Huawei EulerOS: Security Advisory for selinux-policy (EulerOS-SA-2022-2012)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-27056

CVE-2020-27056 affects Android 11 with a missing permission check in SELinux MLS policies that can disclose local package-metadata information without extra privileges. The issue is confirmed as a local information-disclosure vulnerability; no exploitation details are provided in the documents. R...

Linux: Get crontab and /etc/cron.* scripts

Crontab is the program used to install, remove or list the tables used to drive the cron8 daemon. Each user can have their own crontab, and though these are files in /var/spool/, they are not intended to be edited directly. For SELinux in mls mode can be even more crontabs - for each range. Many ...

mls-navigator.com Cross Site Scripting vulnerability OBB-1309407

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

marylandhomesinmls.com Cross Site Scripting vulnerability OBB-1236998

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2017-11119

The chkmemaccess function in cpu/nes6502/nes6502.c in libnosefart.a in Nosefart 2.9-mls allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted nsf file...

Code injection

The chkmemaccess function in cpu/nes6502/nes6502.c in libnosefart.a in Nosefart 2.9-mls allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted nsf file...

CVE-2017-11119

Summary (CVE-2017-11119) : The vulnerability affects Nosefart 2.9-mls, in the chk_mem_access function of cpu/nes6502/nes6502.c within libnosefart.a. A crafted NSF file can cause a denial of service by triggering an invalid memory read and application crash. The linked (connected) documents consis...

oldmillprops.com XSS vulnerability

Open Bug Bounty ID: OBB-252559 Description| Value ---|--- Affected Website:| oldmillprops.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the selinux-policy-mls-3.7.19 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

Information disclosure

The Go MSX MLS aka com.doapps.android.realestate.RE16b9c09c4d5b0e174208f35e7c49f9a0 application 2.3.4.MR3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Scientific Linux Security Update : selinux-policy enhancement update on SL6.x i386/x86_64 (20130221)

This update adds the following enhancements : - With the Multi-Level Security MLS SELinux policy enabled, a user created with an SELinux MLS level could not login to the system through an |SSH| client. The SELinux policy rules have been updated to allow the user to log in to the system in the...

Scientific Linux Security Update : selinux-policy enhancement update on SL6.x i386/x86_64 (20121218)

This update adds the following bugfixes : - Due to a bug in the SELinux policy, it was not possible to run a cron job with a valid MLS Multi Level Security context for the sysadmu SELinux user. This update fixes relevant SELinux policy rules and cron now works as expected in the described scenari...

Scientific Linux Security Update : selinux-policy enhancement update on SL5.x, SL6.x i386/x86_64 (20120911)

This update adds the following enhancements : - Previously, with the MLS policy activated, a user created with a MLS level was not able to log into the system using the ssh utility because an appropriate MLS policy rule was missing. This update adds the MLS rule and users can now log into the...

Scientific Linux Security Update : mcstrans on SL5.x i386/x86_64

An algorithmic complexity weakness was found in the way the mcstrans daemon handled ranges of compartments in sensitivity labels. A local user could trigger this flaw causing mctransd to temporarily stop responding to other requests; a partial denial of service. CVE-2007-4570 This update also fix...

Scientific Linux Security Update : openssh on SL5.x

Problem description : A flaw was found in the way the ssh server wrote account names to the audit subsystem. An attacker could inject strings containing parts of audit messages, which could possibly mislead or confuse audit log parsing tools. CVE-2007-3102 A flaw was found in the way the OpenSSH...

Security Enhanced (SE) Android Released by National Security Agency (NSA)

Security Enhanced SE Android Released by National Security Agency NSA The National Security Agency NSA releases the first version of Android Security Enhanced . The system is designed to minimize the impact of security holes on Android . SE Android project is enabling the use of SELinux in Androi...

Crystal Player 1.98 - '.mls' Buffer Overflow

source: https://www.securityfocus.com/bid/42727/info Crystal Player is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks...

20/20 DataShed SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================== 20/20 DataShed SQL Injection Vulnerability ========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ ...

openssh security and bug fix update

4.3p2-24 - fixed audit log injection problem CVE-2007-3102 248059 4.3p2-23 - document where the nss certificate and token dbs are looked for 4.3p2-22 - experimental support for PKCS11 tokens through libnss3 183423 4.3p2-21 - fix an information leak in Kerberos password authentication CVE-2006-505...