PT-2015-2202

Name of the Vulnerable Software and Affected Versions sblim-sfcb versions 1.3.4 through 1.3.18 Description The issue is related to the lookupProviders function in providerMgr.c, which is vulnerable to NULL pointer dereference errors. This can be exploited by a remote attacker using a specially...

CVE-2015-5185: Undefined Security Weakness

The lookupProviders function in providerMgr.c in sblim-sfcb 1.3.4 and 1.3.18 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty className in a packet...

openSUSE Security Update : sblim-sfcb (openSUSE-2015-585)

sblim-sfcb was updated to fix a security issue with a crash due to a NULL pointer dereference in lookupProviders CVE-2015-5185 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2015-585...

AZL-7355 CVE-2012-3381 affecting package sblim-sfcb 1.4.9-20

sfcb in sblim-sfcb places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2012-3381

sfcb in sblim-sfcb places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

AZL-37030 CVE-2012-3381 affecting package sblim-sfcb 1.4.9-20

sfcb in sblim-sfcb places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2012-3381

sfcb in sblim-sfcb places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

Directory traversal

sfcb in sblim-sfcb places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2012-3381: Undefined Security Weakness

sfcb in sblim-sfcb places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2012-3381

The CVE-2012-3381 issue affects the sblim-sfcb component, where sfcb places a zero-length directory name in LD_LIBRARY_PATH, enabling local privilege escalation via a Trojan horse shared library in the current working directory. Documented impact is local userPrivilege elevation with partial conf...

CVE-2012-3381

sfcb in sblim-sfcb places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2012-3381

sfcb in sblim-sfcb places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

PT-2012-4676

Name of the Vulnerable Software and Affected Versions sblim-sfcb affected versions not specified Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to sfcb in sblim-sfcb placing a zero-length directory name i...

VMware ESXi/ESX third party component updates (VMSA-2011-0013.2)

The remote ESXi is missing one or more security related Updates from VMSA-2011-0013.2. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VMSA-2011-0013 : VMware third-party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX

a. ESX third-party update for Service Console openssl RPM The Service Console openssl RPM is updated to openssl-0.9.8e.12.el55.7 resolving two security issues. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2008-7270 and CVE-2010-4180 to these issues. b...

VMware ESXi authentication bypass

SFCB access without authentication is possible during update...

VMSA-2010-0020 VMware ESXi 4.1 Update Installer SFCB Authentication Flaw

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2010-0020 Synopsis: VMware ESXi 4.1 Update Installer SFCB Authentication Flaw Issue date: 2010-12-21 Updated on: 2010-12-21 CVE...

CVE-2010-4573

The Update Installer in VMware ESXi 4.1, when a modified sfcb.cfg is present, does not properly configure the SFCB authentication mode, which allows remote attackers to obtain access via an arbitrary username and password...

Default credentials

The Update Installer in VMware ESXi 4.1, when a modified sfcb.cfg is present, does not properly configure the SFCB authentication mode, which allows remote attackers to obtain access via an arbitrary username and password...

CVE-2010-4573

Summary (CVE-2010-4573) : VMware ESXi 4.1 Update Installer may improperly configure SFCB authentication if /etc/sfcb/sfcb.cfg was modified during an upgrade from ESXi 3.5 or 4.0. The result is that SFCB authentication could allow login with any username and password, enabling remote access. The i...