1726 matches found
CVE-2019-19521
libc in OpenBSD 6.6 allows authentication bypass via the -schallenge username, as demonstrated by smtpd, ldapd, or radiusd. This is related to gen/authsubr.c and gen/authenticate.c in libc and login/login.c and xenocara/app/xenodm/greeter/verify.c...
CVE-2019-19521
CVE-2019-19521 affects OpenBSD 6.6 libc and enables authentication bypass via the -schallenge username, exploitable remotely in smtpd, ldapd, or radiusd. Root cause ties to libc code paths gen/auth_subr.c and gen/authenticate.c (also related login.c and xenocara/greeter/verify.c). OpenBSD patches...
CVE-2019-19522
OpenBSD 6.6, in a non-default configuration where S/Key or YubiKey authentication is enabled, allows local users to become root by leveraging membership in the auth group. This occurs because root's file can be written to /etc/skey or /var/db/yubikey, and need not be owned by root...
CVE-2019-19522
OpenBSD 6.6 is affected when S/Key or YubiKey authentication is enabled (non-default). A local attacker in the auth group can escalate to root because root’s file can be written to /etc/skey or /var/db/yubikey and need not be owned by root. This CVE corresponds to CVE-2019-19522. Reported impact ...
Multiple Linux Distributions CVE-2019-14899 Security Bypass Vulnerability
Description Multiple Linux Distributions are prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Technologies Affected Apple iOS Apple macOS Archlinux Linux 2019.05...
OpenBSD Multiple Privilege Escalation and Authentication Bypass Vulnerabilities
Description OpenBSD is prone to multiple privilege-escalation and authentication-bypass vulnerabilities. An attacker may leverage these issues to bypass the authentication mechanism and gain elevated privileges. This may aid in further attacks. OpenBSD 6.6 version is vulnerable; other versions ma...
Xorg X11 Server - Local Privilege Escalation (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Xorg X11 Server Local Privilege Escalation', 'Description' = %q WARNING: Successful execution of this module results in /etc/passwd being...
Xorg X11 Server Local Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Xorg X11 Server Local Privilege Escalation', 'Description' = %q WARNING: Successful execution of this module results in /etc/passwd being...
Unspecified vulnerability in slicer69 doas
slicer69 doas is a utility program used on the OpenBSD platform to execute privileged commands for Root users. A security vulnerability exists in slicer69 doas versions prior to 6.2, which can be exploited by an attacker to execute commands with root privileges...
Design/Logic Flaw
An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. A setusercontext3 call with flags to change the UID, primary GID, and secondary GIDs was replaced on certain platforms: Linux and possibly NetBSD with a single setuid2 call. This resulted in neither...
CVE-2019-15900
An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. On platforms without strtonum3, sscanf was used without checking for error cases. Instead, the uninitialized variable errstr was checked and in some cases returned success even if sscanf failed. The resul...
Fortinet FortiSIEM 5.0 / 5.2.1 Improper Certification Validation
Product Name: FortiSIEM Tested versions: 5.0, 5.2.1 Fixed in version: Only a manual workaround is available from Fortinet as of this writing Weakness Type: CWE-295 - Improper Certificate Validation Discovered by: Andrew Klaus Cybera Canada CVE: Pending == Disclosure Timeline: June 25, 2019: Initi...
The vulnerability of the tcp_sack_option() function in the kernel of the OpenBSD operating system allows a hacker to cause a service failure.
The vulnerability of the tcpsackoption function in the kernel of the OpenBSD operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
CVE-2019-8460
OpenBSD kernel version = 6.5 can be forced to create long chains of TCP SACK holes that causes very expensive calls to tcpsackoption for every incoming SACK packet which can lead to a denial of service...
CVE-2019-8460
OpenBSD kernel version = 6.5 can be forced to create long chains of TCP SACK holes that causes very expensive calls to tcpsackoption for every incoming SACK packet which can lead to a denial of service...
Code injection
OpenBSD kernel version = 6.5 can be forced to create long chains of TCP SACK holes that causes very expensive calls to tcpsackoption for every incoming SACK packet which can lead to a denial of service...
CVE-2019-8460
CVE-2019-8460 affects the OpenBSD kernel (versions
CVE-2019-8460
OpenBSD kernel version = 6.5 can be forced to create long chains of TCP SACK holes that causes very expensive calls to tcpsackoption for every incoming SACK packet which can lead to a denial of service...
