3572 matches found
mapr Information Disclosure
Hello, The mapr web frontend component creates an information disclosure vulnerability. During the setup of mapr the configure.sh script calls a function ConfigureWSRole: function ConfigureWSRole if $clientOnly -eq 0 -a $dontChangeSecurityPermissionsOn -eq 0 ; then ConfigureRunUserForWS fi This...
CVE-2017-5671
Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43, and PC42 industrial printers before 10.11.013310 and 10.12.x before 10.12.013309 have /usr/bin/lua installed setuid to the itadmin account, which allows local users to conduct a BusyBox jailbreak attack and obtain root privileges by overwriti...
Code injection
Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43, and PC42 industrial printers before 10.11.013310 and 10.12.x before 10.12.013309 have /usr/bin/lua installed setuid to the itadmin account, which allows local users to conduct a BusyBox jailbreak attack and obtain root privileges by overwriti...
CVE-2017-5671
CVE-2017-5671 affects Honeywell Intermec PM23/PM42/PM43/PC23/PC43/PD43/PC42 printers (firmware before 10.11.013310 and 10.12.x before 10.12.013309). The vulnerability arises because /usr/bin/lua is installed setuid to the itadmin account, enabling local users to perform a BusyBox jailbreak and es...
MS17-010: Security Update for Microsoft Windows SMB Server (4013389) (ETERNALBLUE) (ETERNALCHAMPION) (ETERNALROMANCE) (ETERNALSYNERGY) (WannaCry) (EternalRocks) (Petya) (uncredentialed check)
The remote Windows host is affected by the following vulnerabilities : - Multiple remote code execution vulnerabilities exist in Microsoft Server Message Block 1.0 SMBv1 due to improper handling of certain requests. An unauthenticated, remote attacker can exploit these vulnerabilities, via a...
Microsoft Office Information Disclosure Vulnerability (CNVD-2017-03528)
Microsoft Office is an office software suite of products developed by the American Microsoft Corporation Microsoft. Microsoft Office has an information disclosure vulnerability that can be exploited by an attacker to submit a special file that can be induced to be parsed by Shadow Tiger to obtain...
Still Getting Served: A Look at Recent Malvertising Campaigns Involving Exploit Kits
Malvertising occurs when an online advertising network knowingly or unknowingly serves up malicious advertisements on a website. Malvertisements are a type of “drive-by” threat that tend to result in users being infected with malware for simply visiting a website. The victims of this threat are...
MS17-010: Security Update for Microsoft Windows SMB Server (4013389) (ETERNALBLUE) (ETERNALCHAMPION) (ETERNALROMANCE) (ETERNALSYNERGY) (WannaCry) (EternalRocks) (Petya)
The remote Windows host is missing a security update. It is, therefore, affected by the following vulnerabilities : - Multiple remote code execution vulnerabilities exist in Microsoft Server Message Block 1.0 SMBv1 due to improper handling of certain requests. An unauthenticated, remote attacker...
Security fix for the ALT Linux 8 package shadow version 1:4.2.1-alt7.M80P.1
1:4.2.1-alt7.M80P.1 built March 13, 2017 Mikhail Efremov in task 179286 --- March 7, 2017 Mikhail Efremov - Backported from upstream git: + Fix a resource leak in syslogsg. + Fix a resource leak in libmis/idmapping.c. + Free memory on error path. - Fix user busy errors at userdel patch from Fedor...
Debian DLA-838-1 : shadow security update
Tobias Stoeckmann discovered that su does not properly handle clearing a child PID. A local attacker can take advantage of this flaw to send SIGKILL to other processes with root privileges, resulting in denial of service. For Debian 7 'Wheezy', these problems have been fixed in version...
Debian DSA-3793-1 : shadow - security update
Several vulnerabilities were discovered in the shadow suite. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2016-6252 An integer overflow vulnerability was discovered, potentially allowing a local user to escalate privileges via crafted input to the...
[SECURITY] [DLA 838-1] shadow security update
Package : shadow Version : 4.1.5.1-1+deb7u1 CVE ID : CVE-2017-2616 Debian Bug : 855943 Tobias Stoeckmann discovered that su does not properly handle clearing a child PID. A local attacker can take advantage of this flaw to send SIGKILL to other processes with root privileges, resulting in denial ...
DLA-838-1 shadow - security update
Bulletin has no description...
[SECURITY] [DSA 3793-1] shadow security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3793-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 24, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3793-1] shadow security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3793-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 24, 2017 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3793-1 (shadow - security update)
Several vulnerabilities were discovered in the shadow suite. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-6252 An integer overflow vulnerability was discovered, potentially allowing a local user to escalate privileges via crafted input to the...
DSA-3793-1 shadow - security update
Bulletin has no description...
Debian: Security Advisory (DSA-3793-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...