EUVD-2014-4786

Malware in sbrugna...

CVE-2014-4867

Cryoserver Security Appliance 7.3.x uses weak permissions for /etc/init.d/cryoserver, which allows local users to gain privileges by leveraging access to the support account and running the /bin/cryo-mgmt program...

Code injection

Cryoserver Security Appliance 7.3.x uses weak permissions for /etc/init.d/cryoserver, which allows local users to gain privileges by leveraging access to the support account and running the /bin/cryo-mgmt program...

CVE-2014-4867

Cryoserver Security Appliance 7.3.x is affected by a privilege-escalation issue due to weak permissions on the /etc/init.d/cryoserver script. The default support account can modify this script and leverage /bin/cryo-mgmt to gain elevated privileges, potentially yielding root on the device. Techni...

CVE-2014-4867

Cryoserver Security Appliance 7.3.x uses weak permissions for /etc/init.d/cryoserver, which allows local users to gain privileges by leveraging access to the support account and running the /bin/cryo-mgmt program...

CVE-2014-4867: Undefined Security Weakness

Cryoserver Security Appliance 7.3.x uses weak permissions for /etc/init.d/cryoserver, which allows local users to gain privileges by leveraging access to the support account and running the /bin/cryo-mgmt program...

PT-2014-6177

Name of the Vulnerable Software and Affected Versions Cryoserver Security Appliance version 7.3.x Description The issue concerns weak permissions for the /etc/init.d/cryoserver file, allowing local users to escalate privileges. This can be achieved by accessing the support account and executing t...

Cryoserver Security Appliance vulnerable to privilege escalation

Overview Cryoserver Security Appliance 7.3.x vulnerable to privilege escalation Description CWE-264: Permissions, Privileges, and Access Controls Cryoserver Security Appliance 7.3.x does not properly assign permission to the /etc/init.d/cryoserver shell script and allows the default support accou...