Linux kernel futex_requeue privilege elevation

Added: 12/03/2014 CVE: CVE-2014-3153 BID: 67906 OSVDB: 107752 Background The futex system call in Linux provides a mechanism for user-space locking. Problem A vulnerability in the Linux kernel allows an unprivileged user to gain root access using a specially crafted futexrequeue call. Resolution...

The Windows Kerberos vulnerability details becoming clearer-vulnerability warning-the black bar safety net

The day before yesterday, Microsoft's unconventional update fixes a particularly serious defect: any login to the domain where the users can be their own elevated privileges to other users privileges, even including the domain administrator privileges. The author from the pre-notification informe...

Microsoft Releases Emergency Out-of-Band Patch for Kerberos Bug MS14-068

Microsoft today released an "out-of-band" security updates to fix a critical vulnerability in all supported versions of its Windows Server software that cyber criminals are exploiting to compromise whole networks of computers. The Emergency patch release comes just one week after Microsoft provid...

Microsoft Office IME (Japanese) Privilege Elevation Vulnerability (2992719)

This host is missing a moderate security update according to Microsoft Bulletin MS14-078. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows IME (Japanese) Privilege Elevation Vulnerability (2992719)

This host is missing a moderate security update according to Microsoft Bulletin MS14-078. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft SharePoint Foundation Privilege Elevation Vulnerability (3000431)

This host is missing an important security update according to Microsoft Bulletin MS14-073. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Microsoft Windows TCP/IP Privilege Elevation Vulnerability (2989935)

This host is missing an important security update according to Microsoft Bulletin MS14-070. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft .NET Framework Privilege Elevation Vulnerability (3005210)

This host is missing a critical security update according to Microsoft Bulletin MS14-072. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS14-072: Vulnerability in .NET Framework Could Allow Elevation of Privilege (3005210)

The remote Windows host has a version of the Microsoft .NET Framework that is affected by a vulnerability related to how it handles TypeFilterLevel checks for some malformed objects. This can be used by a remote attacker to gain privilege elevation via a specially crafted packet sent to a host th...

CVE-2014-8442

Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to complete a transition from Low Integrity t...

CVE-2014-6349

Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," a different vulnerability than CVE-2014-6350...

PT-2014-7154

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT Gold and 8.1 Description The issue is...

[SE-2014-01] Breaking Oracle Database through Java exploits (details)

Hello All, Oracle Oct 2014 CPU addresses 22 security issues affecting Java VM implementation embedded in Oracle Database software. We have published details of the fixed issues and a description of some privilege elevation techniques abusing a complete Java security sandbox bypass condition for...

PT-2014-1998

Name of the Vulnerable Software and Affected Versions boot2docker versions 1.2 and earlier Description The issue is related to the Docker daemon managed by boot2docker, which improperly enables unauthenticated TCP connections by default. This makes it easier for remote attackers to gain privilege...

PT-2014-1611

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 7 through 11 Description The issue allows an attacker to elevate their privileges. Using this issue, an attacker cannot execute arbitrary code directly, but it can be used to exploit other vulnerabilities...

PT-2014-1664

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 Description The issue allows remote attackers to gain privileges via vectors involving Internet Explorer. It exists in Microsoft .NET Framework and allows an...

[security bulletin] HPSBST02958 rev.1 - HP MPIO Device Specific Module Manager, Local Execution of Arbitrary Code with Privilege Elevation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04048122 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04048122 Version: 1 HPSBST02958 rev....

[security bulletin] HPSBMU03118 rev.1 - HP Systems Insight Manager (SIM) on Linux and Windows, Multiple Remote Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04468121 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04468121 Version: 1 HPSBMU03118 rev....

Microsoft Re-Releases Broken Security Patch MS14-045

Microsoft today re-released security bulletin MS14-045, which was pulled shortly after the August Patch Tuesday updates because a number of users reported crashes and blue screens. The patch was removed from Windows Update on Aug. 15, three days after it was released as part of Microsoft’s monthl...

MS14-045: Vulnerabilities in kernel-mode drivers could allow elevation of privilege: August 12, 2014

Resolves vulnerabilities in Windows that could allow elevation of privilege if an attacker logs on to the system and runs a specially crafted application.INTRODUCTIONMicrosoft has released security bulletin MS14-045. To learn more about this security bulletin:Home...