AWS CLI: cli_history database does not restrict file permissions on Unix systems

Summary AWS CLI is a command line tool for interacting with AWS services. When the clihistory feature is enabled, the history database file is created with default permissions, potentially allowing other local users on a multi-user system to read the file. Impact When clihistory is enabled, AWS C...

EUVD-2016-3364

Malware in sbrugna...

EUVD-2014-0253

Malware in sbrugna...

CVE-2016-2280

Buffer overflow in RDISERVER in Honeywell Uniformance Process History Database PHD R310, R320, and R321 allows remote attackers to cause a denial of service service outage via unspecified vectors...

CVE-2016-2280

Buffer overflow in RDISERVER in Honeywell Uniformance Process History Database PHD R310, R320, and R321 allows remote attackers to cause a denial of service service outage via unspecified vectors...

CVE-2016-2280

This CVE describes a stack-based buffer overflow in Honeywell Uniformance PHD’s Network.dll used by RDISERVER, RAPIServer, apiserver, and UDBServer. According to ICS-CERT Update A, vulnerable versions include Uniformance PHD releases prior to R310.1.1.2, R320.1.0.2, and R321.1.1. Exploitation cou...

Multiple Honeywell Uniformance Process History Database Product Buffer Overflow Vulnerabilities

Honeywell Uniformance Process History Database PHD R310, R320, and R321 are Honeywell International products used with DCS to provide engineering and business analysis. A buffer overflow vulnerability exists in multiple Honeywell Uniformance PHD products and can be exploited by remote attackers t...

CVE-2014-0202

The setup script in ovirt-engine-dwh, as used in the Red Hat Enterprise Virtualization Manager data warehouse rhevm-dwh package before 3.3.3, stores the history database password in cleartext, which allows local users to obtain sensitive information by reading an unspecified file...

PT-2014-3532 · Ovirt · Ovirt-Engine-Dwh

Name of the Vulnerable Software and Affected Versions: ovirt-engine-dwh versions prior to 3.3.3 Description: The issue allows local users to obtain sensitive information by reading an unspecified file, as the setup script stores the history database password in cleartext. Recommendations: For...

ovirt-engine-dwh: setup script logs database password in cleartext

The setup script in ovirt-engine-dwh, as used in the Red Hat Enterprise Virtualization Manager data warehouse rhevm-dwh package before 3.3.3, stores the history database password in cleartext, which allows local users to obtain sensitive information by reading an unspecified file...