5059 matches found
Imgur: Imgur dev environments facing the Internet
A security group configuration error allowed Imgur development environments to face the public internet. Typically these environments were protected behind a special endpoint which would open access to authenticated Imgur employees for a short time window. Since the development environments were...
autofs: priv escalation via interpreter load path for program based automount maps
It was found that program-based automounter maps that used interpreted languages such as Python would use standard environment variables to locate and load modules of those languages. A local attacker could potentially use this flaw to escalate their privileges on the system...
DSA-3355-2 libvdpau - regression update
Bulletin has no description...
CVE-2005-2959
Incomplete blacklist vulnerability in sudo 1.6.8 and earlier allows local users to gain privileges via the 1 SHELLOPTS and 2 PS4 environment variables before executing a bash script on behalf of another user, which are not cleared even though other variables are...
SUSE: Security Advisory for bash (SUSE-SU-2014:1212-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mac OS X rsh Environment Variables Privilege Elevation
Added: 10/15/2015 CVE: CVE-2015-5889 Background The remotecmds component of Apple Mac OS X contains an rsh binary program that allows a user to execute commands on another computer across a computer network. Problem The rsh binary in the remotecmds component of Mac OS X versions prior to 10.11...
Mac OS X rsh Environment Variables Privilege Elevation
Added: 10/15/2015 CVE: CVE-2015-5889 Background The remotecmds component of Apple Mac OS X contains an rsh binary program that allows a user to execute commands on another computer across a computer network. Problem The rsh binary in the remotecmds component of Mac OS X versions prior to 10.11...
Mac OS X rsh Environment Variables Privilege Elevation
Added: 10/15/2015 CVE: CVE-2015-5889 Background The remotecmds component of Apple Mac OS X contains an rsh binary program that allows a user to execute commands on another computer across a computer network. Problem The rsh binary in the remotecmds component of Mac OS X versions prior to 10.11...
Mac OS X rsh Environment Variables Privilege Elevation
Added: 10/15/2015 CVE: CVE-2015-5889 Background The remotecmds component of Apple Mac OS X contains an rsh binary program that allows a user to execute commands on another computer across a computer network. Problem The rsh binary in the remotecmds component of Mac OS X versions prior to 10.11...
SUSE: Security Advisory for bash (SUSE-SU-2014:1213-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-5889
rsh in the remotecmds component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors involving environment variables...
Code injection
rsh in the remotecmds component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors involving environment variables...
CVE-2015-5889
rsh in the remotecmds component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors involving environment variables...
CVE-2015-5889
CVE-2015-5889 affects Apple macOS prior to 10.11, where the rsh component in the remote_cmds area allows local users to elevate privileges to root via environment variable vectors. Public details confirm a local-privilege-escalation path, with exploit-publications and PoC modules targeting the OS...
Apple OS X RSH Code Execution Vulnerability
Apple OS X is an operating system developed by Apple Inc. Apple OS X RSH has a security vulnerability in the use of environment variables, which can be exploited by a local attacker to execute arbitrary code with ROOT privileges...
Gentoo Security Advisory GLSA 201402-18
Gentoo Linux Local Security Checks GLSA 201402-18 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
openSUSE: Security Advisory for bash (openSUSE-SU-2014:1254-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
libvpau multiple security vulnerabilities
Privilege escalation because of incorrect envorionment variables handling...
Ubuntu 14.04 LTS : libvdpau vulnerabilities (USN-2729-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2729-1 advisory. Florian Weimer discovered that libvdpau incorrectly handled certain environment variables. A local attacker could possibly use this issue to gain...
