1998 matches found
CVE-2013-3713
The CVE-2013-3713 issue affects openSUSE 13.1 KDE with aaa_base prior to 16.26.1. The image creation configuration erroneously adds the root user to the 'users' group when installing from a Live image, enabling local users to read sensitive files such as /etc/shadow and potentially other impacts....
CVE-2013-3713
The image creation configuration in aaabase before 16.26.1 for openSUSE 13.1 KDE adds the root user to the "users" group when installing from a live image, which allows local users to obtain sensitive information and possibly have other unspecified impacts, as demonstrated by reading /etc/shadow...
PT-2014-2704
Name of the Vulnerable Software and Affected Versions aaa base versions prior to 16.26.1 Description The issue in the image creation configuration allows local users to obtain sensitive information and possibly have other unspecified impacts by reading /etc/shadow, as demonstrated in openSUSE 13....
CVE-2013-3713: Exposure of Sensitive Information to an Unauthorized Actor
The image creation configuration in aaabase before 16.26.1 for openSUSE 13.1 KDE adds the root user to the "users" group when installing from a live image, which allows local users to obtain sensitive information and possibly have other unspecified impacts, as demonstrated by reading /etc/shadow...
CVE-2013-5219
Directory traversal vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to read arbitrary files via a .. dot dot in a URI, as demonstrated by a request for /etc/passwd...
Directory traversal
Directory traversal vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to read arbitrary files via a .. dot dot in a URI, as demonstrated by a request for /etc/passwd...
CVE-2013-5219
Directory traversal vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to read arbitrary files via a .. dot dot in a URI, as demonstrated by a request for /etc/passwd...
Amazon Linux AMI : sudo (ALAS-2013-259)
A flaw was found in the way sudo handled time stamp files. An attacker able to run code as a local user and with the ability to control the system clock could possibly gain additional privileges by running commands that the victim user was allowed to run via sudo, without knowing the victim's...
CVE-2013-1090: Undefined Security Weakness
The SUSE horde5 package before 5.0.2-2.4.1 sets incorrect ownership for certain configuration files and directories including /etc/apache2/vhosts.d, which allows local wwwrun users to gain privileges via unspecified vectors...
PT-2013-2866
Name of the Vulnerable Software and Affected Versions SUSE horde5 package versions prior to 5.0.2-2.4.1 Description The issue allows local wwwrun users to gain privileges via unspecified vectors due to incorrect ownership settings for certain configuration files and directories, including the...
Scientific Linux Security Update : glibc on SL6.x i386/x86_64 (20131121)
Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in glibc's memory allocator functions pvalloc, valloc, and memalign. If an application used such a function, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of t...
CVE-2013-4481
Race condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions before restricting the permissions, which allows local users to read the file and obtain sensitive information such as "authentication secrets."...
Scientific Linux Security Update : sudo on SL5.x i386/x86_64 (20130930)
A flaw was found in the way sudo handled time stamp files. An attacker able to run code as a local user and with the ability to control the system clock could possibly gain additional privileges by running commands that the victim user was allowed to run via sudo, without knowing the victim's...
Low: Red Hat Security Advisory: sudo security and bug fix update
An updated sudo package that fixes multiple security issues and several bugs is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
CVE-2013-1650: Undefined Security Weakness
Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 uses weak permissions group "other" readable under opt/open-xchange/etc/, which allows local users to obtain sensitive information via standard filesystem operations...
Linux/ARM - chmod( /etc/passwd 0777) Shellcode (39 bytes)
Linux/ARM - chmod /etc/passwd 0777 Shellcode 39 bytes. Shellcode exploit for ARM platform / Title : Linux/ARM - chmod"/etc/passwd", 0777 - 39 bytes Date : 2013-09-04 Author : gunslinger yuda at cr0security dot com Tested on : ARM1176 rev6 v6l An ARM Hardcoded Shellcode without 0x20, 0x0a, and 0x0...
ZeroShell 2.0RC2 File Disclosure / Command Execution
Exploit Title: ZeroShell = 2.0RC2 Local file disclosure and Remote Command Execution Date: 13/08/2013 Author: Yann CAM @ Synetis - ASafety Vendor or Software Link: www.zeroshell.org - www.zeroshell.org/download/ Version: 2.0RC2 Category: Local File disclosure and Remote Command Execution Google...
Solaris 10 Patch Cluster File Clobber
Solaris 10 patch cluster suffers from a file clobber vulnerability in /tmp. File clobbering vulnerability in Solaris 10 patch cluster 3/27/2013 Larry W. Cashdollar @larry0 Hello, The 147147-26 patch creates a CLEANUP file in /tmp that is vulnerable to symlink attacks: The contents of the file...
Mandriva Linux Security Advisory : ncpfs (MDVSA-2013:048)
Multiple vulnerabilities has been discovered and corrected in ncpfs : ncpfs 2.2.6 and earlier attempts to use 1 ncpmount to append to the /etc/mtab file and 2 ncpumount to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to...