UBUNTU-CVE-2013-2236

Stack-based buffer overflow in the newmsglsachangenotify function in the OSPFD API ospfapi.c in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service crash via a large LSA...

CentOS Update for kernel CESA-2013:1436 centos6

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2013:1436 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

CVE-2012-4077

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via the sed e option, aka Bug IDs CSCtf25457 and CSCtf27651...

Code injection

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via the sed e option, aka Bug IDs CSCtf25457 and CSCtf27651...

CVE-2012-4077

Cisco NX-OS Software contains a vulnerability (CVE-2012-4077) due to improper filtering of parameters passed to the sed -e option. An authenticated, local attacker can exploit this to gain access to the bash shell and execute arbitrary commands with administrative privileges, effectively enabling...

CVE-2012-4077

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via the sed e option, aka Bug IDs CSCtf25457 and CSCtf27651...

CVE-2012-4077: Undefined Security Weakness

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via the sed e option, aka Bug IDs CSCtf25457 and CSCtf27651...

Scientific Linux Security Update : sudo on SL5.x i386/x86_64 (20130930)

A flaw was found in the way sudo handled time stamp files. An attacker able to run code as a local user and with the ability to control the system clock could possibly gain additional privileges by running commands that the victim user was allowed to run via sudo, without knowing the victim's...

PT-2013-5596 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.2.x through 8.25.45 Cisco Adaptive Security Appliance ASA Software versions 8.3.x through 8.32.38 Cisco Adaptive Security Appliance ASA Software versions 8.4.x through 8.45.4 Cisco...

CVE-2013-5580

The 1 ConnStartLogin and 2 cbReadResolverResult functions in conn.c in ngIRCd 18 through 20.2, when the configuration option NoticeAuth is enabled, does not properly handle the return code for the HandleWrite function, which allows remote attackers to cause a denial of service assertion failure a...

Code injection

Unspecified vulnerability in HP IceWall SSO Agent Option 8.0 through 10.0 allows remote authenticated users to obtain sensitive information via unknown vectors...

PT-2013-5215

Name of the Vulnerable Software and Affected Versions HP IceWall SSO Agent Option versions 8.0 through 10.0 Description The issue allows remote attackers to obtain sensitive information via unknown vectors. Recommendations For HP IceWall SSO Agent Option versions 8.0 through 10.0, at the moment,...

PT-2013-5218

Name of the Vulnerable Software and Affected Versions HP IceWall SSO versions 8.0 through 10.0 HP IceWall SSO Agent Option versions 8.0 through 10.0 HP IceWall SSO Smart Device Option version 10.0 HP IceWall SSO SAML2 Agent Option version 8.0 HP IceWall SSO JAVA Agent Library versions 8.0 through...

PT-2013-5217

Name of the Vulnerable Software and Affected Versions HP IceWall SSO Agent Option versions 8.0 through 10.0 Description The issue allows remote authenticated users to obtain sensitive information. The exact vectors used for this are not specified. Recommendations For HP IceWall SSO Agent Option...

PT-2013-5216

Name of the Vulnerable Software and Affected Versions HP IceWall SSO versions 8.0 through 10.0 HP IceWall SSO Agent Option versions 8.0 through 10.0 HP IceWall SSO Smart Device Option version 10.0 HP IceWall File Manager versions 3.0 through SP4 Description The issue allows remote attackers to...

polkit: unix-process subject for authorization is racy

Race condition in PolicyKit aka polkit allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to 1 the polkitunixprocessnew API function, 2 the dbus API, or 3 the --process...

CVE-2013-4277

Svnserve in Apache Subversion 1.4.0 through 1.7.12 and 1.8.0 through 1.8.1 allows local users to overwrite arbitrary files or kill arbitrary processes via a symlink attack on the file specified by the --pid-file option...

Kernel: net: panic while appending data to a corked IPv6 socket in ip6_append_data_mtu

The ip6appenddatamtu function in net/ipv6/ip6output.c in the IPv6 implementation in the Linux kernel through 3.10.3 does not properly maintain information about whether the IPV6MTU setsockopt option had been specified, which allows local users to cause a denial of service BUG and system crash via...

Kernel: usb: chipidea: Allow disabling streaming not just in udc mode

The hoststart function in drivers/usb/chipidea/host.c in the Linux kernel before 3.7.4 does not properly support a certain non-streaming option, which allows local users to cause a denial of service system crash by sending a large amount of network traffic through a USB/Ethernet adapter...

Ubuntu Update for linux-ti-omap4 USN-1942-1

Check for the Version of linux-ti-omap4 OpenVAS Vulnerability Test $Id: gbubuntuUSN19421.nasl 8672 2018-02-05 16:39:18Z teissa $ Ubuntu Update for linux-ti-omap4 USN-1942-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program i...