1418 matches found
Samba 4.x < 4.1.23 / 4.2.x < 4.2.9 / 4.3.x < 4.3.6 / 4.4.x < 4.4.0rc4 Multiple Vulnerabilities
Binary data 9348.prm...
The use of ransomware Locky's vulnerability to the immune system-vulnerability warning-the black bar safety net
In 2 0 0 9 years, we use the immune system to protect the workstation or server against the rapid spread of the worm Conficker invasion. Let's take a look at whether we can take this a defense of the concept used in ransomware Locky. Below we will of the system some minor modifications, to build ...
Cisco IOS Software Virtual PPP Interfaces Security Bypass Vulnerability (cisco-sa-20151112-ios1)
A vulnerability in Cisco devices that are running Cisco IOS Software and are configured to use access control lists ACLs could allow a user who is connected to an authenticated PPP session to bypass ACLs that are configured on virtual PPP interfaces, if the ACL on the physical interface permits t...
Cisco IOS Software Tunnel Interfaces Security Bypass Vulnerability (cisco-sa-20151112-ios2)
A vulnerability in Cisco devices running IOS Software configured with access control lists ACLs could allow an unauthenticated, remote user connected to a tunnel interface to bypass configured ACLs on tunnel interfaces if the ACL on the physical interface permits the traffic to pass...
openSUSE Security Update : samba (openSUSE-2016-462) (Badlock)
"samba was updated to version 4.2.4 to fix 14 security issues. These security issues were fixed : - CVE-2015-5370: DCERPC server and client were vulnerable to DOS and MITM attacks bsc936862. - CVE-2016-2110: A man-in-the-middle could have downgraded NTLMSSP authentication bsc973031. -...
Security update for samba (important)
samba was updated to version 4.2.4 to fix 14 security issues. These security issues were fixed: - CVE-2015-5370: DCERPC server and client were vulnerable to DOS and MITM attacks bsc936862. - CVE-2016-2110: A man-in-the-middle could have downgraded NTLMSSP authentication bsc973031. - CVE-2016-2111...
SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2016:1022-1) (Badlock)
"Samba was updated to the 4.2.x codestream, bringing some new features and security fixes bsc973832, FATE320709. These security issues were fixed : - CVE-2015-5370: DCERPC server and client were vulnerable to DOS and MITM attacks bsc936862. - CVE-2016-2110: A man-in-the-middle could have downgrad...
openSUSE Security Update : samba (openSUSE-2016-453) (Badlock)
samba was updated to fix seven security issues. These security issues were fixed : - CVE-2015-5370: DCERPC server and client were vulnerable to DOS and MITM attacks bsc936862. - CVE-2016-2110: A man-in-the-middle could have downgraded NTLMSSP authentication bsc973031. - CVE-2016-2111: Domain...
Security update for samba (important)
samba was updated to fix seven security issues. These security issues were fixed: - CVE-2015-5370: DCERPC server and client were vulnerable to DOS and MITM attacks bsc936862. - CVE-2016-2110: A man-in-the-middle could have downgraded NTLMSSP authentication bsc973031. - CVE-2016-2111: Domain...
CVE-2016-2393
Lenovo Fingerprint Manager before 8.01.57 and Touch Fingerprint before 1.00.08 use weak ACLs for unspecified 1 services and 2 files, which allows local users to gain privileges by invalidating local checks...
CVE-2016-2393
Lenovo Fingerprint Manager before 8.01.57 and Touch Fingerprint before 1.00.08 use weak ACLs for unspecified 1 services and 2 files, which allows local users to gain privileges by invalidating local checks...
CVE-2016-2393
Lenovo Fingerprint Manager before 8.01.57 and Lenovo Touch Fingerprint before 1.00.08 expose a privilege-escalation flaw due to weak ACLs on certain services and files, enabling local attackers to bypass checks. Affected software: Fingerprint Manager (<8.01.57) and Touch Fingerprint (
PT-2016-5153
Name of the Vulnerable Software and Affected Versions Lenovo Fingerprint Manager versions prior to 8.01.57 Lenovo Touch Fingerprint versions prior to 1.00.08 Description The issue allows local users to gain privileges by invalidating local checks due to weak ACLs used for unspecified services and...
CVE-2016-2393: Undefined Security Weakness
Lenovo Fingerprint Manager before 8.01.57 and Touch Fingerprint before 1.00.08 use weak ACLs for unspecified 1 services and 2 files, which allows local users to gain privileges by invalidating local checks...
EMC Documentum D2 < 4.6 Insufficient ACL Remote Object Manipulation (ESA-2016-034)
The remote host is running a version EMC Documentum D2 that is prior to 4.6. It is, therefore, affected by a security bypass vulnerability due to a failure to set secure access control lists ACLs for D2 configuration objects. An authenticated, remote attacker can exploit this to modify or delete ...
CVE-2016-0888
EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote authenticated users to modify objects via unspecified vectors...
Design/Logic Flaw
EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote authenticated users to modify objects via unspecified vectors...
CVE-2016-0888
Affected product: EMC Documentum D2 (versions before 4.6). Vulnerability: Insufficient ACLs for D2 configuration objects allow a remote authenticated user to modify (and in at least one source, delete) D2 objects via unspecified vectors. The root cause is failure to enforce secure access control ...
CVE-2016-0888
EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote authenticated users to modify objects via unspecified vectors...
PT-2016-4445
Name of the Vulnerable Software and Affected Versions EMC Documentum D2 versions prior to 4.6 Description The issue allows remote authenticated users to modify objects due to a lack of intended Access Control Lists ACLs for configuration objects. ACLs are used to define access rights for users, a...