124 matches found
Apple OS X bsdiff Integer Sign Error Vulnerability
Apple OS X is a specialized operating system developed for Mac computers. An integer sign error vulnerability exists in the bspatch.c file in bsdiff used by Apple OS X, which can be exploited by a remote attacker to crash an application or execute arbitrary code by building a special patch file...
Design/Logic Flaw
Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow via a crafted patch file...
CVE-2014-9862
Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow via a crafted patch file...
CVE-2014-9862
Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow via a crafted patch file...
Security Advisory 0020
Security Advisory 0020 PDF Date: May 6th, 2016 Version: 1.2 Revision| Date| Changes ---|---|--- 1.0 | May 6th, 2016 | Initial release 1.1 | May 12th, 2016 | Updated to include assessment for CVX and CVP. Change in vulnerability status for CVE-2016-2107. 1.2 | May 20th, 2016 | Updated to include...
patch: multiple issues
CVE-2015-1196 directory traversal A directory traversal flaw was discovered that allows remote attackers to write to arbitrary files via a symlink attack in a patch file. This could allow an attacker to overwrite arbitrary files by applying a specially crafted patch, with the privileges of the...
DEBIAN-CVE-2015-1196
GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file...
Design/Logic Flaw
GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file...
CVE-2015-1196
CVE-2015-1196 is confirmed in the provided documents as a vulnerability in GNU patch 2.7.1 where a symlink attack in a patch file allows remote attackers to write to arbitrary files. The connected advisories/feeds reference this CVE alongside other patches for GNU patch (e.g., CVE-2014-9637, CVE-...
CVE-2015-1196
GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file...
CVE-2015-1196
GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file...
CVE-2014-0177
The CVE-2014-0177 issue affects hub (Ruby gem) prior to 1.12.1, where the am function in lib/hub/commands.rb is vulnerable to a symlink attack on a temporary patch file, allowing local users to overwrite arbitrary files (integrity impact). The documented root cause is a vulnerable file-overwrite ...
CVE-2014-0177
The am function in lib/hub/commands.rb in hub before 1.12.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary patch file...
Design/Logic Flaw
The am function in lib/hub/commands.rb in hub before 1.12.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary patch file...
UBUNTU-CVE-2014-0177
The am function in lib/hub/commands.rb in hub before 1.12.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary patch file...
PT-2014-3519 · Github · Hub
Name of the Vulnerable Software and Affected Versions: hub versions prior to 1.12.1 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary patch file. This is due to a problem in the am function in lib/hub/commands.rb. Recommendations: For...
Oracle Solaris 10回滚补丁文件密码哈希泄露漏洞
CVE ID: CVE-2011-0412 Solaris是Sun Microsystems研发的计算机操作系统。 Oracle Solaris 10回滚补丁文件undo.Z包含未授权用户可读的密码哈希，本地用户可通过此漏洞泄露敏感信息。 此安全漏洞源于某些软件包的/var/sadm/pkg/pkgname/save/patchid/以不安全方式存储了"undo.Z"回滚文件，可导致提取包含root和其他用户的密码哈希的文件。 Sun Solaris 10.0 厂商补丁： Sun --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
TmaxSoft JEUS Alternate Data Streams File Disclosure Vulnerability
Exploit for unknown platform in category remote exploits ================================================================== TmaxSoft JEUS Alternate Data Streams File Disclosure Vulnerability ================================================================== Title: TmaxSoft JEUS Alternate Data...