EUVD-2018-1315

Malware in sbrugna...

CVE-2018-0492

Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation...

Race condition

Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation...

CVE-2018-0492

Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation...

CVE-2018-0492

Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation...

CVE-2018-0492

Beep is affected by CVE-2018-0492: a race condition in the setuid-beep path allows local privilege escalation in the beep package (version around 1.3.4). Public disclosures reference Gentoo GLSA-201805-15 and Debian/DLA-1338-1; Fedora also released an update (beep-1.3-26.fc28). Mitigation in the ...

CVE-2018-0492

Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation...

CVE-2018-0492

Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation...

Johnathan Nightingale beep local elevation of privilege vulnerability

Johnathan Nightingale beep is an application for making sounds such as alarms. A local elevation of privilege vulnerability exists in Johnathan Nightingale beep version 1.3.4 and earlier. A local attacker can exploit this vulnerability to elevate privileges...

Johnathan Nightingale on Mozilla's secure coding practices

Mozilla’s “human shield” Johnathan Nightingale talks with Threatpost’s Robert Vamosi about secure software practices at RSA 2009...