57 matches found
CVE-2022-23775
TrueStack Direct Connect 1.4.7 is affected by Incorrect Access Control (CVE-2022-23775). The issue is described across multiple sources as affecting version 1.4.7 and has high/critical impact on confidentiality, integrity, and availability. Remediation: upgrade to a fixed version (the vendor refe...
CVE-2022-23775
TrueStack Direct Connect 1.4.7 has Incorrect Access Control...
TrueStack Direct Connect 安全漏洞
TrueStack Direct Connect is a VPN management server from TrueStack USA, Inc. for easily connecting Windows and Mac computers to Windows domain controllers and file servers in the AWS cloud. A security vulnerability exists in TrueStack Direct Connect 1.4.7 that stems from incorrect application...
PT-2022-16261 · Truestack · Truestack Direct Connect
Name of the Vulnerable Software and Affected Versions: TrueStack Direct Connect version 1.4.7 Description: The issue is related to Incorrect Access Control. Recommendations: For version 1.4.7, update to a version that addresses the Incorrect Access Control issue...
SUSE-SU-2018:1925-1 Security update for slurm
This update for slurm to version 17.11.7 fixes the following issues: This security issue was fixed: - CVE-2018-10995: Ensure correct handling of user names and group ids bsc1095508. These non-security issues were fixed: - CRAY - Add slurmsmwd to the contribs/cray dir - PMIX - Added the direct...
Intel Direct Connect Interface Can Be Enabled - us
Lenovo Security Advisory: LEN-13640 Potential Impact: Denial of service or accessing of data on a system by an attacker with physical access Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-5684 Summary Description: In 2015, starting with the Skylake processor family, Inte...
Ali safe says found Android WiFi vulnerability: hackers can remotely attack-vulnerability warning-the black bar safety net
! 1 ! Android WiFi vulnerability Android WiFi vulnerability Recently, Ali security research labs found that Android system is a major vulnerability, mainly affecting Android WiFi function components wpasupplicant。 Through this vulnerability, hackers can open the WiFi of Android phone to launch...
MLDonkey - multi-protocol P2P file sharing application
MLDonkey is a multi-platform and freely distributed eDonkey client, a P2P Peer-to-Peer file-sharing application. It provides users with both a server daemon and graphical user interface GUI. It seems to be the first ever open source application that could access the eDonkey peer-to-peer file...
verlihub <= 0.9.8d-RC2 Remote Command Execution Vulnerability
No description provided by source. == verlihub =0.9.8d-RC2 remote r00t / command execution ======================= | ' / | / / \---'-|---\ | |' / / / '. V ,--' ':./ description:-------------------------------------------------------------------- Verlihub is a Direct Connect protocol server; runs...
Open DC Hub: Arbitrary code execution
Background Open DC Hub is the hub software for the Direct Connect file sharing network. Description A stack-based buffer overflow flaw has been discovered in the way Open DC Hub sanitized content of a user’s MyINFO message. Impact A remote authenticated user may be able to execute arbitrary code ...
Fedora Update for opendchub FEDORA-2010-6415
Check for the Version of opendchub OpenVAS Vulnerability Test Fedora Update for opendchub FEDORA-2010-6415 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
Fedora Update for opendchub FEDORA-2010-6426
Check for the Version of opendchub OpenVAS Vulnerability Test Fedora Update for opendchub FEDORA-2010-6426 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
[SECURITY] Fedora 12 Update: opendchub-0.8.2-2.fc12
Opendchub is the hub software for Direct Connect P2P network...
CVE-2010-1147
Stack-based buffer overflow in Open Direct Connect Hub aka Open DC Hub or OpenDCHub 0.8.1 allows remote authenticated users to execute arbitrary code via a long MyINFO message...
CVE-2010-1147
Stack-based buffer overflow in Open Direct Connect Hub aka Open DC Hub or OpenDCHub 0.8.1 allows remote authenticated users to execute arbitrary code via a long MyINFO message...
Fedora Update for linuxdcpp FEDORA-2008-6038
Check for the Version of linuxdcpp OpenVAS Vulnerability Test Fedora Update for linuxdcpp FEDORA-2008-6038 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
Verlihub创建不安全文件及远程代码执行漏洞
BUGTRAQ ID: 32889,32420 CVECAN ID: CVE-2008-5705,CVE-2008-5706 Verlihub是运行在Linux操作系统上的Direct Connect协议服务器。 Verlihub没有正确地过滤通过trigger机制传送给shell的用户输入，此外Verlihub守护程序还可能配置为以root用户权限运行，这就允许连接到hub的用户通过提交恶意请求执行任意命令，或允许本地攻击者通过对/tmp/trigger.tmp临时文件的符号链接攻击覆盖任意文件。以下是src/ctrigger.cpp文件的cTrigger::DoIt函数中的有漏洞代码...
verlihub-exec.txt
== verlihub Verlihub does not sanitize user input passed to the shell via its "trigger" mechanism. Furthermore, the Verlihub daemon can optionally be configured to run as root. This allows for the arbitrary execution of commands by users connected to the hub and, in the case of the daemon running...