[SECURITY] [DSA 2164-1] shadow security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2164-1 [email protected] http://www.debian.org/security/ Nico Golde February 16, 2011 http://www.debian.org/security/faq -...

DSA-2164-1 shadow - missing input sanitization

Bulletin has no description...

Ubuntu 9.10 / 10.04 LTS / 10.10 : shadow vulnerability (USN-1065-1)

Kees Cook discovered that some shadow utilities did not correctly validate user input. A local attacker could exploit this flaw to inject newlines into the /etc/passwd file. If the system was configured to use NIS, this could lead to existing NIS groups or users gaining or losing access to the...

USN-1065-1: shadow vulnerability

Kees Cook discovered that some shadow utilities did not correctly validate user input. A local attacker could exploit this flaw to inject newlines into the /etc/passwd file. If the system was configured to use NIS, this could lead to existing NIS groups or users gaining or losing access to the...

CVE-2011-0721

Multiple CRLF injection vulnerabilities in 1 chfn and 2 chsh in shadow 1:4.1.4 allow local users to add new users or groups to /etc/passwd via the GECOS field...

[SECURITY] Fedora 13 Update: libuser-0.56.16-1.fc13.2

The libuser library implements a standardized interface for manipulating and administering user and group accounts. The library uses pluggable back-ends to interface to its data sources. Sample applications modeled after those included with the shadow password suite are included...

Moderate: Red Hat Security Advisory: libuser security update

Updated libuser packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Researchers Tracking Emerging Darkness Botnet

Researchers are tracking a new botnet that has become one of the more active DDoS networks on the Internet since its emergence early last month. The botnet, dubbed “Darkness,” is being controlled by several domains hosted in Russia and its operators are boasting that it can take down large sites...

Code injection

Cisco Unified Videoconferencing UVC System 5110 and 5115, when the Linux operating system is used, uses world-readable permissions for the /etc/shadow file, which allows local users to discover encrypted passwords by reading this file, aka Bug ID CSCti54043...

CVE-2010-4303

CVE-2010-4303 affects Cisco Unified Videoconferencing (UVC) System 5110 and 5115 when running Linux. The root cause described in the sources is that /etc/shadow is world-readable, enabling local users to read encrypted password hashes. This is a local disclosure vulnerability as stated. The conne...

CVE-2010-4303

Cisco Unified Videoconferencing UVC System 5110 and 5115, when the Linux operating system is used, uses world-readable permissions for the /etc/shadow file, which allows local users to discover encrypted passwords by reading this file, aka Bug ID CSCti54043...

Free Amr Converter 4.6.0.0 DLL Hijacking Exploit

Exploit for windows platform in category local exploits ================================================ Free Amr Converter 4.6.0.0 DLL Hijacking Exploit ================================================ || || | || o,7 || . o7 || 4||| ow, : / /...

Fedora Update for lib3ds FEDORA-2010-14644

Check for the Version of lib3ds OpenVAS Vulnerability Test Fedora Update for lib3ds FEDORA-2010-14644 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

MS10-061: Vulnerability in Print Spooler Service Could Allow Remote Code Execution (2347290) (EMERALDTHREAD)

The version of the Print Spooler service on the remote Windows host is affected by a service impersonation vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code on a Windows XP system to escalate privileges on all other supported Windows systems. EMERALDTHREAD is...

MS10-046: Vulnerability in Windows Shell Could Allow Remote Code Execution (2286198) (EASYHOOKUP)

The remote windows host contains a version of the Windows Shell that contains a vulnerability in the way it handles shortcut icons. An attacker, exploiting this flaw, can execute arbitrary commands on the remote host subject to the privileges of the user opening the shortcut. EASYHOOKUP is one of...

MS KB2286198: Windows Shell Shortcut Icon Parsing Arbitrary Code Execution (EASYHOOKUP)

Windows Shell does not properly validate the parameters of a shortcut file when loading its icon. Attempting to parse the icon of a specially crafted shortcut file can result in arbitrary code execution. A remote attacker could exploit this by tricking a user into viewing a malicious shortcut fil...

Unreal Engine - 'ReceivedRawBunch()' Denial of Service

source: https://www.securityfocus.com/bid/41737/info Unreal Engine is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected server, resulting in denial-of-service conditions. The following games which are developed with Unreal Engine are affected:...

Unreal Engine - ReceivedRawBunch() Denial of Service

Unreal Engine - ReceivedRawBunch Denial of Service source: https://www.securityfocus.com/bid/41737/info Unreal Engine is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected server, resulting in denial-of-service conditions. The following games whic...

Linux/ARM - polymorphic chmod"/etc/shadow", 0777 84 Bytes

Linux/ARM - polymorphic chmod"/etc/shadow", 0777 - 84 Bytes. Shellcode exploit for linux platform / | Title: Linux/ARM - polymorphic chmod"/etc/shadow", 0777 - 84 Bytes | Type: Shellcode | Author: Florian Gaultier | Platform: Linux ARM ARM926EJ-S rev 5 v51 | + http://www.shell-storm.org / include...

Linux/ARM chmod"/etc/shadow", 0777 Shellcode 35 Bytes

Linux/ARM chmod"/etc/shadow", 0777 Shellcode 35 Bytes. Shellcode exploit for linux platform / | Title: Linux/ARM chmod"/etc/shadow", 0777 Shellcode 35 Bytes | Type: Shellcode | Author: Florian Gaultier | Platform: Linux ARM ARM926EJ-S rev 5 v51 | + http://www.shell-storm.org / include char...