PT-2016-1518

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 7.2p2 Description The issue allows remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the do authenticated1 and session x11 req functions. This is due ...

UBUNTU-CVE-2016-1908

The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues ...

Mac OS X : OS X Server < 5.0.15 Multiple Vulnerabilities

The remote Mac OS X host has a version of OS X Server installed that is prior to 5.0.15. It is, therefore, affected by the following vulnerabilities : - A denial of service vulnerability exists due to an assertion flaw that is triggered when parsing malformed DNSSEC keys. An unauthenticated, remo...

Updated lxdm packages fix security vulnerability

When using lxdm, the X server was started without -auth, exposing it to any connections form by any local user. This update resolves the issue...

MGASA-2015-0411 Updated lxdm packages fix security vulnerability

When using lxdm, the X server was started without -auth, exposing it to any connections form by any local user. This update resolves the issue...

APPLE-SA-2015-10-21-8 OS X Server 5.0.15

APPLE-SA-2015-10-21-8 OS X Server 5.0.15 OS X Server 5.0.15 is now available and addresses the following: BIND Available for: OS X Yosemite 10.10.5, OS X El Capitan 10.11.1 or later Impact: Multiple vulnerabilities in BIND Description: Multiple vulnerabilities existed in BIND versions prior to...

PT-2015-7933

Name of the Vulnerable Software and Affected Versions lxdm affected versions not specified Description The issue arises when using lxdm, as the X server is started without the -auth option, making it accessible to any local user. Recommendations At the moment, there is no information about a newe...

CVE-2015-7031

The Web Service component in Apple OS X Server before 5.0.15 omits an unspecified HTTP header configuration, which allows remote attackers to bypass intended access restrictions via unknown vectors...

Design/Logic Flaw

The Web Service component in Apple OS X Server before 5.0.15 omits an unspecified HTTP header configuration, which allows remote attackers to bypass intended access restrictions via unknown vectors...

CVE-2015-7031

The Web Service component in Apple OS X Server before 5.0.15 omits an unspecified HTTP header configuration, which allows remote attackers to bypass intended access restrictions via unknown vectors...

CVE-2015-7031

Apple OS X Server Web Service component (HTTP header) Security Bypass (CVE-2015-7031). Affects OS X Server prior to 5.0.15. Root cause: missing HTTP header reference in configuration files, allowing remote bypass of access restrictions via unspecified vectors. According to Apple, upgrade to OS X ...

CVE-2015-7031: Undefined Security Weakness

The Web Service component in Apple OS X Server before 5.0.15 omits an unspecified HTTP header configuration, which allows remote attackers to bypass intended access restrictions via unknown vectors...

PT-2015-2447

Name of the Vulnerable Software and Affected Versions OS X Server versions prior to 5.0.15 Description The issue is related to the Web Service component, which has inadequate access restrictions. This allows remote attackers to bypass intended access restrictions. The vulnerability is associated...

Gentoo Security Advisory GLSA 201405-07

Gentoo Linux Local Security Checks GLSA 201405-07 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Gentoo Security Advisory GLSA 201504-06

Gentoo Linux Local Security Checks GLSA 201504-06 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Mac OS X : OS X Server < 5.0.3 Multiple Vulnerabilities

The remote Mac OS X host has a version of OS X Server installed that is prior to 5.0.3. It is, therefore, affected by the following vulnerabilities : - A flaw exists in the modheaders module that allows HTTP trailers to replace HTTP headers late during request processing. A remote attacker can...

Code injection

Multiple unspecified vulnerabilities in Twisted in Wiki Server in Apple OS X Server before 5.0.3 allow attackers to have an unknown impact via an XML document...

CVE-2015-5911

Multiple unspecified vulnerabilities in Twisted in Wiki Server in Apple OS X Server before 5.0.3 allow attackers to have an unknown impact via an XML document...

CVE-2015-5911

CVE-2015-5911 affects Apple OS X Server Wiki Server (Twisted) before 5.0.3, with multiple unspecified vulnerabilities that can be triggered via an XML document. The root cause, specific impact, and exploit details are not provided in the supplied documents. No explicit remediation is stated beyon...

PT-2015-3060

Name of the Vulnerable Software and Affected Versions OS X Server versions prior to 5.0.3 Description The issue is related to multiple unspecified vulnerabilities in the Twisted module of the Wiki Server in OS X Server. These vulnerabilities are caused by errors in the code. An attacker, acting...