2053 matches found
CVE-2013-6798
BlackBerry Link before 1.2.1.31 (Windows) and before 1.1.1 build 39 (Mac) is affected by two vulnerabilities: CVE-2013-3694 lets remote attackers read or create arbitrary files via IPv6 WebDAV without authentication; CVE-2013-6798 allows context-dependent attackers to bypass access restrictions o...
CVE-2013-6798
BlackBerry Link before 1.2.1.31 on Windows and before 1.1.1 build 39 on Mac OS X does not properly determine the user account for execution of Peer Manager in certain situations involving successive logins with different accounts, which allows context-dependent attackers to bypass intended...
CVE-2013-3694
BlackBerry Link is affected by CVE-2013-3694 and related CVE-2013-6798. The vulnerable components are the WebDAV-enabled remote file-access folders in BlackBerry Link prior to Windows 1.2.1.31 and Mac OS X 1.1.1 build 39. The root cause is improper authentication for remote WebDAV access over IPv...
CVE-2013-3694
BlackBerry Link before 1.2.1.31 on Windows and before 1.1.1 build 39 on Mac OS X does not require authentication for remote file-access folders, which allows remote attackers to read or create arbitrary files via IPv6 WebDAV requests, as demonstrated by a CSRF attack involving DNS rebinding...
PT-2013-6115
Name of the Vulnerable Software and Affected Versions BlackBerry Link versions prior to 1.2.1.31 on Windows BlackBerry Link versions prior to 1.1.1 build 39 on Mac OS X Description The issue allows context-dependent attackers to bypass intended restrictions on remote file-access folders via IPv6...
PT-2013-4571
Name of the Vulnerable Software and Affected Versions BlackBerry Link versions prior to 1.2.1.31 on Windows BlackBerry Link versions prior to 1.1.1 build 39 on Mac OS X Description The issue allows remote attackers to read or create arbitrary files via IPv6 WebDAV requests. This can be achieved...
CVE-2013-3694: Cross-Site Request Forgery (CSRF)
BlackBerry Link before 1.2.1.31 on Windows and before 1.1.1 build 39 on Mac OS X does not require authentication for remote file-access folders, which allows remote attackers to read or create arbitrary files via IPv6 WebDAV requests, as demonstrated by a CSRF attack involving DNS rebinding...
CVE-2013-6798: Undefined Security Weakness
BlackBerry Link before 1.2.1.31 on Windows and before 1.1.1 build 39 on Mac OS X does not properly determine the user account for execution of Peer Manager in certain situations involving successive logins with different accounts, which allows context-dependent attackers to bypass intended...
[SECURITY] Fedora 20 Update: davfs2-1.4.7-3.fc20
davfs2 is a Linux file system driver that allows you to mount a WebDAV serv er as a disk drive...
Updated davfs2 packages fix CVE-2013-4362
Updated davfs2 package fixes security vulnerability: Davfs2, a filesystem client for WebDAV, calls the function system insecurely while is setuid root. This might allow a privilege escalation. CVE-2013-4362...
davfs2 1.4.6/1.4.7 - Local Privilege Escalation Exploit
Exploit for linux platform in category local exploits davfs2 1.4.6/1.4.7 local privilege escalation exploit Bug Description: davfs2 is a Linux utility which allows OS users to mount a remote webdav server as a local partition. The bug is well documented at...
davfs2 1.4.61.4.7 - Local Privilege Escalation
davfs2 1.4.61.4.7 - Local Privilege Escalation davfs2 1.4.6/1.4.7 local privilege escalation exploit Bug Description: davfs2 is a Linux utility which allows OS users to mount a remote webdav server as a local partition. The bug is well documented at...
davfs2 1.4.6 / 1.4.7 Privilege Escalation
davfs2 1.4.6/1.4.7 local privilege escalation exploit Bug Description: davfs2 is a Linux utility which allows OS users to mount a remote webdav server as a local partition. The bug is well documented at http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=723034. Basically the program "mount.davfs"...
davfs2 1.4.6/1.4.7 - Local Privilege Escalation
davfs2 1.4.6/1.4.7 local privilege escalation exploit Bug Description: davfs2 is a Linux utility which allows OS users to mount a remote webdav server as a local partition. The bug is well documented at http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=723034. Basically the program "mount.davfs"...
[ MDVSA-2013:244 ] davfs2
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:244 http://www.mandriva.com/en/support/security/ Package : davfs2 Date : September 30, 2013 Affected: Business Server 1.0, Enterprise Server 5.0 Problem Description: A vulnerability has been discovered and...
Mandriva Linux Security Advisory : davfs2 (MDVSA-2013:244)
A vulnerability has been discovered and corrected in davfs2 : Davfs2, a filesystem client for WebDAV, calls the function system insecurely while is setuid root. This might allow a privilege escalation CVE-2013-4362. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300...
UBUNTU-CVE-2013-4362
WEB-DAV Linux File System davfs2 1.4.6 and 1.4.7 allow local users to gain privileges via unknown attack vectors in 1 kernelinterface.c and 2 mountdavfs.c, related to the "system" function...
Debian DSA-2765-1 : davfs2 - privilege escalation
Davfs2, a filesystem client for WebDAV, calls the function system insecurely while is setuid root. This might allow a privilege escalation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...
[SECURITY] [DSA 2765-1] davfs2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2765-1 [email protected] http://www.debian.org/security/ Luciano Bello September 26, 2013 http://www.debian.org/security/faq -...