sos security update

CentOS Errata and Security Advisory CESA-2016:0152 An updated sos package that fixes one security issue and one bug is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base...

Intel Network Adapter Diagnostic Driver Remote Code Execution Vulnerability

Intel Network Adapter Diagnostic Driver is a set of network adapter diagnostic tools from Intel USA. A remote code execution vulnerability exists in Intel Network Adapter Diagnostic Driver. An attacker could use this vulnerability to execute arbitrary code in the context of the kernel space, whic...

Design/Logic Flaw

The diagnostic-ping implementation on ZyXEL PMG5318-B20A devices with firmware before 1.00AANC.2C0 allows remote attackers to execute arbitrary commands via the PingIPAddr parameter...

[SECURITY] Fedora 23 Update: sos-3.2-2.fc23

Sos is a set of tools that gathers information about system hardware and configuration. The information can then be used for diagnostic purposes and debugging. Sos is commonly used to help support technicians and developers...

Linksys X2000 Command Execution Vulnerability

The Linksys X2000 suffers from a remote, unauthenticated command execution vulnerability that scores root privileges. Hello, I have found on my router, a Linksys X2000, that there is a poor validation of the IP target in the ping diagnostics web page http://$routerip/Diagnostics.asp. This can be...

Hackers Find A Way To Disable Car Airbags System

Car Hacking is a hot topic today. Today, many automobiles companies are offering vehicles that run on the mostly drive-by-wire system, which means that a majority of car's functions are electronically controlled, from instrument cluster to steering, brakes, and accelerator. No doubt these...

ZyXEL PMG5318-B20A diagnostic ping function input validation vulnerability

ZyXEL PMG5318-B20A is a wireless switch product from Hopkins ZyXEL Technology. A security vulnerability exists in the 'PingIPAddr' parameter in the diagnostic ping function of the ZyXEL PMG5318-B20A using firmware version V100AANC0b5. A remote attacker can exploit the vulnerability to execute...

CVE-2015-5718

Stack-based buffer overflow in the handledebugnetwork function in the manager in Websense Content Gateway before 8.0.0 HF02 allows remote administrators to cause a denial of service crash via a crafted diagnostic command line request to submitnetdebug.cgi...

D-Link DSP-W w110 v1.05b01 - Multiple Vulnerabilities

D-Link DSP-W w110 v1.05b01 - Multiple Vulnerabilities Exploit Title: D-Link DSP-W Arbitrary Arbitrary file upload Date: 30/06/2015 Exploit Author: DNO Vendor Homepage: link Version: w110 v1.05b01 Tested on: linux CVE : N/A ======================================== the only 'filtering' on this...

The vulnerability of the Cisco VX Client allows a perpetrator to gain privileges necessary to execute system commands.

The vulnerability of the diagnostic subsystem in the web-based administration interface of Cisco VX Client exists due to the lack of measures taken to neutralize the special elements used in the operating system command set. Exploiting this vulnerability can allow an attacker, operating locally, ...

IBM Domino Multiple Vulnerabilities (May 2015)

IBM Domino is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:lotusdomino"; ifdescription...

CVE-2015-0179

CVE-2015-0179 affects IBM Domino’s Notes System Diagnostic (NSD) tool. NSD (nsd.exe) in IBM Domino 8.5.x prior to 8.5.3 FP6 IF6 and 9.x prior to 9.0.1 FP3 IF1 allows a local attacker to escalate privileges to SYSTEM via unspecified vectors. Exploitation details are present in linked advisories an...

Websense Triton and V-Series CLU Arbitrary Command Execution Vulnerability

Websense TRITON is the Unified Content Architecture for data security. An arbitrary command execution vulnerability exists in the Network Diagnostic Tool CommandLineServlet in the CLU in Websense TRITON AP-WEB 7.8.3 and V-Series appliances, which could allow a remotely authenticated user to execu...

How to Simulate Veeam Backup & Replication Disk I/O

Purpose This article provides examples of using common workload simulators diskspd and fio to simulate Veeam Backup & Replication disk I/O. Do Not Send Test Output Files to Veeam Support The write test output files testfile.dat do not contain diagnostic data. As such, please do not attach them to...

Unspecified Remote Command Injection Vulnerability in Network Vision IntraVue

Network Vision IntraVue is a visualization software package from Network Vision, Inc. that provides diagnostic analysis for Ethernet devices. Network Vision IntraVue suffers from an unspecified remote command injection vulnerability. A remote attacker could exploit this vulnerability to execute...

ClearSCADA Remote Authentication Bypass

!/usr/bin/python cs-auby.py ClearSCADA Remote Authentication Bypass Exploit Jeremy Brown jbrown3264/gmail Oct 2010 released Jan 2015 There is an authentication bypass vulnerability in ClearSCADA that can be exploited by triggering an exception in dbserver.exe and taking advantage of the way the...

ClearSCADA - Remote Authentication Bypass

!/usr/bin/python cs-auby.py ClearSCADA Remote Authentication Bypass Exploit Jeremy Brown jbrown3264/gmail Oct 2010 released Jan 2015 There is an authentication bypass vulnerability in ClearSCADA that can be exploited by triggering an exception in dbserver.exe and taking advantage of the way the...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in D-Link DIR-600 router rev. Bx with firmware before 2.17b02 allow remote attackers to hijack the authentication of administrators for requests that 1 create an administrator account or 2 enable remote management via a crafted configuratio...

Google Blacklists Sites Peddling SoakSoak Malware

UPDATE Google blacklisted more than 10,000 different websites over the weekend that it spotted doling out SoakSoak malware, but experts claim the number of impacted sites may ultimately be ten times that figure. Up to 100,000 sites hosted on WordPress may be vulnerable to a campaign known as...

Low: Red Hat Bug Fix Advisory: sos bug fix update

The updated sos package that fixes several bugs is now available for Red Hat Enterprise Linux 5. The sos package contains a set of utilities that gather information from system hardware, logs, and configuration files. The information can then be used for diagnostic purposes and debugging. This...