Fedora 14 : libvirt-0.8.3-9.fc14 (2011-4896)

Fix for CVE-2011-1486, error reporting in libvirtd is not thread safe Fix specfil to create /var/lib/libvirt with proper permissions. fix a lack of API check on read-only connections this build fix one crash in the the error handling fix a lack of API check on read-only connections Note that...

RHEL 5 / 6 : libvirt (RHSA-2011:0391)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0391 advisory. - libvirt: several API calls do not honour read-only connection CVE-2011-1146 Note that Nessus has not tested for this issue but has instead reli...

libvirt: several API calls do not honour read-only connection

libvirt.c in the API in Red Hat libvirt 0.8.8 does not properly restrict operations in a read-only connection, which allows remote attackers to cause a denial of service host OS crash or possibly execute arbitrary code via a 1 virNodeDeviceDettach, 2 virNodeDeviceReset, 3 virDomainRevertToSnapsho...

DEBIAN-CVE-2011-1146

libvirt.c in the API in Red Hat libvirt 0.8.8 does not properly restrict operations in a read-only connection, which allows remote attackers to cause a denial of service host OS crash or possibly execute arbitrary code via a 1 virNodeDeviceDettach, 2 virNodeDeviceReset, 3 virDomainRevertToSnapsho...

Mandriva Update for tomcat5 MDVSA-2011:030 (tomcat5)

Check for the Version of tomcat5 OpenVAS Vulnerability Test Mandriva Update for tomcat5 MDVSA-2011:030 tomcat5 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

SuSE 11 Security Update : NetworkManager (SAT Patch Number 3094)

dbus-glib allowed local users to write properties that were exported read-only via dbus. CVE-2010-1172 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell,...

Prevx 3.0.5.206 ACCESS DENIED Exploit

Exploit for windows platform in category local exploits ===================================== Prevx 3.0.5.206 ACCESS DENIED Exploit ===================================== Author : STRELiTZIA Software : Prevx 3.0.5.206 and old Tested on : Windows All ============================ = Description =...

Fedora 13 : DeviceKit-power-0.9.0-2.fc13 / dbus-glib-0.86-4.fc13 (2010-12863)

It was discovered that dbus-glib did not enforce the 'access' flag on exported GObject properties. If such a property were read/write internally but specified as read-only externally, a malicious, local user could use this flaw to modify that property of an application. Such a change could impact...

FreeBSD privilege escalation

Under some conditions it's possible to bypass read-onyy flag for mbuf pages...

Oracle Database Server Crafted View Privilege Escalation (CVE-2006-1705)

A privilege escalation vulnerability exists in the Oracle Database Server product. The vulnerability is caused by a design error in the processing of Join Views. An attacker with limited privileges may exploit this vulnerability to gain escalated privileges. Leveraging the vulnerability allows an...

Ewebeditor database is read-only intrusion-vulnerability warning-the black bar safety net

Ewebeditor is a very common website, the core of the program, Feature: the default data-/db/ewebeditor. mdb is the default path adminlogin. asp the default administrator: admin password: adminadmin888 Version of ewebedit into the background for added style. Get the webshell is very easy. Sometime...

kernel: ext4: Avoid null pointer dereference when decoding EROFS w/o a journal

The ext4decodeerror function in fs/ext4/super.c in the ext4 filesystem in the Linux kernel before 2.6.32 allows user-assisted remote attackers to cause a denial of service NULL pointer dereference, and possibly have unspecified other impact, via a crafted read-only filesystem that lacks a journal...

SuSE 10 Security Update : libvirt (ZYPP Patch Number 5869)

libvirt misses some read-only connection checks for certain methods. This flaw enables local unprivileged users for example to migrate virtual machines without authentication. CVE-2008-5086 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

For the udf. dll mention the right-vulnerability warning-the black bar safety net

删除 udf.dll 和 langousterudf.dll new udf. dll and langousterudf. the dll is set to read-only,permissions, limit prevents all langousterudf. dll private network mA ! Program code program code net stop mysql del %SystemRoot%\system32\udf.dll /A/F/Q del %SystemRoot%\udf.dll /A/F/Q del...

Low: Red Hat Security Advisory: nfs-utils security and bug fix update

An updated nfs-utils package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nfs-utils package provides a daemon for the kernel NFS server and related tools. It was discovered that...

RHEL 5 : nfs-utils (RHSA-2009:1321)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2009:1321 advisory. The nfs-utils package provides a daemon for the kernel NFS server and related tools. It was discovered that nfs-utils did not use tcpwrappers...

Fedora 10 : libvirt-0.5.1-2.fc10 (2008-11443)

fix missing read-only access checks, fixes CVE-2008-5086 - upstream release 0.5.1 - mostly bugfixes e.g 473071 - some driver improvements Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Ubuntu Update for libvirt vulnerability USN-694-1

Ubuntu Update for Linux kernel vulnerabilities USN-694-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6941.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libvirt vulnerability USN-694-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-694-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libvirt: missing checks for read-only connection

Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions...