CVE-2017-18285

The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveraging access to a certain account for a burp-server.conf change...

CVE-2017-18284

The Gentoo app-backup/burp package before 2.1.32 sets the ownership of the PID file directory to the burp account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL...

CVE-2017-18284

The CVE-2017-18284 entry concerns Gentoo app-backup/burp prior to version 2.1.32, where the PID file directory is owned by the burp user. This may allow a local attacker with access to the burp account to modify the PID file and terminate arbitrary processes before a root script issues a SIGKILL....

CVE-2017-18284

The Gentoo app-backup/burp package before 2.1.32 sets the ownership of the PID file directory to the burp account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL...

GLSA-201805-14 : procps: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201805-14 procps: Multiple vulnerabilities Multiple vulnerabilities have been discovered in procps. Please review the CVE identifiers referenced below for details. Impact : A local attacker could execute arbitrary code, escalate...

GLSA-201805-15 : beep: Local privilege escalation

The remote host is affected by the vulnerability described in GLSA-201805-15 beep: Local privilege escalation A race condition, if setuid, was discovered in beep. Impact : A local attacker could escalate privileges. Workaround : There is no known workaround at this time. C Tenable Network Securit...

GLSA-201805-12 : NTP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201805-12 NTP: Multiple vulnerabilities Multiple vulnerabilities have been discovered in NTP. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code or caus...

GLSA-201805-10 : Zsh: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201805-10 Zsh: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Zsh. Please review the CVE identifiers referenced below for details. Impact : A local attacker could execute arbitrary code, escalate...

GLSA-201805-09 : Shadow: security bypass

The remote host is affected by the vulnerability described in GLSA-201805-09 Shadow: security bypass A local attacker could possibly bypass security restrictions if an administrator used group blacklisting to restrict access to file system paths. Impact : A local attacker could possibly bypass...

GLSA-201805-04 : rsync: Arbitrary command execution

The remote host is affected by the vulnerability described in GLSA-201805-04 rsync: Arbitrary command execution A vulnerability was discovered in rsyncs parsearguments function in options.c. Impact : Remote attackers could possibly execute arbitrary commands with the privilege of the process...

GLSA-201805-01 : hesiod: Root privilege escalation

The remote host is affected by the vulnerability described in GLSA-201805-01 hesiod: Root privilege escalation Multiple vulnerabilities have been discovered in hesiod that have remained unaddressed. Please review the referenced CVE identifiers for details. Impact : A remote or local attacker may ...

GLSA-201805-03 : Chromium, Google Chrome: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201805-03 Chromium, Google Chrome: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the referenced CVE identifiers and Google Chrome Releases for details. Impact :...

GLSA-201805-02 : Python: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-201805-02 Python: Buffer overflow A buffer overflow was discovered in Pythons PyStringDecodeEscape function in stringobject.c. Impact : Remote attackers, by enticing a user to process a specially crafted file, could execute...

hesiod: Root privilege escalation

Background DNS functionality to access to DB of information that changes infrequently. Description Multiple vulnerabilities have been discovered in hesiod that have remained unaddressed. Please review the referenced CVE identifiers for details. Impact A remote or local attacker may be able to...

GLSA-201804-17 : Quagga: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201804-17 Quagga: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Quagga. Please review the CVE identifiers referenced below for details. Impact : A remote attacker, by sending specially crafted packets,...

GLSA-201804-20 : unADF: Remote code execution

The remote host is affected by the vulnerability described in GLSA-201804-20 unADF: Remote code execution Multiple vulnerabilities were discovered in unADF that can lead to remote code execution. Please review the CVE identifiers referenced below for details. Impact : A remote attacker, by entici...

GLSA-201804-21 : librelp: Remote code execution

The remote host is affected by the vulnerability described in GLSA-201804-21 librelp: Remote code execution A buffer overflow was discovered in librelp with the handling of x509 certificates. Impact : A remote attacker, by sending a specially crafted x509 certificate, could execute arbitrary code...

GLSA-201804-16 : ClamAV: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201804-16 ClamAV: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ClamAV. Please review the CVE identifiers referenced below for details. Impact : A remote attacker, through multiple vectors, could execut...

GLSA-201804-19 : mbed TLS: Multiple vulnerabilites

The remote host is affected by the vulnerability described in GLSA-201804-19 mbed TLS: Multiple vulnerabilites Multiple vulnerabilities have been discovered in mbed TLS. Please review the CVE identifiers referenced below for details. Impact : A remote attacker, through multiple vectors, could...

GLSA-201804-18 : tenshi: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201804-18 tenshi: Privilege escalation It was discovered that the tenshi ebuild creates a tenshi.pid file after dropping privileges to a non-root account. Impact : A local attacker could escalate privileges to root or kill arbitra...