CVE-2019-12576

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v82 for macOS could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The openvpnlauncher binary is setuid root. This program is called during the connection process and executes...

CVE-2019-12576

CVE-2019-12576 affects the London Trust Media Private Internet Access (PIA) VPN Client v82 for macOS. The openvpn_launcher binary is setuid root and invoked during connection, executing OS utilities to configure the system. The networksetup utility is called using relative paths, and a local unpr...

CVE-2019-12573

The CVE-2019-12573 entry concerns the London Trust Media Private Internet Access (PIA) VPN Client v82 for Linux and macOS. The vulnerability arises in the openvpn_launcher binary, which runs with setuid root. The --log option accepts a file path and is not sanitized, allowing an authenticated loc...

CVE-2019-12573

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v82 for Linux and macOS could allow an authenticated, local attacker to overwrite arbitrary files. The openvpnlauncher binary is setuid root. This binary supports the --log option, which accepts a path as an argument...

CVE-2019-12577

CVE-2019-12577 affects the London Trust Media Private Internet Access (PIA) VPN Client v82 for macOS. The macOS binary openvpn_launcher.64 is setuid root and creates /tmp/pia_upscript.sh during connect; because the process’s umask is inherited and not reset, the attacker can cause world-writable ...

CVE-2019-12579

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v82 for Linux and macOS could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The PIA Linux/macOS binary openvpnlauncher.64 binary is setuid root. This binary accepts several...

CVE-2019-12579

CVE-2019-12579 affects the London Trust Media Private Internet Access (PIA) VPN Client v82 for Linux/macOS. The vulnerability is in the setuid root binary openvpn_launcher.64, which accepts system-configuration parameters that are passed to OS commands via a here document without proper sanitizat...

CVE-2019-12575

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v82 for Linux could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The rootrunner.64 binary is setuid root. This binary executes /opt/pia/ruby/64/ruby, which in turn attempts t...

CVE-2019-12575

CVE-2019-12575 affects the London Trust Media Private Internet Access (PIA) VPN Client v82 for Linux. The root_runner.64 binary is setuid root and executes /opt/pia/ruby/64/ruby, which loads libraries under /tmp/ruby-deploy.old/lib. A local unprivileged user can place a malicious library in that ...

Master VM Gets Error "The Trust Relatioship Between This Workstation and The Primary Domain Failed" When Trying to Logon to it Using a Domain Account

When trying to log on to master VM using a domain account right after capturing a vDisk from it, an admin user gets error "The trust relationship between this workstation and the primary domain failed." Resetting or deleting and recreating machine account from PVS console does not resolve issue...

Odoo Trust Management Issues Vulnerabilities

Odoo is an Enterprise Resource Planning ERP and Customer Relationship Management CRM system from Odoo Belgium. The system is developed in Python language, PostgreSQL as the database, and includes modules for sales management, inventory management, financial management and so on. A trust managemen...

Dynacolor FCM-MB40 Trust Management Issues Vulnerability

Dynacolor FCM-MB40 is an IP camera from Dynacolor, Taiwan, China. A trust management issue vulnerability exists in the Dynacolor FCM-MB40 v1.2.0.0. The vulnerability stems from the lack of an effective trust management mechanism in the network system or product. An attacker can exploit default...

PT-2019-4073 · Linux +9 · Linux +9

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Intel CPUs affected versions not specified AMD CPUs affected versions not specified ARM CPUs affected versions not specified Linux affected versions not specified Description: An information disclosure...

D-Link DCS-1100 and D-Link DCS-1130 Trust Management Vulnerability

The D-Link DCS-1100 and the D-Link DCS-1130 are both network cameras from Taiwan, China-based AUO D-Link. A trust management vulnerability exists in the D-Link DCS-1100 and DCS-1130 that stems from the program using a default password for the Telnet daemon. An attacker could exploit the...

Invoxia NVX220 Trust Management Issues Vulnerability

The Invoxia NVX220 is an IP telephone from the French company Invoxia. A trust management issue vulnerability exists in Invoxia NVX220. An attacker could exploit the vulnerability to access a customized CLI...

Nortek Security & Control Linear eMerge E3-Series Trust Management Issue Vulnerability

The Nortek Security & Control Linear eMerge E3-Series is an access control device from Nortek Security & Control USA. A trust management issue vulnerability exists in the Nortek Security & Control Linear eMerge E3-Series. An attacker could exploit the vulnerability to obtain a default password an...

Nortek Security & Control Linear eMerge E3-Series Trust Management Issue Vulnerability (CNVD-2019-34630)

The Nortek Security & Control Linear eMerge E3-Series is an access control device from Nortek Security & Control USA. A vulnerability exists in the Nortek Security & Control Linear eMerge E3-Series due to a trust management issue. An attacker could exploit the vulnerability to bypass authenticati...

Nortek Security & Control Linear eMerge E3-Series Trust Management Issue Vulnerability (CNVD-2019-34629)

The Nortek Security & Control Linear eMerge E3-Series is an access control device from Nortek Security & Control USA. A vulnerability exists in the Nortek Security & Control Linear eMerge E3-Series due to a trust management issue. An attacker could exploit the vulnerability to execute code...

Nortek Security & Control Linear eMerge E3-Series Trust Management Issue Vulnerability (CNVD-2019-34631)

The Nortek Security & Control Linear eMerge E3-Series is an access control device from Nortek Security & Control USA. A vulnerability exists in the Nortek Security & Control Linear eMerge E3-Series due to a trust management issue. An attacker can exploit the vulnerability to obtain a plaintext...

Nortek Security & Control Linear eMerge 50P/5000P Trust Management Issue Vulnerability

Nortek Security & Control Linear eMerge 50P/5000P is a browser-based access control system from Nortek Security & Control, USA. A vulnerability in Nortek Security & Control Linear eMerge 50P/5000P exists due to a trust management issue. The vulnerability stems from the lack of an effective trust...