via an SCP command...

CVE-2009-0637

The SCP server in Cisco IOS 12.2 through 12.4, when Role-Based CLI Access is enabled, does not enforce the CLI view configuration for file transfers, which allows remote authenticated users with an attached CLI view to 1 read or 2 overwrite arbitrary files via an SCP command...

CVE-2009-0637

The CVE-2009-0637 entry matches Cisco IOS SCP privilege escalation: the SCP server in Cisco IOS 12.2–12.4 with Role-Based CLI Access allows an authenticated user who has an attached CLI view to read or overwrite any file via SCP, regardless of the view’s permissions. The vulnerability affects dev...

Cisco Security Advisory: Cisco IOS Software Secure Copy Privilege Escalation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Software Secure Copy Privilege Escalation Vulnerability Advisory ID: cisco-sa-20090325-scp http://www.cisco.com/warp/public/707/cisco-sa-20090325-scp.shtml Revision 1.0 For Public Release 2009 March 25 1600 UTC GMT -...

Debian: Security Advisory (DSA-1738-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1738-1 : curl - arbitrary file access

David Kierznowski discovered that libcurl, a multi-protocol file transfer library, when configured to follow URL redirects automatically, does not question the new target location. As libcurl also supports file:// and scp:// URLs - depending on the setup - an untrusted server could use that to...

CVE-2009-0037

The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPTFOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow remote HTTP servers to 1 trigger arbitrary requests to intranet servers, 2 read or overwrite arbitrary files via a redirect to a file:...

FreeBSD : curl -- cURL/libcURL Location: Redirect URLs Security Bypass (5d433534-f41c-402e-ade5-e0a2259a7cb6)

Secunia reports : The security issue is caused due to cURL following HTTP Location : redirects to e.g. scp:// or file:// URLs which can be exploited by a malicious HTTP server to overwrite or disclose the content of arbitrary local files and potentially execute arbitrary commands via specially...

CURL-CVE-2009-0037 Arbitrary File Access

When told to follow a "redirect" automatically, libcurl does not question the new target URL but follows it to any new URL that it understands. As libcurl supports FILE:// URLs, a rogue server can thus "trick" a libcurl-using application to read a local file instead of the remote one. This is a...

Profense Web Application Firewall 2.6.2 XSRF/XSS Vulnerabilities

No description provided by source. Written By Michael Brooks Special thanks to str0ke! Affects: Profense Web Application Firewall XSRF and XSS Version: 2.6.2 download http://www.armorlogic.com/downloadsoftware.html "Defenses against all OWASP Top Ten vulnerabilities" Too bad it doesn't defend its...

Profense Web Application Firewall 2.6.2 - Cross-Site Request Forgery Cross-Site Scripting

Profense Web Application Firewall 2.6.2 - Cross-Site Request Forgery Cross-Site Scripting Written By Michael Brooks Special thanks to str0ke! Affects: Profense Web Application Firewall XSRF and XSS Version: 2.6.2 download http://www.armorlogic.com/downloadsoftware.html "Defenses against all OWASP...

Cisco IOS, Cisco 10000, uBR10012, uBR7200 and Cisco UCM multiple security vulnerabilities

DoS with L2TP, MPLS, IPS, SIP, SSL vulnerabilities, information leaks, multiple multicast security vulnerabilities, NAT SCP, IOS Software firewall application inspection security vulnerabilities...

Gentoo Security Advisory GLSA 200602-11 (OpenSSH)

The remote host is missing updates announced in advisory GLSA 200602-11. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...