199 matches found
Debian: Security Advisory (DSA-3364-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SuSE 11.3 Security Update : coreutils (SAT Patch Number 10620)
Coreutils was updated to fix one security issue and one non-security bug. The following vulnerability was fixed : - Commands such as date, touch or using parsedatetime could, when accepting untrusted input, allow an attacker to crash the application or, potentially, execute arbitrary code...
CipherShed - Secure Encryption Software (fork of the TrueCrypt Project)
CipherShed is free as in free-of-charge and free-speech encryption software for keeping your data secure and private. It started as a fork of the now-discontinued TrueCrypt Project. CipherShed is a program that can be used to create encrypted files or encrypt entire drives including USB flash...
Linux Kernel < 2.6.31-rc4 nfs4_proc_lock() Denial of Service
No description provided by source. Description of problem: execution of a particular program from the Arachne suite reliably causes a kernel panic due to a NULL-pointer dereference in nfs4proclock. Version-Release number of selected component if applicable: 2.6.18-164.2.1.el5 How reproducible:...
SGI IRIX 5.3 Cadmin Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/335/info A vulnerability exists in the chost and cimport programs, as shipped with SGI's Irix 5.x operating system. chost is part of the Cadmin package. By failing to validate the real userid, these programs allow any use...
Linux Kernel 2.6.x SMBFS CHRoot Security Restriction Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17735/info The Linux Kernel is prone to a vulnerability that allows attackers to bypass a security restriction. This issue is due to a failure in the kernel to properly sanitize user-supplied data. The problem affects...
chkrootkit LTS security update
Package : chkrootkit Version : 0.49-4+deb6u1 CVE ID : CVE-2014-0476 Thomas Stangner discovered a vulnerability in chkrootkit, a rootkit detector, which may allow local attackers to gain root access when /tmp is mounted without the noexec option...
New Police Ransomware 'Browlock' targeting users in US, Canada and UK
What would you do if a European Cybercrime Agency locked your PC until you paid a fine? A new Police Ransomware family dubbed Trojan:HTML/Browlock by F-secure Antivirus firm, known as Browlock, which spreads by tricking unsuspecting web surfers into believing the police are after them. Ransomware...
Microsoft Windows Mounted Devices
By connecting to the remote host with the supplied credentials, this plugin enumerates mounted devices that have been connected to the remote host in the past. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid63080; scriptversion"1.4";...
CentOS Update for glibc CESA-2012:0125 centos4
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
US Supreme Court Ends Warrantless GPS Tracking
In a decision that was closeley watched by civil liberties group and the technology industry, the Supreme Court has ruled unanimously that GPS tracking devices constitute a “search” and that authorities must obtain a warrant before placing one on a suspect’s vehicle. In a rare 9-0 vote, the Court...
FreeBSD -- Unvalidated input in nfsclient
Problem Description: The NFS client subsystem fails to correctly validate the length of a parameter provided by the user when a filesystem is mounted...
RHEL 4 : kernel (RHSA-2009:1132)
Updated kernel packages that fix several security issues and various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...
DEBIAN-CVE-2008-5135
os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/mounted-map or 2 /tmp/raided-map temporary file. NOTE: the vendor disputes this issue, stating "the insecure code path should only ever run inside a d-i environment, which has no non-roo...
CVE-2008-5135
os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/mounted-map or 2 /tmp/raided-map temporary file. NOTE: the vendor disputes this issue, stating "the insecure code path should only ever run inside a d-i environment, which has no non-roo...
PT-2008-6280 · Os-Prober +1 · Os-Prober +1
Name of the Vulnerable Software and Affected Versions: os-prober version 1.17 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/mounted-map or /tmp/raided-map temporary file. The vendor disputes this issue, stating that the insecure code path...
CVE-2007-0740
Alias Manager in Apple Mac OS X 10.3.9 and 10.4.9 does not display files with the same name in mounted disk images that have the same name, which might allow user-assisted attackers to trick a user into executing malicious files...
Command injection
A cleanup script in crontabs in Apple Mac OS X 10.3.9 and 10.4.9 might delete filesystems that have been mounted in /tmp, which might allow local users to cause a denial of service, related to the find command...