Lucene search
+L

453 matches found

OSV
OSV
added 2014/06/06 5:49 a.m.12 views

MGASA-2014-0251 Updated libcap-ng packages fix CVE-2014-3215

Updated libcap-ng packages fix security vulnerability: capnglock in libcap-ng before 0.7.4 sets securebits in an attempt to prevent regaining capabilities using setuid-root programs. This allows a user to run setuid programs, such as seunshare from policycoreutils, as uid 0 but without...

6.9CVSS7.5AI score0.00357EPSS
SaveExploits0References3
Mageia
Mageia
added 2014/06/06 5:49 a.m.41 views

Updated libcap-ng packages fix CVE-2014-3215

Updated libcap-ng packages fix security vulnerability: capnglock in libcap-ng before 0.7.4 sets securebits in an attempt to prevent regaining capabilities using setuid-root programs. This allows a user to run setuid programs, such as seunshare from policycoreutils, as uid 0 but without...

6.9CVSS6.6AI score0.00357EPSS
SaveExploits0References2
NVD
NVD
added 2014/02/08 12:55 a.m.16 views

CVE-2011-4099

The capsh program in libcap before 2.22 does not change the current working directory when the --chroot option is specified, which allows local users to bypass the chroot restrictions via unspecified vectors...

4.6CVSS5.9AI score0.00382EPSS
SaveExploits0References3
OSV
OSV
added 2014/02/08 12:55 a.m.10 views

CVE-2011-4099

The capsh program in libcap before 2.22 does not change the current working directory when the --chroot option is specified, which allows local users to bypass the chroot restrictions via unspecified vectors...

5.9AI score
SaveExploits0References3
OSV
OSV
added 2014/02/08 12:55 a.m.9 views

DEBIAN-CVE-2011-4099

The capsh program in libcap before 2.22 does not change the current working directory when the --chroot option is specified, which allows local users to bypass the chroot restrictions via unspecified vectors...

4.6CVSS6.6AI score0.00382EPSS
SaveExploits0References1
Prion
Prion
added 2014/02/08 12:55 a.m.16 views

Design/Logic Flaw

The capsh program in libcap before 2.22 does not change the current working directory when the --chroot option is specified, which allows local users to bypass the chroot restrictions via unspecified vectors...

4.6CVSS6.5AI score0.00382EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2014/02/08 12:55 a.m.19 views

CVE-2011-4099

The capsh program in libcap before 2.22 does not change the current working directory when the --chroot option is specified, which allows local users to bypass the chroot restrictions via unspecified vectors...

4.6CVSS5.8AI score0.00382EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2014/02/08 12:00 a.m.32 views

CVE-2011-4099

The capsh program in libcap before 2.22 does not change the current working directory when the --chroot option is specified, which allows local users to bypass the chroot restrictions via unspecified vectors...

5.8AI score0.00382EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2014/02/08 12:00 a.m.37 views

CVE-2011-4099

The capsh program in libcap before 2.22 does not change the current working directory when the --chroot option is specified, which allows local users to bypass the chroot restrictions via unspecified vectors...

4.6CVSS6AI score0.00382EPSS
SaveExploits0
CVE
CVE
added 2014/02/08 12:00 a.m.75 views

CVE-2011-4099

The CVE-2011-4099 issue affects the capsh program in libcap prior to version 2.22, where the current working directory is not changed when --chroot is used, enabling local users to bypass chroot restrictions. Affected component: libcap (capsh utility). Root cause: chroot handling does not chdir t...

4.6CVSS5.9AI score0.00382EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2012/08/01 12:00 a.m.20 views

Scientific Linux Security Update : libcap on SL6.x i386/x86_64

The libcap packages provide a library and tools for getting and setting POSIX capabilities. It was found that capsh did not change into the new root when using the '--chroot' option. An application started via the 'capsh --chroot' command could use this flaw to escape the chroot restrictions...

4.6CVSS5.4AI score0.00382EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2012/07/09 12:00 a.m.16 views

RedHat Update for libcap RHSA-2011:1694-03

Check for the Version of libcap OpenVAS Vulnerability Test RedHat Update for libcap RHSA-2011:1694-03 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

4.6CVSS6.4AI score0.00382EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2012/07/09 12:00 a.m.21 views

RedHat Update for libcap RHSA-2011:1694-03

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

4.6CVSS6.5AI score0.00382EPSS
SaveExploits0References2
securityvulns
securityvulns
added 2011/12/19 12:00 a.m.33 views

[ MDVSA-2011:185 ] libcap

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:185 http://www.mandriva.com/security/ Package : libcap Date : December 12, 2011 Affected: 2010.1, 2011., Enterprise Server 5.0 Problem Description: A vulnerability has been discovered and corrected in libcap...

4.6CVSS6AI score0.00382EPSS
SaveExploits0
securityvulns
securityvulns
added 2011/12/19 12:00 a.m.30 views

libcap protection bypass

chdir is not called after chroot...

4.6CVSS1.8AI score0.00382EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2011/12/16 12:00 a.m.24 views

Mandriva Update for libcap MDVSA-2011:185 (libcap)

Check for the Version of libcap OpenVAS Vulnerability Test Mandriva Update for libcap MDVSA-2011:185 libcap Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

4.6CVSS0.00382EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2011/12/16 12:00 a.m.25 views

Mandriva Update for libcap MDVSA-2011:185 (libcap)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

4.6CVSS5.2AI score0.00382EPSS
SaveExploits0References2
Oracle linux
Oracle linux
added 2011/12/14 12:00 a.m.24 views

libcap security and bug fix update

2.16-5.5 - remove some obsolete parameters from capsh manpage 2.16-5.4 - add capsh manpage 730957 2.16-5.3 - make sure to chdir '/' after calling chroot http://cwe.mitre.org/data/definitions/243.html...

4.6CVSS0.9AI score0.00382EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2011/12/13 12:00 a.m.16 views

Mandriva Linux Security Advisory : libcap (MDVSA-2011:185)

A vulnerability has been discovered and corrected in libcap : capsh did not chdir/ after calling chroot. Programs could therefore access the current directory outside of the chroot CVE-2011-4099. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network...

4.6CVSS5.2AI score0.00382EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2011/12/06 12:00 a.m.28 views

RHEL 6 : libcap (RHSA-2011:1694)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1694 advisory. The libcap packages provide a library and tools for getting and setting POSIX capabilities. It was found that capsh did not change into the new root...

4.6CVSS5.6AI score0.00382EPSS
SaveExploits0References6
Rows per page
Query Builder