Lucene search
+L

3569 matches found

OpenVAS
OpenVAS
•added 2012/10/16 12:00 a.m.•102 views

Ubuntu: Security Advisory (USN-1610-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.0048EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
•added 2012/10/15 12:00 a.m.•33 views

Ubuntu 12.04 LTS : linux vulnerability (USN-1610-1)

Pablo Neira Ayuso discovered a flaw in the credentials of netlink messages. An unprivileged local attacker could exploit this by getting a netlink based service, that relies on netlink credentials, to perform privileged actions. Note that Tenable Network Security has extracted the preceding...

1.9CVSS7.6AI score0.00429EPSS
SaveExploits2References2
Ubuntu
Ubuntu
•added 2012/10/12 10:12 a.m.•86 views

USN-1610-1: Linux kernel vulnerability

Pablo Neira Ayuso discovered a flaw in the credentials of netlink messages. An unprivileged local attacker could exploit this by getting a netlink based service, that relies on netlink credentials, to perform privileged actions. CVE-2012-3520 Mathias Krause discovered information leak in the Linu...

7.8CVSS6.6AI score0.0048EPSS
SaveExploits3
OpenVAS
OpenVAS
•added 2012/10/11 12:00 a.m.•28 views

Ubuntu Update for linux-ti-omap4 USN-1599-1

Ubuntu Update for Linux kernel vulnerabilities USN-1599-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN15991.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux-ti-omap4 USN-1599-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.n...

1.9CVSS7.8AI score0.00429EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2012/10/11 12:00 a.m.•66 views

Ubuntu: Security Advisory (USN-1599-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.0048EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
•added 2012/10/10 12:00 a.m.•38 views

USN-1599-1 : linux-ti-omap4 vulnerability

Pablo Neira Ayuso discovered a flaw in the credentials of netlink messages. An unprivileged local attacker could exploit this by getting a netlink based service, that relies on netlink credentials, to perform privileged actions. This script was automatically generated from Ubuntu Security Notice...

1.9CVSS7.7AI score0.00429EPSS
SaveExploits2References2
Exploit DB
Exploit DB
•added 2012/10/10 12:00 a.m.•290 views

Linux Kernel UDEV < 1.4.1 - 'Netlink' Local Privilege Escalation (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...

7.2CVSS7.7AI score0.80416EPSS
SaveExploits14
Ubuntu
Ubuntu
•added 2012/10/09 8:19 a.m.•89 views

USN-1599-1: Linux kernel (OMAP4) vulnerability

Pablo Neira Ayuso discovered a flaw in the credentials of netlink messages. An unprivileged local attacker could exploit this by getting a netlink based service, that relies on netlink credentials, to perform privileged actions. CVE-2012-3520 Mathias Krause discovered information leak in the Linu...

7.8CVSS6.6AI score0.0048EPSS
SaveExploits3
OSV
OSV
•added 2012/10/03 11:02 a.m.•11 views

CVE-2012-3520

The Netlink implementation in the Linux kernel before 3.2.30 does not properly handle messages that lack SCMCREDENTIALS data, which might allow local users to spoof Netlink communication via a crafted message, as demonstrated by a message to 1 Avahi or 2 NetworkManager...

5.8AI score
SaveExploits0References12
NVD
NVD
•added 2012/10/03 11:02 a.m.•22 views

CVE-2012-3520

The Netlink implementation in the Linux kernel before 3.2.30 does not properly handle messages that lack SCMCREDENTIALS data, which might allow local users to spoof Netlink communication via a crafted message, as demonstrated by a message to 1 Avahi or 2 NetworkManager...

1.9CVSS5.7AI score0.00429EPSS
SaveExploits2References12
OSV
OSV
•added 2012/10/03 11:02 a.m.•7 views

DEBIAN-CVE-2012-3520

The Netlink implementation in the Linux kernel before 3.2.30 does not properly handle messages that lack SCMCREDENTIALS data, which might allow local users to spoof Netlink communication via a crafted message, as demonstrated by a message to 1 Avahi or 2 NetworkManager...

1.9CVSS6.2AI score0.00429EPSS
SaveExploits2References1
Prion
Prion
•added 2012/10/03 11:02 a.m.•14 views

Code injection

The Netlink implementation in the Linux kernel before 3.2.30 does not properly handle messages that lack SCMCREDENTIALS data, which might allow local users to spoof Netlink communication via a crafted message, as demonstrated by a message to 1 Avahi or 2 NetworkManager...

1.9CVSS6.3AI score0.00429EPSS
SaveExploits2References12Affected Software1
Cvelist
Cvelist
•added 2012/10/03 10:00 a.m.•38 views

CVE-2012-3520

The Netlink implementation in the Linux kernel before 3.2.30 does not properly handle messages that lack SCMCREDENTIALS data, which might allow local users to spoof Netlink communication via a crafted message, as demonstrated by a message to 1 Avahi or 2 NetworkManager...

6.9AI score0.00429EPSS
SaveExploits2References12
CVE
CVE
•added 2012/10/03 10:00 a.m.•102 views

CVE-2012-3520

CVE-2012-3520 concerns the Netlink implementation in the Linux kernel prior to 3.2.30, where Netlink messages missing SCM_CREDENTIALS data could be spoofed by a local attacker via crafted messages (notably affecting services such as Avahi or NetworkManager). The vulnerability enables a local user...

1.9CVSS6.8AI score0.00429EPSS
SaveExploits2References12Affected Software1
Mend
Mend
•added 2012/10/03 10:00 a.m.•1 views

CVE-2012-3520

The Netlink implementation in the Linux kernel before 3.2.30 does not properly handle messages that lack SCMCREDENTIALS data, which might allow local users to spoof Netlink communication via a crafted message, as demonstrated by a message to 1 Avahi or 2 NetworkManager...

2.9CVSS0.00429EPSS
SaveExploits2References13
Debian CVE
Debian CVE
•added 2012/10/03 10:00 a.m.•37 views

CVE-2012-3520

The Netlink implementation in the Linux kernel before 3.2.30 does not properly handle messages that lack SCMCREDENTIALS data, which might allow local users to spoof Netlink communication via a crafted message, as demonstrated by a message to 1 Avahi or 2 NetworkManager...

1.9CVSS8.1AI score0.00429EPSS
SaveExploits2
OSV
OSV
•added 2012/10/03 12:00 a.m.•11 views

UBUNTU-CVE-2012-3520

The Netlink implementation in the Linux kernel before 3.2.30 does not properly handle messages that lack SCMCREDENTIALS data, which might allow local users to spoof Netlink communication via a crafted message, as demonstrated by a message to 1 Avahi or 2 NetworkManager...

1.9CVSS7.2AI score0.00429EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/10/03 12:00 a.m.•5 views

CVE-2012-3520: Improper Authentication

The Netlink implementation in the Linux kernel before 3.2.30 does not properly handle messages that lack SCMCREDENTIALS data, which might allow local users to spoof Netlink communication via a crafted message, as demonstrated by a message to 1 Avahi or 2 NetworkManager...

1.9CVSS5.8AI score0.00429EPSS
SaveExploits2References2
UbuntuCve
UbuntuCve
•added 2012/10/03 12:00 a.m.•37 views

CVE-2012-3520

The Netlink implementation in the Linux kernel before 3.2.30 does not properly handle messages that lack SCMCREDENTIALS data, which might allow local users to spoof Netlink communication via a crafted message, as demonstrated by a message to 1 Avahi or 2 NetworkManager...

1.9CVSS7.1AI score0.00429EPSS
SaveExploits2References4
Packet Storm
Packet Storm
•added 2012/09/14 12:00 a.m.•76 views

Linux udev Netlink Local Privilege Escalation

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...

7.2CVSS7.7AI score0.80416EPSS
SaveExploits14
Rows per page
Query Builder