Buffer overflow

An issue was discovered in EFS Easy Chat Server 3.1. There is a buffer overflow via a long body2.ghp message parameter...

CVE-2019-20502

The CVE-2019-20502 entry applies to EFS Easy Chat Server 3.1, describing a buffer overflow triggered by a long body2.ghp message parameter. Connected sources (Red Hat CVE, NVD/NVD variants) confirm the affected product and the underlying issue, but do not provide exploit details or remediation st...

CVE-2019-20502

An issue was discovered in EFS Easy Chat Server 3.1. There is a buffer overflow via a long body2.ghp message parameter...

SYS.2.2.2.A15

Ziel des Bausteins SYS.2.2.2 ist der Schutz von Informationen, die durch und auf Windows 8.1-Clients verarbeiten werden. Die Kern-Anforderung Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

SYS.2.2.3.A21

Ziel des Bausteins SYS.2.2.3 ist der Schutz von Informationen, die durch und auf Windows 10-Clients verarbeiten werden. Die Standard-Anforderung SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

CVE-2018-18912

CVE-2018-18912 affects Easy File Sharing (EFS) Web Server 7.2. The vulnerability is a stack-based buffer overflow triggered by a crafted POST request to forum.ghp when creating a new topic in the forums, allowing remote code execution. Public exploit details are present in third‑party description...

Microsoft Windows: Enable Encrypted File System

The Encrypting File System EFS is a feature available in Windows which provides encryption in filesystem level. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2018-2455

SAP Enterprise Financial Services (versions 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) is affected in the EAFS_BCA_BUSOPR_SEPA function by a lack of authorization checks for an authenticated user, enabling escalation of privileges. This vulnerability is documented as CVE-2018-2455 across multiple sources...

CVE-2018-11259

Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be erased. Apps processor then has non-secure world full read/write access to the partition until the modem boots and...

CVE-2018-11259

Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be erased. Apps processor then has non-secure world full read/write access to the partition until the modem boots and...

CVE-2018-11259

This CVE (CVE-2018-11259) concerns Qualcomm Snapdragon devices (Automobile, Mobile, Wear) with NAND-based EFS storage. Root cause: improper access control allows fastboot access to erase the EFS partition, after which the apps processor has non-secure world read/write access to that partition unt...

CVE-2018-11259

Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be erased. Apps processor then has non-secure world full read/write access to the partition until the modem boots and...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

EFS Easy File Sharing Web Server Buffer Overflow Vulnerability

EFS Easy File Sharing EFS Web Server is a set of file sharing software from the Dutch company EFS Software that combines the functions of a forum website, file uploading, downloading, sharing and image sharing. A stack buffer overflow vulnerability exists in EFS EFS Web Server version 7.2. A remo...

CVE-2018-9059

Stack-based buffer overflow in Easy File Sharing EFS Web Server 7.2 allows remote attackers to execute arbitrary code via a malicious login request to forum.ghp. NOTE: this may overlap CVE-2014-3791...

CVE-2018-9059

CVE-2018-9059 affects Easy File Sharing Web Server 7.2 and is a stack-based buffer overflow in the login handling (forum.ghp path), enabling remote code execution. Public indicators of exploitation include CIRCL sightings referencing a Metasploit module for Windows EFS (efs_fmws_userid_bof.rb) an...

Amazon Linux AMI : stunnel / amazon-efs-utils (ALAS-2018-996)

This update adds the checkHost option to stunnel, which verifies the host of the peer certificate subject. Certificates are accepted if no checkHost option was specified, or the host name of the peer certificate matches any of the hosts specified with checkHost. This update adds the OCSPaia optio...

Amazon Linux 2 : stunnel / amazon-efs-utils (ALAS-2018-996)

This update adds the checkHost option to stunnel, which verifies the host of the peer certificate subject. Certificates are accepted if no checkHost option was specified, or the host name of the peer certificate matches any of the hosts specified with checkHost. This update adds the OCSPaia optio...

Medium: stunnel, amazon-efs-utils

Issue Overview: This update adds the checkHost option to stunnel, which verifies the host of the peer certificate subject. Certificates are accepted if no checkHost option was specified, or the host name of the peer certificate matches any of the hosts specified with checkHost. This update adds t...

Medium: stunnel, amazon-efs-utils

Issue Overview: This update adds the checkHost option to stunnel, which verifies the host of the peer certificate subject. Certificates are accepted if no checkHost option was specified, or the host name of the peer certificate matches any of the hosts specified with checkHost. This update adds t...