3303 matches found
UBUNTU-CVE-2016-1572
mount.ecryptfsprivate.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a nonstandard filesystem, as demonstrated by /proc/$pid...
Oracle Solaris Critical Patch Update : jan2016_SRU11_3_0_0_0
This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: NDMP Backup Service. The supported version that is affected is 11. Easily exploitable vulnerability requiring logon t...
Firmware Analysis Tool: Binwalk
Binwalk is a fast, easy to use tool for analyzing and extracting firmware images Firmware Analysis Tool Binwalk is: Fast Flexible Extendable Easy to use Binwalk can: Find and extract interesting files / data from binary images Find and extract raw compression streams Identify opcodes for a variet...
The vulnerability of the OpenSUSE operating system, which allows a hacker to trigger a service failure.
The vulnerability in the text-utils/colcrt.c file of the colcrt utility in the util-linux package of the openSUSE operating system arises due to buffer overflow. Exploiting this vulnerability could allow an attacker, operating locally, to trigger a service failure using a specially crafted file...
binutils: invalid read flaw in libbfd
An integer overflow flaw was found in the way the strings utility processed certain files. If a user were tricked into running the strings utility on a specially crafted file, it could cause the strings executable to crash...
Write Messages to Users
This module utilizes the wall1 or write1 utilities, as appropriate, to send messages to users on the target system. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Write Messages to Users',...
[SECURITY] Fedora 21 Update: ntp-4.2.6p5-34.fc21
The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...
[SECURITY] Fedora 23 Update: ntp-4.2.6p5-34.fc23
The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...
Oracle Sun Solaris has an unspecified vulnerability (CNVD-2015-06813)
Oracle Sun Solaris is a set of Unix-like operating systems from Oracle. An unspecified vulnerability exists in Oracle Sun Solaris 11.2. The vulnerability allows local users to compromise confidentiality, integrity and availability via unspecified vectors with related utilities/zones...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Utilities Work and Asset Management component in Oracle Industry Applications 1.9.1.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Add-On Applications...
CVE-2015-4795
Unspecified vulnerability in the Oracle Utilities Work and Asset Management component in Oracle Industry Applications 1.9.1.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Add-On Applications...
CVE-2015-4795
Technical details for CVE-2015-4795 are not publicly available in the provided documents. Monitor for updates from official sources for affected products, impact, and remediation.
[SECURITY] Fedora 22 Update: icu-54.1-4.fc22
Tools and utilities for developing with icu...
The vulnerability of the Firefox browser, which allows a violator to trigger a service failure
The vulnerability of the NetworkUtils.cpp component in the Firefox browser is caused by buffer overflow. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Login-utils Denial of Service Vulnerability
util-linux is a set of software packages for Linux systems and contains a variety of system administration tools, login-utils is one of the login tools. A security vulnerability exists in login-utils that could be exploited by a local attacker to cause a file name conflict and conduct a denial of...
[SECURITY] Fedora 23 Update: icu-54.1-5.fc23
Tools and utilities for developing with icu...
The vulnerability of the Oracle E-Business Suite system for automating business activities allows a perpetrator to breach the confidentiality of protected information.
The vulnerability of the Oracle Applications component in the Oracle E-Business Suite system’s automation activities is related to errors in the code of the AD Utilities sub-component. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality...
PT-2017-6832
Name of the Vulnerable Software and Affected Versions util-linux affected versions not specified Description The issue is related to the mkostemp function in login-utils, which can be exploited by remote attackers to cause file name collision and potentially other attacks when used incorrectly...
[SECURITY] Fedora 23 Update: wireshark-1.12.7-2.fc23
Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package...