Linux: Home directory for root user

The password file stores information about users such like username, UID, GID, etc. This script tests, if home directories for users are located in /home. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/...

Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2019-1656)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-18932

log.c in Squid Analysis Report Generator sarg through 2.3.11 allows local privilege escalation. By default, it uses a fixed temporary directory /tmp/sarg. As the root user, sarg creates this directory or reuses an existing one in an insecure manner. An attacker can pre-create the directory, and...

HPE Intelligent Management Center PLAT Stack Buffer Overflow (CVE-2018-7074)

A stack buffer overflow vulnerability has been reported in HPE Intelligent Management Center PLAT. The vulnerability is due to an overly large block size parameter provided in the TFTP packet data. Successful exploitation could results in arbitrary code execution under the context of the SYSTEM. ...

CVE-2012-0945

whoopsie-daisy before 0.1.26: Root user can remove arbitrary files...

CVE-2012-0945

whoopsie-daisy before 0.1.26: Root user can remove arbitrary files...

Design/Logic Flaw

whoopsie-daisy before 0.1.26: Root user can remove arbitrary files...

CVE-2012-0945

CVE-2012-0945 affects whoopsie-daisy prior to 0.1.26. The reported vulnerability allows the root user to remove arbitrary files, describing a root‑level impact due to the underlying cause in whoopsie-daisy. The entry is corroborated across multiple sources in this set (e.g., Red Hat/TLP and NVD r...

CVE-2019-16737

The processCommandSetMac function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...

CVE-2019-16730

processCommandUpgrade in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...

CVE-2019-16736

A stack-based buffer overflow in processCommandUploadSnapshot in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to cause denial of service or run arbitrary code as the root user...

CVE-2019-16733

processCommandSetUid in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...

CVE-2019-17364

The processCommandUploadLog function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...

Stack overflow

A stack-based buffer overflow in processCommandUploadSnapshot in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to cause denial of service or run arbitrary code as the root user...

Stack overflow

A stack-based buffer overflow in processCommandUploadLog in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to cause denial of service or run arbitrary code as the root user...

Design/Logic Flaw

processCommandSetUid in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...

Default credentials

Use of default credentials for the TELNET server in Petwant PF-103 firmware 4.3.2.50 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...

Code injection

Unencrypted HTTP communications for firmware upgrades in Petalk AI and PF-103 allow man-in-the-middle attackers to run arbitrary code as the root user...

CVE-2019-16736

A stack-based buffer overflow in processCommandUploadSnapshot in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to cause denial of service or run arbitrary code as the root user...

CVE-2019-16735

The CVE-2019-16735 issue affects Petwant PF-103 firmware (4.22.2.42) and Petalk AI (3.2.2.30). It is a stack-based buffer overflow in libcommon.so::processCommandUploadLog, enabling remote attackers to cause denial of service or execute arbitrary code with root privileges. The available documents...