[USN-2413-1] AppArmor vulnerability

========================================================================== Ubuntu Security Notice USN-2413-1 November 20, 2014 apparmor vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu 14.04 LTS : AppArmor vulnerability (USN-2413-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2413-1 advisory. An AppArmor policy miscompilation flaw was discovered in apparmorparser. Under certain circumstances, a malicious application could use this flaw to perform...

USN-2413-1 apparmor vulnerability

An AppArmor policy miscompilation flaw was discovered in apparmorparser. Under certain circumstances, a malicious application could use this flaw to perform operations that are not allowed by AppArmor policy. The flaw may also prevent applications from accessing resources that are allowed by...

USN-2413-1: AppArmor vulnerability

An AppArmor policy miscompilation flaw was discovered in apparmorparser. Under certain circumstances, a malicious application could use this flaw to perform operations that are not allowed by AppArmor policy. The flaw may also prevent applications from accessing resources that are allowed by...

Warning — Zero-Day Vulnerabilities Identified in Tails Operating System

The critical zero-day security flaws has been discovered in the privacy and security dedicated Linux-based operating system “Tails” that could be used by an attacker to unmask your identity. Tails, which is been used and recommended by the global surveillance whistleblower Edward Snowden to remai...

PHD Help Desk 2.12 - SQL Injection Vulnerability

No description provided by source. Exploit Title: PHD Help Desk 2.12 SQLi Date: 05/24/2013 Exploit Author: drone @dronesec More information: http://forelsec.blogspot.com/2013/06/phd-help-desk-212-sqli-and-xss.html Vendor Homepage: http://www.p-hd.com.ar/ Software Link:...

openSUSE Security Update : libvirt (openSUSE-2012-78)

Fix authorization workflow with PolicyKit. polkit.patch bnc735403 - Fix qemu default migration speed. It should not be 33554432Mb! 61f2b6ba-no-unlimited-mig2file-speed.patch d8916dc8-def-qemu-migspeed.patch - CVE-2011-4600: unintended firewall port exposure after restarting libvirtd when defining...

openSUSE Security Update : samba (openSUSE-SU-2014:0404-1)

"Samba was updated to 4.1.6, fixing bugs and security issues : - Password lockout not enforced for SAMR password changes, this allowed brute forcing of passwords; CVE-2013-4496; bnc849224. - smbcacls can remove a file or directory ACL by mistake; CVE-2013-6442; bnc855866. Also the following bugs...

openSUSE Security Update : libvirt (openSUSE-SU-2014:0268-1)

This update fixes the following security and non security issues with libvirt : - bnc857492: Fix libvirtd crash when hot-plugging disks for qemu domains CVE-2013-6458 - bnc858817: Don't crash if a connection closes early CVE-2014-1447 - bnc858824: avoid crashing libvirtd when calling virsh...

openSUSE Security Update : apparmor-parser (openSUSE-SU-2011:0268-1)

Fixed apparmor-parser: The parser could generate a policy using an unconfined fallback execute transition. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update apparmor-parser-3810. The text...

CVE-2013-4459

LightDM 1.7.5 through 1.8.3 and 1.9.x before 1.9.2 does not apply the AppArmor profile to the Guest account, which allows local users to bypass intended restrictions by leveraging the Guest account...

CVE-2013-4459

LightDM vulnerability CVE-2013-4459 affects LightDM 1.7.5–1.8.3 and 1.9.x prior to 1.9.2, where the AppArmor profile was not applied to the Guest account, allowing local users to bypass intended restrictions. Impact is local information exposure and a potential bypass of guest-restricted controls...

CVE-2013-4459

LightDM 1.7.5 through 1.8.3 and 1.9.x before 1.9.2 does not apply the AppArmor profile to the Guest account, which allows local users to bypass intended restrictions by leveraging the Guest account...

CVE-2013-4459

LightDM 1.7.5 through 1.8.3 and 1.9.x before 1.9.2 does not apply the AppArmor profile to the Guest account, which allows local users to bypass intended restrictions by leveraging the Guest account...

Light Display Manager protection bypass

AppArmor policy is not applied correctly...

[USN-2012-1] Light Display Manager vulnerability

========================================================================== Ubuntu Security Notice USN-2012-1 November 06, 2013 lightdm vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu Update for lightdm USN-2012-1

Check for the Version of lightdm OpenVAS Vulnerability Test $Id: gbubuntuUSN20121.nasl 8448 2018-01-17 16:18:06Z teissa $ Ubuntu Update for lightdm USN-2012-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free softwar...

Ubuntu: Security Advisory (USN-2012-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 13.10 : lightdm vulnerability (USN-2012-1)

Christian Prim discovered that Light Display Manager incorrectly applied the AppArmor security profile when the Guest account is used. A local attacker could use this issue to possibly gain access to sensitive information. Note that Tenable Network Security has extracted the preceding description...

USN-2012-1: Light Display Manager vulnerability

Christian Prim discovered that Light Display Manager incorrectly applied the AppArmor security profile when the Guest account is used. A local attacker could use this issue to possibly gain access to sensitive information...