binutils: invalid read flaw in libbfd

An integer overflow flaw was found in the way the strings utility processed certain files. If a user were tricked into running the strings utility on a specially crafted file, it could cause the strings executable to crash...

binutils: directory traversal vulnerability

A directory traversal flaw was found in the strip and objcopy utilities. A specially crafted file could cause strip or objdump to overwrite an arbitrary file writable by the user running either of these utilities...

Port Scan v2.0 iOS - Command Inject Vulnerability

Port Scan version 2.0 suffers from a command injection vulnerability. Document Title: =============== Port Scan v2.0 iOS - Command Inject Vulnerability Product & Service Introduction: =============================== Port Scanning is a essential network utility for every IT professional and this i...

Port Scan 2.0 Command Injection

Document Title: =============== Port Scan v2.0 iOS - Command Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1619 Release Date: ============= 2015-11-02 Vulnerability Laboratory ID VL-ID: ==================================== 1619...

Solaris Information Disclosure

The vulnerability of the Utility/Zones subcomponent of the Solaris operating system is related to errors in the code. Exploiting this vulnerability can allow an attacker, acting locally, to compromise the integrity, accessibility, and confidentiality of information...

EPSON Network Utility eEBSVC.exe Wrong Authorization Vulnerability

EPSON Network Utility is a set of programs from Japan's Epson EPSON to provide printer drivers with the ability to be used on a network. A misauthorization vulnerability exists in EPSON Network Utility 4.10. It allows local users to gain privileges via a Trojan horse file...

CVE-2015-6034

EPSON Network Utility 4.10 uses weak permissions Everyone: Full Control for eEBSVC.exe, which allows local users to gain privileges via a Trojan horse file...

Design/Logic Flaw

EPSON Network Utility 4.10 uses weak permissions Everyone: Full Control for eEBSVC.exe, which allows local users to gain privileges via a Trojan horse file...

CVE-2015-6034

EPSON Network Utility 4.10 uses weak permissions Everyone: Full Control for eEBSVC.exe, which allows local users to gain privileges via a Trojan horse file...

CVE-2015-6034

Affected software: Epson Network Utility 4.10. The vulnerability arises from insecure permissions on the eEBSVC.exe service binary (Everyone: Full Control) created during installation. Root cause: misconfigured default permissions enable a local attacker to replace eEBSVC.exe with a Trojan horse ...

CVE-2015-6034: Undefined Security Weakness

EPSON Network Utility 4.10 uses weak permissions Everyone: Full Control for eEBSVC.exe, which allows local users to gain privileges via a Trojan horse file...

PT-2015-7122

Name of the Vulnerable Software and Affected Versions EPSON Network Utility version 4.10 Description The issue concerns weak permissions set for the eEBSVC.exe file, where everyone has full control. This weakness can be exploited by local users to gain privileges through the use of a Trojan horse...

EPSON Network Utility installs EpsonBidirectionalService with insecure permissions

Overview EPSON Network Utility contains a local privilege escalation vulnerability, which allows a local attacker to execute arbitrary code with SYSTEM privileges. Description CWE-276: Incorrect Default Permissions - CVE-2015-6034EPSON Network Utility v4.10 is an application that checks the print...

Breaching a bank in 20 minutes - Horror Stories 2015

I arrived onsite to suite 102 the banks corporate headquarters around 9:40 a.m. I was impersonating a local utility worker - with all the garments like a hardhat, clipboard, obnoxious yellow vest, and some old Timberland work boots. I played the part well...

Oracle Solaris Critical Patch Update : oct2015_SRU11_2_14_5_0

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Utility/Zones. The supported version that is affected is 11.2. Very difficult to exploit vulnerability requiring log...

CVE-2015-4834

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Utility/Zones...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Utility/Security...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Utility/Zones...

CVE-2015-4834

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Utility/Zones...

CVE-2015-4834

CVE-2015-4834 affects Oracle Solaris 11.2, with an unspecified vulnerability in the Solaris Utility/Zones component that could allow local attackers to impact confidentiality, integrity, and availability. The available sources confirm a patch in the Oracle CPU October 2015 update (oct2015 SRU11_2...