MAL-014

MAL-014: Lettura Arbitraria di File Autenticata in VMware vCenter Server Il componente API "com.vmware.appliance.version1.system.update.set" è vulnerabile a un attacco di iniezione di flag che può essere sfruttato con il plugin "com.vmware.showlog" per leggere file arbitrari come utente "root" su...

EUVD-2017-14060

Malware in sbrugna...

Privilege escalation

VMware vCenter Server Appliance vCSA 6.5 before 6.5 U1d contains a local privilege escalation vulnerability via the 'showlog' plugin. Successful exploitation of this issue could result in a low privileged user gaining root level privileges over the appliance base OS...

CVE-2017-4943

VMware vCenter Server Appliance vCSA 6.5 before 6.5 U1d contains a local privilege escalation vulnerability via the 'showlog' plugin. Successful exploitation of this issue could result in a low privileged user gaining root level privileges over the appliance base OS...

CVE-2017-4943

VMware vCenter Server Appliance vCSA 6.5 before 6.5 U1d contains a local privilege escalation vulnerability via the 'showlog' plugin. Successful exploitation of this issue could result in a low privileged user gaining root level privileges over the appliance base OS...

PT-2017-16225

Name of the Vulnerable Software and Affected Versions VMware vCenter Server Appliance vCSA versions 6.5 before 6.5 U1d Description The issue is a local privilege escalation vulnerability via the showlog plugin. Successful exploitation could result in a low-privileged user gaining root-level...

CVE-2017-4943: Out-of-bounds Write

VMware vCenter Server Appliance vCSA 6.5 before 6.5 U1d contains a local privilege escalation vulnerability via the 'showlog' plugin. Successful exploitation of this issue could result in a low privileged user gaining root level privileges over the appliance base OS...

CVE-2009-0608

CVE-2009-0608 describes an integer overflow in the showLog function of fake_log_device.c within liblog on Android 1.0. Sending a large number of input lines can trigger a buffer overflow with unspecified additional impact. Affected component: Open Handset Alliance Android liblog (fake_log_device....

CVE-2009-0608: Undefined Security Weakness

Integer overflow in the showLog function in fakelogdevice.c in liblog in Open Handset Alliance Android 1.0 allows attackers to trigger a buffer overflow and possibly have unspecified other impact by sending a large number of input lines...