USN-2255-1: OpenStack Neutron vulnerabilities

Darragh O'Reilly discovered that the Ubuntu packaging for OpenStack Neutron did not properly set up its sudo configuration. If a different flaw was found in OpenStack Neutron, this vulnerability could be used to escalate privileges. CVE-2013-6433 Stephen Ma and Christoph Thiel discovered that the...

CVE-2014-0592

Barclamp aka barclamp-network 1.7 for the Crowbar Framework, as used in SUSE Cloud 3, does not enable netfilter on bridges when creating new instances, which allows remote attackers to bypass security group restrictions via unspecified vectors, related to floating IPs...

CVE-2014-0592

CVE-2014-0592 concerns Barclamp (aka barclamp-network) version 1.7 used in SUSE Cloud 3. It reports that the Crowbar Framework component does not enable netfilter on bridges when creating new instances, allowing remote attackers to bypass security group restrictions via unspecified vectors relate...

CVE-2014-0592: Undefined Security Weakness

Barclamp aka barclamp-network 1.7 for the Crowbar Framework, as used in SUSE Cloud 3, does not enable netfilter on bridges when creating new instances, which allows remote attackers to bypass security group restrictions via unspecified vectors, related to floating IPs...

PT-2014-3696

Name of the Vulnerable Software and Affected Versions Barclamp aka barclamp-network version 1.7 Description The issue allows remote attackers to bypass security group restrictions via unspecified vectors, related to floating IPs, because netfilter is not enabled on bridges when creating new...

array index error in dtoa implementation of many products

Array index error in the 1 dtoa implementation in dtoa.c aka pdtoa.c and the 2 gdtoa aka new dtoa implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x...

Critical: Red Hat Security Advisory: php security update

Updated php packages that fix one security issue are now available for Red Hat Enterprise Linux 5.3 and 5.6 Long Life, and Red Hat Enterprise Linux 5.9 Extended Update Support. The Red Hat Security Response Team has rated this update as having Critical security impact. A Common Vulnerability...

Critical: Red Hat Security Advisory: cfme security, bug fix, and enhancement update

Updated cfme packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat CloudForms 3.0. The Red Hat Security Response Team has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, whic...

Schneider Electric Floating License Manager权限提升漏洞

BUGTRAQ ID: 65873 CVECAN ID: CVE-2014-0759 Schneider Electric Floating License Manager是许可证管理器。 Schneider Electric Floating License Manager在实现上存在“未引用搜索路径或元素”漏洞，如果服务的可执行路径包含空格，攻击者可利用此漏洞执行恶意程序。 0 Schneider Electric Floating License Manager 1.0.0 - 1.4.0 厂商补丁： Schneider Electric ------------------...

Google Chrome and Apple Safari Floating Styles Use-After-Free Code Execution - Ver2 (CVE-2011-2790)

A remote code execution vulnerability has been reported in Apple Safari and Google Chrome. The vulnerability is due to an error while handling floating style information. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted web page. Successful...

Google Chrome and Apple Safari Floating Styles Use-After-Free Code Execution - Ver2 (CVE-2011-2790)

A remote code execution vulnerability has been reported in Apple Safari and Google Chrome. The vulnerability is due to an error while handling floating style information. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted web page. Successful...

CVE-2014-0759

Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character...

CVE-2014-0759 Schneider Electric Floating License Manager Unquoted Search Path or Element

Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character...

CVE-2014-0759 Schneider Electric Floating License Manager Unquoted Search Path or Element

Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character...

CVE-2014-0759: Unquoted Search Path or Element

Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character...

PT-2014-3821

Name of the Vulnerable Software and Affected Versions Schneider Electric Floating License Manager versions 1.0.0 through 1.4.0 Description The issue allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space...

Apple Safari Webkit Use-After-Free Code Execution- Ver2 (CVE-2010-1807)

A code execution vulnerability has been reported in Apple Safari's WebKit. The vulnerability is due to a design error when processing floating point data types. A remote attacker could trigger this vulnerability by enticing a vulnerable target to access a specially crafted HTML document. Successf...

Moderate: Red Hat Security Advisory: openstack-neutron security, bug fix, and enhancement update

Updated openstack-neutron packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux OpenStack Platform 4.0. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability...

ruby: heap overflow in floating point parsing

Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before 2.1.0 preview2, and trunk before revision 43780 allows context-dependent attackers to cause a denial of service segmentation fault and possibly execute arbitrary code via a string that is converted to...

Critical: Red Hat Security Advisory: ruby193-ruby security update

Updated ruby193-ruby packages that fix one security issue are now available for Red Hat OpenStack 3.0. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...