CVE-2015-6034

Affected software: Epson Network Utility 4.10. The vulnerability arises from insecure permissions on the eEBSVC.exe service binary (Everyone: Full Control) created during installation. Root cause: misconfigured default permissions enable a local attacker to replace eEBSVC.exe with a Trojan horse ...

EPSON Network Utility installs EpsonBidirectionalService with insecure permissions

Overview EPSON Network Utility contains a local privilege escalation vulnerability, which allows a local attacker to execute arbitrary code with SYSTEM privileges. Description CWE-276: Incorrect Default Permissions - CVE-2015-6034EPSON Network Utility v4.10 is an application that checks the print...

Breaching a bank in 20 minutes - Horror Stories 2015

I arrived onsite to suite 102 the banks corporate headquarters around 9:40 a.m. I was impersonating a local utility worker - with all the garments like a hardhat, clipboard, obnoxious yellow vest, and some old Timberland work boots. I played the part well...

Oracle Solaris Critical Patch Update : oct2015_SRU11_2_14_5_0

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Utility/Zones. The supported version that is affected is 11.2. Very difficult to exploit vulnerability requiring log...

CVE-2015-4834

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Utility/Zones...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Utility/Zones...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Utility/Security...

CVE-2015-4834

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Utility/Zones...

CVE-2015-4834

CVE-2015-4834 affects Oracle Solaris 11.2, with an unspecified vulnerability in the Solaris Utility/Zones component that could allow local attackers to impact confidentiality, integrity, and availability. The available sources confirm a patch in the Oracle CPU October 2015 update (oct2015 SRU11_2...

BIND: Denial of service

Background BIND Berkeley Internet Name Domain is a Name Server. Description A vulnerability has been discovered in BIND’s named utility leading to a Denial of Service condition. Impact A remote attacker may be able to cause Denial of Service condition via specially constructed zone data. Workarou...

Konica Minolta FTP Utility Buffer Overflow Vulnerability

KONICA MINOLTA FTP Utility is a software used by KONICA MINOLTA copiers. Konica Minolta FTP Utility 1.0 is implemented with a buffer overflow vulnerability due to a failure to check the input size when parsing CWD commands. A remote attacker can exploit this vulnerability to execute arbitrary cod...

Konica Minolta FTP Utility Directory Traversal Vulnerability

Konica Minolta FTP Utility is a free program from Konica Minolta Japan for receiving data sent from compatible devices. A directory traversal vulnerability exists in Konica Minolta FTP Utility version 1.0. A remote attacker could leverage the '... /' string in the RETR command to read arbitrary...

CVE-2015-7768

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD command...

CVE-2015-7767

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a long USER command...

Buffer overflow

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD command...

Buffer overflow

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a long USER command...

CVE-2015-7768

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD command...

CVE-2015-7767

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a long USER command...

CVE-2015-7767

Konica Minolta FTP Utility 1.0 is affected by a buffer overflow triggered by a long USER command, enabling remote attackers to execute arbitrary code or cause a denial of service (application crash). The vulnerability is documented as CVE-2015-7767 across multiple sources (NVD, RH, CNVD, CVE list...

CVE-2015-7768

Konica Minolta FTP Utility 1.0 is affected by a buffer overflow via long CWD commands, enabling remote code execution. Root cause: failure to validate input length when parsing CWD, leading to an SEH overflow (as described by multiple sources). The vulnerability affects Konica Minolta FTP Utility...