333 matches found
CVE-2021-45417
AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata such as XFS extended attributes or tmpfs ACLs, because of a heap-based buffer overflow...
Aide 缓冲区错误漏洞
Aide is a tool for monitoring file system changes. It can be used to detect unauthorized monitored files and directories. Aide has a buffer error vulnerability that stems from a heap-based buffer overflow vulnerability in AIDE's base64 function. An attacker could crash the program and possibly...
CVE-2021-45417
AIDE (Advanced Intrusion Detection Environment) is affected by CVE-2021-45417: before version 0.17.4, a heap-based buffer overflow in the base64 output path can be triggered by crafted file metadata (e.g., XFS extended attributes, tmpfs ACLs), allowing local users to escalate to root. The vulnera...
Ubuntu 18.04 LTS / 20.04 LTS : AIDE vulnerability (USN-5243-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5243-1 advisory. David Bouman discovered that AIDE incorrectly handled base64 operations. A local attacker could use this issue to cause AIDE to crash, resulting in a...
CVE-2021-45417
AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata such as XFS extended attributes or tmpfs ACLs, because of a heap-based buffer overflow...
Important Photon OS Security Update - PHSA-2022-0354
Updates of 'expat', 'ruby', 'aide', 'ImageMagick' packages of Photon OS have been released...
aide -- heap-based buffer overflow
David Bouman reports: AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata such as XFS extended attributes or tmpfs ACLs, because of a heap-based buffer overflow. Aide uses a fixed size 16k bytes for the return buffer in encodebase64/decodebase64 functions. Th...
ALBA-2020:4718 aide bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
nurseaidejobs.com Cross Site Scripting vulnerability OBB-1417454
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Authorization Bypass
aide is vulnerable to authorization bypass. The vulnerability exists as a flaw was discovered in the way file checksums were stored in the AIDE database. A packaging flaw in the Red Hat AIDE rpm resulted in the file database not containing any file checksum information. This could prevent AIDE fr...
aide-alcool.be XSS vulnerability
Vulnerable URL: https://aide-alcool.be/chercher?query=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=8=8 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 873658 VIP website status:| No Check...
AIDE- IDE for Android Java C++ - Customized SSL, Runtime privilege escalation vulnerabilities
HackApp vulnerability scanner discovered that application AIDE- IDE for Android Java C++ published at the 'play' market has multiple vulnerabilities...
aide.laposte.net XSS vulnerability
Vulnerable URL: https://aide.laposte.net/?q=%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...
aide.lesechos.fr XSS vulnerability
Vulnerable URL: http://aide.lesechos.fr/faq/index/result/?keyword=%22--%3E%20%3C/script%3E%3Csvg/onload=%27;alert%28/XSSPOSED/%29;%27%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:21 GMT Vulnerability type:| XSS Vulnerability status:|...
Oracle: Security Advisory (ELSA-2007-0539)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Lynis 1.6.4 - Security auditing tool for Unix/Linux systems
Lynis is an open source security auditing tool. Primary goal is to help users with auditing and hardening of Unix and Linux based systems. The software is very flexible and runs on almost every Unix based system including Mac. Even the installation of the software itself is optional! How it works...
Scientific Linux Security Update : aide on SL5.x i386/x86_64
A flaw was discovered in the way file checksums were stored in the AIDE database. A packaging flaw in the Red Hat AIDE rpm resulted in the file database not containing any file checksum information. This could prevent AIDE from detecting certain file modifications. CVE-2007-3849 This update also...
CentOS 5 : aide (CESA-2007:0539)
An updated aide package that fixes various bugs is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Advanced Intrusion Detection Environment AIDE is a file integrity checker and intrusion detection...
CVE-2007-3849
Red Hat Enterprise Linux RHEL 5 ships the rpm for the Advanced Intrusion Detection Environment AIDE before 0.13.1 with a database that lacks checksum information, which allows context-dependent attackers to bypass file integrity checks and modify certain files...
Design/Logic Flaw
Red Hat Enterprise Linux RHEL 5 ships the rpm for the Advanced Intrusion Detection Environment AIDE before 0.13.1 with a database that lacks checksum information, which allows context-dependent attackers to bypass file integrity checks and modify certain files...