yum security update

CentOS Errata and Security Advisory CESA-2018:2284 An update for yum-utils is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

RHEL 6 : yum-utils (RHSA-2018:2284)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2284 advisory. - yum-utils: reposync: improper path validation may lead to directory traversal CVE-2018-10897 Note that Nessus has not tested for this issue but has...

RHEL 7 : yum-utils (RHSA-2018:2285)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2285 advisory. The yum-utils packages provide a collection of utilities and examples for the yum package manager to make yum easier and more powerful to use. Securi...

Understanding NetScaler SD-WAN Best Path Determination

The following points helps you in understanding NetScaler SD-WAN best path determination: Per-packet determination Variety of factors in determining packets assigned path Received packet from any WAN path calculates: One-way trip latency One-way loss One-way bandwidth One-way jitter Sent packet...

(Pwn2Own) Huawei Reader onChapPack Directory Traversal File Deletion Vulnerability

This vulnerability allows local attackers to delete arbitrary files on vulnerable installations of Huawei Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of t...

Important: Red Hat Security Advisory: yum-utils security update

An update for yum-utils is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Charles Proxy 4.2 - Local Privilege Escalation

Charles Proxy is a great mac application for debugging web services and inspecting SSL traffic for any application on your machine. In order to inspect the SSL traffic it needs to configure the system to use a proxy so that it can capture the packets and use its custom root CA to decode the SSL...

Charles Proxy 4.2 Local Root Privilege Escalation

Charles Proxy is a great mac application for debugging web services and inspecting SSL traffic for any application on your machine. In order to inspect the SSL traffic it needs to configure the system to use a proxy so that it can capture the packets and use its custom root CA to decode the SSL...

Remote Code Execution (RCE)

puppet is vulnerable to remote code execution RCE attacks. The library does not validate the paths when loading shared libraries, allowing a malicious user to create a custom fact that can escalate privileges during the next puppet run and execute arbitrary code...

PT-2018-10252 · Red Hat · Openshift Enterprise

Name of the Vulnerable Software and Affected Versions: Openshift Enterprise source-to-image versions prior to 1.1.10 Description: The issue is related to improper validation of user input and path sanitization. Archives containing relative file paths can cause files to be written or overwritten...

Out-of-bounds

In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code to sanity-check pathnames on NTFS can result in reading out-of-bounds memory...

Citrix XenMobile Server Insufficient Path Validation Vulnerability

Citrix XenMobile Server is a mobility management solution. The solution is able to manage mobile devices, set mobile policies and compliance rules, gain insight into mobile mobile network operations, and more. A security vulnerability exists in Citrix XenMobile Server that stems from the program...

CVE-2018-10650

There is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

Design/Logic Flaw

There is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

CVE-2018-10650

There is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

CVE-2018-10650

CVE-2018-10650 is an Insufficient Path Validation vulnerability in Citrix XenMobile Server. Affected versions are 10.8 before Rolling Patch 2 and 10.7 before Rolling Patch 3. The Citrix article CTX234879 documents multiple XenMobile issues; for this CVE, remediation is to apply the appropriate ro...

CVE-2018-10650

There is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

Citrix XenMobile 10.x Multiple Security Updates

Description of Problem A number of security vulnerabilities have been identified in Citrix XenMobile Server. The vulnerabilities have been assigned the following CVE numbers. Affecting XenMobile Server 10.7 and 10.8: CVE-2018-10653 High: XML External Entity XXE Processing Vulnerability in Citrix...

Input validation

A flaw was found in source-to-image function as shipped with Openshift Enterprise 3.x. An improper path validation of tar files in ExtractTarStreamFromTarReader in tar/tar.go leads to privilege escalation...

source-to-image: Improper path sanitization in ExtractTarStreamFromTarReader in tar/tar.go

A flaw was found in source-to-image function as shipped with Openshift Enterprise 3.x. An improper path validation of tar files in ExtractTarStreamFromTarReader in tar/tar.go leads to privilege escalation...