GLSA-201806-09 : PNP4Nagios: Root privilege escalation

The remote host is affected by the vulnerability described in GLSA-201806-09 PNP4Nagios: Root privilege escalation It was found that PHP4Nagios creates files owned by an unprivileged user that are used by root. Impact : A local attacker could escalate privileges to root. Workaround : There is no...

GLSA-201806-06 : Chromium, Google Chrome: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201806-06 Chromium, Google Chrome: User-assisted execution of arbitrary code An out of bounds flaw has discovered in Chromium and Chromes V8 component. Impact : A remote attacker, by enticing a user to visit a specially crafted...

GLSA-201806-05 : cURL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201806-05 cURL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in cURL. Please review the CVE identifiers referenced below for details. Impact : Remote attackers could cause a Denial of Service condition,...

GLSA-201806-07 : Transmission: Remote code execution

The remote host is affected by the vulnerability described in GLSA-201806-07 Transmission: Remote code execution A vulnerability was discovered in how Transmission handles access control through the X-Transmission-Session-Id. Impact : A remote attacker could execute arbitrary RFC commands or...

Security Bulletin: Linux kernel privesc Dirty COW vulnerability affects IBM Tivoli Netcool Impact (CVE-2016-5195)

Summary A vulnerability in the Linux kernel privesc impacts IBM Tivoli Netcool Impact on Linux platform. Vulnerability Details CVEID: CVE-2016-5195 Description: Linux Kernel could allow a local attacker to gain elevated privileges on the system, caused by a race condition when handling the...

Security Bulletin: Linux kernel privesc Dirty COW vulnerability affects Tivoli Business Service Manager (CVE-2016-5195)

Summary A vulnerability in the Linux kernel privesc impacts Tivoli Business Service Manager TBSM on Linux platform. Vulnerability Details CVEID: CVE-2016-5195 Description: Linux Kernel could allow a local attacker to gain elevated privileges on the system, caused by a race condition when handling...

GLSA-201806-03 : BURP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201806-03 BURP: Multiple vulnerabilities It was discovered that Gentoos BURP ebuild does not properly set permissions or place the pid file in a safe directory. Impact : A local attacker could escalate privileges. Workaround : Use...

GLSA-201806-04 : Quassel: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201806-04 Quassel: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Quassel. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could cause arbitrary code execution ...

GLSA-201806-01 : GNU Wget: Cookie injection

The remote host is affected by the vulnerability described in GLSA-201806-01 GNU Wget: Cookie injection A vulnerability was discovered in GNU Wgets respnew function which does not validate \r\n sequences in continuation lines. Impact : A remote attacker could inject arbitrary cookie entry request...

BURP: Multiple vulnerabilities

Background A network backup and restore program. Description It was discovered that Gentoo’s BURP ebuild does not properly set permissions or place the pid file in a safe directory. Impact A local attacker could escalate privileges. Workaround Users should ensure the proper permissions are set as...

Gentoo app-backup/burp package design vulnerability

The Gentoo app-backup/burp package is a network backup and recovery program from the Gentoo Foundation. A security vulnerability in the Gentoo app-backup/burp package prior to version 2.1.32 stems from the program setting ownership of the PID file directory to the burp account. A local attacker...

Arbitrary file deletion

The Gentoo app-backup/burp package before 2.1.32 sets the ownership of the PID file directory to the burp account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL...

CVE-2017-18285

The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveraging access to a certain account for a burp-server.conf change...

CVE-2017-18285

The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveraging access to a certain account for a burp-server.conf change...

CVE-2017-18285

The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveraging access to a certain account for a burp-server.conf change...

Design/Logic Flaw

The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveraging access to a certain account for a burp-server.conf change...

CVE-2017-18284

The Gentoo app-backup/burp package before 2.1.32 sets the ownership of the PID file directory to the burp account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL...

CVE-2017-18284

The Gentoo app-backup/burp package before 2.1.32 sets the ownership of the PID file directory to the burp account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL...

CVE-2017-18285

CVE-2017-18285 affects Gentoo app-backup/burp prior to 2.1.32. The vulnerability stems from incorrect group ownership/permissions of the /etc/burp directory, potentially allowing a local attacker to read/write arbitrary files by modifying burp-server.conf. Documented impact is local privilege esc...

CVE-2017-18285

The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveraging access to a certain account for a burp-server.conf change...