kernel: bad kfree in auditfilter.c may lead to escalation of privilege

A flaw was found in the Linux kernel. A logic error in auditdatatoentry can lead to a local escalation of privilege without user interaction needed. A local attacker with special user privilege could crash the system leading to information leak. The highest threat from this vulnerability is to da...

Weak Password Vulnerability in NetGuard Network Audit System V3.0 of Beijing NetGuard Nebula Information Technology Co.

Netnifty Network Audit System Operation and Maintenance Security Control Type is one of Netnifty's comprehensive internal control series products. It is a compliance control system that controls and audits user operation and maintenance operations in the business environment. Netnifty Network Aud...

SecFox Security Audit System V5 suffers from Arbitrary File Download Vulnerability

SecFox Security Audit System V5 is a security audit system. SecFox Security Audit System V5 suffers from an arbitrary file download vulnerability. An attacker can exploit the vulnerability to download arbitrary files...

Microsoft Windows: Audit System Integrity

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsystemintegrity.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit System Integrity Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

NetSense SecFox Security Audit System suffers from s2-045 Remote Command Execution Vulnerability

SecFox Security Audit System is a security audit system of NetShen Information Technology Co. NetShen SecFox Security Audit System suffers from a s2-045 remote command execution vulnerability. It allows an attacker to perform command execution and gain server privileges by adding a payload when...

Weak Password Vulnerability in NetSense Information Security Audit System

NetShen Security Audit System is a hardened computer that can defend against attacks with strong security protection. A weak password vulnerability exists in the NetShen Information Security Audit System, which allows an attacker to exploit the vulnerability to log in to the system's backend and...

Weak password vulnerability in NetSense Firewall Security Audit System (secfox)

NetShen Firewall is a well-known firewall in China, products related to the net gate, sslVPN, security audit, ssh and so on. A weak password vulnerability exists in the security audit system secfox of NetShen Firewall, which can be exploited by an attacker to log in as an administrator. The...

Weak Password Vulnerability in Netnifty Security Management System - Log Audit System by Default

Netnifty Security Management System - Log Audit System hereinafter referred to as Leadsec-RS is a security product for information system log auditing. A weak password vulnerability exists in the Leadsec-RS. The system administrator account password is: sysadmin/leadsec.sysadmin allows an attacke...

Command Execution Vulnerability in IDC Information Security Audit Management System of Renzi Bank

Ltd. is one of the earliest enterprises in China to be involved in the field of network information security, and is committed to providing overall solutions for network auditing and supervision for state management organizations, operators, enterprises and institutions. A command execution...

DEBIAN-CVE-2014-3917

kernel/auditsc.c in the Linux kernel through 3.14.5, when CONFIGAUDITSYSCALL is enabled with certain syscall rules, allows local users to obtain potentially sensitive single-bit values from kernel memory or cause a denial of service OOPS via a large value of a syscall number...

kernel: x86-64: syscall-audit: 32/64 syscall hole

The auditsyscallentry function in the Linux kernel 2.6.28.7 and earlier on the x8664 platform does not properly handle 1 a 32-bit process making a 64-bit syscall or 2 a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit configurations via crafted...

RHEL 4 : gdm (RHSA-2007:0286)

An updated gdm package that fixes a security issue and a bug is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Gdm the GNOME Display Manager is a highly configurable reimplementation of xdm, the X Display Manager. Gdm allows you to l...

Low: Red Hat Security Advisory: gdm security and bug fix update

An updated gdm package that fixes a security issue and a bug is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Gdm the GNOME Display Manager is a highly configurable reimplementation of xdm, the X Display Manager. Gdm allows you to l...

CentOS 4 : kernel (CESA-2005:808)

Updated kernel packages that fix several security issues and a page attribute mapping bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the...

kernel security update

CentOS Errata and Security Advisory CESA-2005:808 Updated kernel packages that fix several security issues and a page attribute mapping bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The...

security flaw

The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIGAUDITSYSCALL is enabled, uses an incorrect function to free namescache memory, which prevents the memory from being tracked by AUDITSYSCALL code and leads to a memory leak that allows attackers to cause a denia...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix several security issues and a page attribute mapping bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the...