openSUSE Security Update : autoyast2 (openSUSE-2020-676)

This update for autoyast2 to version 4.1.15 fixes the following issues : Security issue fixed : - CVE-2019-18905: Removed all '--gpg-auto-import-keys' options from zypper commands bsc1140711. Non-security issue fixed : - Fix desktop files updating some icons and groups bsc1168123. - Restored some...

Security update for tomcat (important)

openSUSE Security Update: Security update for tomcat Announcement ID: openSUSE-SU-2020:0711-1 Rating: important References: 1171928 Cross-References: CVE-2020-9484 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for tomcat...

openSUSE: Security Advisory for autoyast2 (openSUSE-SU-2020:0676-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for autoyast2 (moderate)

openSUSE Security Update: Security update for autoyast2 Announcement ID: openSUSE-SU-2020:0676-1 Rating: moderate References: 1109310 1133045 1140711 1164105 1168123 1168281 1170082 Cross-References: CVE-2019-18905 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and...

Filetto 1.0 - 'FEAT' Denial of Service (PoC)

Exploit Title: Filetto 1.0 - 'FEAT' Denial of Service PoC Date: 2020-05-13 Found by: Alvaro J. Gene Socket0x03 Vendor Homepage: http://www.utillyty.eu Software Link: https://sourceforge.net/projects/filetto Vulnerable Application: Filetto Version: 1.0 last version. Updated: 01/31/2020 Server: FTP...

Description of Update Rollup 2 for System Center 2012 Service Pack 1

Description of Update Rollup 2 for System Center 2012 Service Pack 1 Introduction This article describes the issues that are fixed in Update Rollup 2 for Microsoft System Center 2012 Service Pack 1 SP1. Additionally, this article contains the installation instructions for Update Rollup 2 for Syst...

Konica Minolta FTP Utility 1.0 - (LIST) Denial of Service Exploit

Exploit Title: Konica Minolta FTP Utility v1.0 - 'LIST' Denial of Service PoC v2 Found by: Alvaro J. Gene Socket0x03 Email: Socket0x03 at teraexe dot com Website: www dot teraexe dot com Vulnerable Application: Konica Minolta FTP Utility Version: 1.0 Server: FTP Server Vulnerable Command: LIST...

Konica Minolta FTP Utility 1.0 - (NLST) Denial of Service Exploit

Exploit Title: Konica Minolta FTP Utility 1.0 - 'NLST' Denial of Service PoC Found by: Alvaro J. Gene Socket0x03 Software Link: https://konica-minolta-ftp-utility.software.informer.com/download/ Vulnerable Application: Konica Minolta FTP Utility Version: 1.0 Server: FTP Server Vulnerable Command:...

Konica Minolta FTP Utility 1.0 Denial Of Service

Exploit Title: Konica Minolta FTP Utility v1.0 - 'LIST' Denial of Service PoC v2 Date: 05-16-2020 Found by: Alvaro J. Gene Socket0x03 Email: Socket0x03 at teraexe dot com Website: www dot teraexe dot com Vulnerable Application: Konica Minolta FTP Utility Version: 1.0 Server: FTP Server Vulnerable...

Security Only Update for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Windows Server 2008 R2 SP1 (KB4556403)

Security Only Update for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Windows Server 2008 R2 SP1 KB4556403 Notice Revised 6/8/2021 On June 8th, 2021, this update was released to replace a previous update to address a “revocation server was offline”...

Druva inSync inSyncCPHwnet64.exe RPC Type 5 Privilege Escalation Exploit

Druva inSync client for Windows exposes a network service on TCP port 6064 on the local network interface. inSync versions 6.5.2 and prior do not validate user-supplied program paths in RPC type 5 messages, allowing execution of arbitrary commands as SYSTEM. This Metasploit module has been tested...

Security update for cacti, cacti-spine (moderate)

openSUSE Security Update: Security update for cacti, cacti-spine Announcement ID: openSUSE-SU-2020:0654-1 Rating: moderate References: 1163749 Cross-References: CVE-2020-7106 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 SUSE Package Hub for SUSE Linux Enterprise 12 An updat...

openSUSE Security Update : python-PyYAML (openSUSE-2020-630)

This update for python-PyYAML fixes the following issues : - CVE-2020-1747: Fixed an arbitrary code execution when YAML files are parsed by FullLoader bsc1165439. This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenable Network Security, Inc. The descriptive text and...

openSUSE Security Update : slirp4netns (openSUSE-2020-636)

This update for slirp4netns fixes the following issues : Security issue fixed : - CVE-2020-1983: Fixed a use-after-free in ipreass bsc1170940. This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this...

Druva inSync inSyncCPHwnet64.exe RPC Type 5 Privilege Escalation

Druva inSync client for Windows exposes a network service on TCP port 6064 on the local network interface. inSync versions 6.6.3 and prior do not properly validate user-supplied program paths in RPC type 5 messages, allowing execution of arbitrary commands as SYSTEM. This module has been tested...

CVE-2020-8018

A Incorrect Default Permissions vulnerability in the SLES15-SP1-CHOST-BYOS and SLES15-SP1-CAP-Deployment-BYOS images of SUSE Linux Enterprise Server 15 SP1 allows local attackers with the UID 1000 to escalate to root due to a /etc directory owned by the user This issue affects: SUSE Linux...

CVE-2020-8018

A Incorrect Default Permissions vulnerability in the SLES15-SP1-CHOST-BYOS and SLES15-SP1-CAP-Deployment-BYOS images of SUSE Linux Enterprise Server 15 SP1 allows local attackers with the UID 1000 to escalate to root due to a /etc directory owned by the user This issue affects: SUSE Linux...

Design/Logic Flaw

A Incorrect Default Permissions vulnerability in the SLES15-SP1-CHOST-BYOS and SLES15-SP1-CAP-Deployment-BYOS images of SUSE Linux Enterprise Server 15 SP1 allows local attackers with the UID 1000 to escalate to root due to a /etc directory owned by the user This issue affects: SUSE Linux...

CVE-2020-8018 User owned /etc in SLES15-SP1-CHOST-BYOS

A Incorrect Default Permissions vulnerability in the SLES15-SP1-CHOST-BYOS and SLES15-SP1-CAP-Deployment-BYOS images of SUSE Linux Enterprise Server 15 SP1 allows local attackers with the UID 1000 to escalate to root due to a /etc directory owned by the user This issue affects: SUSE Linux...

CVE-2020-8018

CVE-2020-8018 affects SUSE Linux Enterprise Server 15 SP1: SLES15-SP1-CHOST-BYOS before 1.0.3 and SLES15-SP1-CAP-Deployment-BYOS before 1.0.1, where a /etc directory owned by UID 1000 enables local privilege escalation to root. This is a local vulnerability; exploitation details are not provided ...