64 matches found
Code injection
The chkmemaccess function in cpu/nes6502/nes6502.c in libnosefart.a in Nosefart 2.9-mls allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted nsf file...
CVE-2017-11119
Summary (CVE-2017-11119) : The vulnerability affects Nosefart 2.9-mls, in the chk_mem_access function of cpu/nes6502/nes6502.c within libnosefart.a. A crafted NSF file can cause a denial of service by triggering an invalid memory read and application crash. The linked (connected) documents consis...
oldmillprops.com XSS vulnerability
Open Bug Bounty ID: OBB-252559 Description| Value ---|--- Affected Website:| oldmillprops.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the selinux-policy-mls-3.7.19 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...
Information disclosure
The Go MSX MLS aka com.doapps.android.realestate.RE16b9c09c4d5b0e174208f35e7c49f9a0 application 2.3.4.MR3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Scientific Linux Security Update : selinux-policy enhancement update on SL6.x i386/x86_64 (20130221)
This update adds the following enhancements : - With the Multi-Level Security MLS SELinux policy enabled, a user created with an SELinux MLS level could not login to the system through an |SSH| client. The SELinux policy rules have been updated to allow the user to log in to the system in the...
Scientific Linux Security Update : selinux-policy enhancement update on SL6.x i386/x86_64 (20121218)
This update adds the following bugfixes : - Due to a bug in the SELinux policy, it was not possible to run a cron job with a valid MLS Multi Level Security context for the sysadmu SELinux user. This update fixes relevant SELinux policy rules and cron now works as expected in the described scenari...
Scientific Linux Security Update : selinux-policy enhancement update on SL5.x, SL6.x i386/x86_64 (20120911)
This update adds the following enhancements : - Previously, with the MLS policy activated, a user created with a MLS level was not able to log into the system using the ssh utility because an appropriate MLS policy rule was missing. This update adds the MLS rule and users can now log into the...
Scientific Linux Security Update : openssh on SL5.x
Problem description : A flaw was found in the way the ssh server wrote account names to the audit subsystem. An attacker could inject strings containing parts of audit messages, which could possibly mislead or confuse audit log parsing tools. CVE-2007-3102 A flaw was found in the way the OpenSSH...
Scientific Linux Security Update : mcstrans on SL5.x i386/x86_64
An algorithmic complexity weakness was found in the way the mcstrans daemon handled ranges of compartments in sensitivity labels. A local user could trigger this flaw causing mctransd to temporarily stop responding to other requests; a partial denial of service. CVE-2007-4570 This update also fix...
Security Enhanced (SE) Android Released by National Security Agency (NSA)
Security Enhanced SE Android Released by National Security Agency NSA The National Security Agency NSA releases the first version of Android Security Enhanced . The system is designed to minimize the impact of security holes on Android . SE Android project is enabling the use of SELinux in Androi...
Crystal Player 1.98 - '.mls' Buffer Overflow
source: https://www.securityfocus.com/bid/42727/info Crystal Player is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks...
20/20 DataShed SQL Injection Vulnerability
Exploit for php platform in category web applications ========================================== 20/20 DataShed SQL Injection Vulnerability ========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ ...
openssh security and bug fix update
4.3p2-24 - fixed audit log injection problem CVE-2007-3102 248059 4.3p2-23 - document where the nss certificate and token dbs are looked for 4.3p2-22 - experimental support for PKCS11 tokens through libnss3 183423 4.3p2-21 - fix an information leak in Kerberos password authentication CVE-2006-505...
mcstrans security and bug fix update
0.2.6-1 - Don't allow categories 1023 Resolves: 288941 0.2.3-1 - Additional fix to handle ssh root/sysadmr/s0:c1,c2 Resolves: 224637 0.2.1-1 - Rewrite to handle MLS properly Resolves: 225355 0.1.10-2 - Cleanup memory when complete 0.1.10-1 - Fix Memory Leak Resolves: 218173 0.1.9-1 - Add -pie - F...
RHEL 5 : openssh (RHSA-2007:0540)
Updated openssh packages that fix a security issue and various bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. These packages include the core files necessar...
Moderate: Red Hat Security Advisory: openssh security and bug fix update
Updated openssh packages that fix a security issue and various bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. These packages include the core files necessar...
Low: Red Hat Security Advisory: mcstrans security and bug fix update
An updated mcstrans package that fixes a security issue and a bug is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. mcstrans is the translation daemon used on SELinux machines to translate program context into human readable form. An...
