PYSEC-2016-23

Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master data stream...

PYSEC-2016-23

Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master data stream...

CVE-2016-1866

Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master data stream...

CVE-2016-1866

Removed by vendor...

PT-2016-4907

Name of the Vulnerable Software and Affected Versions Salt versions 2015.8.x before 2015.8.4 Description The issue allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master data stream due to improper handling of clear messages on the minion...

CVE-2016-1866: Improper Access Control

Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master data stream...

Minion Dentist - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Minion Dentist published at the 'play' market has multiple vulnerabilities...

openSUSE Security Update : salt (openSUSE-2016-318)

This update for salt fixes the following issues : - CVE-2016-1866: Improper handling of clear messages on the minion remote code execution boo965403 The following bugs were fixed : - boo958350: Salt crashes on invalid UTF-8 in package data - boo959572: 'salt '' pkg.infoinstalled' causes exception...

PYSEC-2013-14

Salt aka SaltStack before 0.15.0 through 0.17.0 allows remote authenticated minions to impersonate arbitrary minions via a crafted minion with a valid key...

UBUNTU-CVE-2013-4439

Salt aka SaltStack before 0.15.0 through 0.17.0 allows remote authenticated minions to impersonate arbitrary minions via a crafted minion with a valid key...

PT-2013-5018

Name of the Vulnerable Software and Affected Versions Salt aka SaltStack versions 0.15.0 through 0.17.0 Description The issue allows remote authenticated minions to impersonate arbitrary minions via a crafted minion with a valid key. Recommendations For versions 0.15.0 through 0.17.0, update to a...

CVE-2013-4439: Undefined Security Weakness

Salt aka SaltStack before 0.15.0 through 0.17.0 allows remote authenticated minions to impersonate arbitrary minions via a crafted minion with a valid key...

Mozilla, Blackberry To Test Website Security Via Fuzzing

Mozilla and Blackberry have announced a new collaboration project; the two companies will begin working in tandem to more fully flesh out Peach – a free software fuzzing application first developed nearly a decade ago – for testing the security of web browsers. In a post on its company blog by...