Privilege Escalation

jetty is vulnerable to privilege escalation. The vulnerability exists on Unix like systems where the system's temporary directory is shared between all users on that system, allowing a user to observe the process of creating a temporary sub-directory in the shared temporary directory, and race to...

QEMU: virtiofsd: guest may open maximum file descriptor to cause DoS

A potential DoS flaw was found in the virtio-fs shared file system daemon virtiofsd implementation of the QEMU version = v5.0. Virtio-fs is meant to share a host file system directory with a guest via virtio-fs device. If the guest opens the maximum number of file descriptors under the shared...

DEBIAN-CVE-2020-10717

A potential DoS flaw was found in the virtio-fs shared file system daemon virtiofsd implementation of the QEMU version = v5.0. Virtio-fs is meant to share a host file system directory with a guest via virtio-fs device. If the guest opens the maximum number of file descriptors under the shared...

CVE-2019-10197

A flaw was found in samba when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of directories outside of the share. Mitigation The following methods can be used as a mitigation only...

DEBIAN-CVE-2019-10197

A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of directorie...

ALPINE-CVE-2019-10197

A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of directorie...

CVE-2019-10197

A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of directorie...

JVN#61502349: Self-Extracting Encrypted Files created by AttacheCase may insecurely load Dynamic Link Libraries

AttacheCase is an open source file encryption software provided by HiBARA Software. It can also create self-extracting encrypted files. Self-extracting encrypted files created by AttacheCase contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries...

Samba Server Software Remote Code Execution Vulnerability

Samba is a software that runs on Linux and UNIX systems to implement the SMB protocol, which enables different computers to provide services for sharing resources such as files and printers. A remote code execution vulnerability exists in the Samba server software. An attacker can use a client to...

Samba remote code execution vulnerability(CVE-2017-7494)

A vulnerability overview 1 vulnerability profile Samba is in the Linux and UNIX systems implement SMB Protocol one software, many IoT devices also use Samba. 2017 5 May 24, Samba released a 4. 6. 4 version, to fix a serious remote code execution vulnerability, the vulnerability number...

Vulnerability warning|Samba remote code execution vulnerability, affecting 7 years ago version-bug warning-the black bar safety net

Samba is a Linux and UNIX system of the SMB Protocol service software, can be achieved with otheroperating system such as: Microsoft Windows operating system, file system, printers and other shared resources. The vulnerability of the earliest influence to the 7 ago version, a hacker can exploit t...

OnionShare Competitive Conditions Loophole

OnionShare is an open source file encryption transfer or sharing software developed by Brazilian software developer Micah Lee. A competitive condition vulnerability exists in OnionShare that stems from the program failing to properly create temporary files. An attacker could use this vulnerabilit...

Ubuntu: Security Advisory (USN-2618-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Red Hat Enterprise Virtualization Manager Sensitive Information Read Vulnerability

Red Hat Enterprise Virtualization Manager is an enterprise virtualization management application solution from Red Hat. Red Hat Enterprise Virtualization Manager insecurely sets permissions on the shared directory of the plug-in and ovirt-engine-dwhd service during service startup, allowing local...

Cheyenne Inoculan for Windows NT 4.0 Share Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/106/info It is possible to run arbitrary code on any Intel machine running Cheyenne Inoculan version 4.0 for Windows NT prior to SP2. Inoculan runs as a service, called Cheyenne InocuLAN Anti-Virus Server. When it starts,...

CVE-2013-0990

SMB in Apple Mac OS X before 10.8.4, when file sharing is enabled, allows remote authenticated users to create or modify files outside of a shared directory via unspecified vectors...

CVE-2013-0990

SMB in Apple Mac OS X before 10.8.4, when file sharing is enabled, allows remote authenticated users to create or modify files outside of a shared directory via unspecified vectors...

globus -- Multiple tmpfile races

The Globus Alliance reports: The proxy generation tool grid-proxy-init creates the file, secures the file to provide access only to owner and writes proxy to the file. A race condition exists between the opening of the proxy credentials file, and making sure it is safe file to write to. The check...

CVE-2002-1924

CVE-2002-1924 affects PowerChute Plus 5.0.2. The installation creates a directory named “Pwrchute” that is shared and world-writable, allowing remote attackers to modify or create files within that directory. Root cause: insecure directory permissions at install. Impact: potential unauthorized mo...

Responding to BugTraq ID 2014 - "Trend Micro InterScan VirusWall Shared Directory Vulnerability"

Hello, This is to respond to BugTraq ID: 2014, "Trend Micro InterScan VirusWall Shared Directory Vulnerability", posted on SecurityFocus.com on November 28, 2000. Overview: Trend Micro has acknowledged that during installation, by default, InterScan VirusWall for Windows NT creates "Intscan" shar...