PT-2013-1100 · Debian +2 · Debian +2

Name of the Vulnerable Software and Affected Versions: Debian GNU/Linux versions prior to 3.8.11 Linux kernel versions prior to 3.8.11 Description: The issue concerns multiple vulnerabilities in the Linux package of the Debian GNU/Linux operating system, which can be exploited by a local attacker...

CVE-2012-3520

The Netlink implementation in the Linux kernel before 3.2.30 does not properly handle messages that lack SCMCREDENTIALS data, which might allow local users to spoof Netlink communication via a crafted message, as demonstrated by a message to 1 Avahi or 2 NetworkManager...

CVE-2012-0559

Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Billing...

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Billing...

CVE-2012-0559

Technical details for CVE-2012-0559 are not publicly available in the provided documents. No concrete information on affected products/versions, root cause, exploit vectors, impact, or remediation is disclosed; monitor for updates.

CVE-2012-0559

Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Billing...

CVE-2012-0530

Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect integrity via unknown vectors related to eProcurement...

CVE-2012-0530

Technical details about CVE-2012-0530 are not publicly provided in the supplied documents. The available entries reference an unspecified vulnerability in Oracle PeopleSoft SCM (9.0/9.1) with unknown vectors. Monitor for updates.

CVE-2012-0530

Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect integrity via unknown vectors related to eProcurement...

CVE-2012-0559: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Billing...

CVE-2012-0530: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect integrity via unknown vectors related to eProcurement...

CVE-2011-2277

Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 Bundle 36 and 9.1 Bundle 13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Purchasing...

CVE-2011-2277

Affected software: Oracle PeopleSoft SCM component in Oracle PeopleSoft Products 9.0 Bundle #36 and 9.1 Bundle #13. The CVE describes an unspecified vulnerability that allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Purchasing. Root cause d...

CVE-2011-2277

Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 Bundle 36 and 9.1 Bundle 13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Purchasing...

CVE-2011-2277: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 Bundle 36 and 9.1 Bundle 13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Purchasing...

Fedora System Compromised, But No Changes Made

The infrastructure of the Fedora Project was compromised over the weekend and an account belonging to a Fedora contributor was taken over by an attacker. However, Fedora officials said they don’t believe that the attacker was able to push any changes to the Fedora package system or make any actua...

Redmine SCM Repository 0.9.x/1.0.x - Arbitrary Command Execution (Metasploit)

$Id: redminescmexec.rb 11516 2011-01-08 01:13:26Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Redmine SCM Repository Arbitrary Command Execution

$Id: redminescmexec.rb 11414 2010-12-25 14:43:13Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Redmine SCM Repository Arbitrary Command Execution

This module exploits an arbitrary command execution vulnerability in the Redmine repository controller. The flaw is triggered when a rev parameter is passed to the command line of the SCM tool without adequate filtering. Module Options msf use exploit/unix/webapp/redmine/scmexec msf...

Redmine SCM Repository - Arbitrary Command Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Redmine SCM Repository Arbitrary Command Execution', 'Description' = %q This module exploits an arbitrary command execution...