CVE-2015-4314

The System Snapshot feature in Cisco TelePresence Video Communication Server VCS Expressway X8.5.1 allows remote authenticated users to obtain sensitive password-hash information by reading the snapshot file, aka Bug ID CSCuv40422...

CVE-2015-4314

Cisco TelePresence Video Communication Server Expressway (X8.5.1) is affected by CVE-2015-4314 in the System Snapshot feature. An authenticated, remote attacker can read the snapshot file and obtain password hashes, enabling information disclosure. The vulnerability requires authenticated access;...

Cisco TelePresence Video Communication Server Expressway Password Hash Acquisition Vulnerability

Cisco TelePresence Video Communication Server is a video conferencing solution that integrates h.323 and SIP. A security vulnerability exists in Cisco TelePresence Video Communication Server Expressway that allows an authenticated user to download a snapshot of the system and obtain password hash...

Directory traversal

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls...

CVE-2015-5531

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls...

UBUNTU-CVE-2015-5531

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls...

CVE-2015-5531

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls...

CVE-2015-5531

CVE-2015-5531 is a directory traversal vulnerability in Elasticsearch affecting versions 1.0.0 through 1.6.0, allowing a remote attacker to read arbitrary files via vectors related to the snapshot API. Multiple connected sources document the issue and reproduce/exploit paths (e.g., elasticsearch ...

FreeBSD : elasticsearch -- directory traversal attack via snapshot API (ae8c09cb-32da-11e5-a4a5-002590263bf5)

Elastic reports : Vulnerability Summary: Elasticsearch versions from 1.0.0 to 1.6.0 are vulnerable to a directory traversal attack. Remediation Summary: Users should upgrade to 1.6.1 or later, or constrain access to the snapshot API to trusted sources. %NASLMINLEVEL 70300 C Tenable Network...

Important: Red Hat Security Advisory: Red Hat Gluster Storage 3.1 update

Red Hat Gluster Storage 3.1, which fixes multiple security issues, several bugs, and adds various enhancements, is now available. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Dahua Camera onvif Protocol Authentication Vulnerability

Zhejiang Dahua Technology Co., Ltd. is a leading supplier of surveillance products and solution service providers, providing leading video storage, front-end, display control and intelligent transportation series of products for the world. Dahua IPC-HF2100 and other cameras onvif protocol snapsho...

elasticsearch -- directory traversal attack via snapshot API

Elastic reports: Vulnerability Summary: Elasticsearch versions from 1.0.0 to 1.6.0 are vulnerable to a directory traversal attack. Remediation Summary: Users should upgrade to 1.6.1 or later, or constrain access to the snapshot API to trusted sources...

Elasticsearch files access

snapshot API files access...

Elasticsearch vulnerability CVE-2015-4165

Summary: Elasticsearch versions 1.0.0 - 1.5.2 are vulnerable to an engineered attack on other applications on the system. The snapshot API may be used indirectly to place snapshot metadata files into locations that are writeable by the user running the Elasticsearch process. It is possible to...

Elasticsearch Engineered Attack Vulnerability CVE-2015-4165

Summary: Elasticsearch versions 1.0.0 - 1.5.2 are vulnerable to an engineered attack on other applications on the system. The snapshot API may be used indirectly to place snapshot metadata files into locations that are writeable by the user running the Elasticsearch process. It is possible to...

DEBIAN-CVE-2015-3813

The fragmentaddwork function in epan/reassemble.c in the packet-reassembly feature in Wireshark 1.12.x before 1.12.5 does not properly determine the defragmentation state in a case of an insufficient snapshot length, which allows remote attackers to cause a denial of service memory consumption vi...

UBUNTU-CVE-2015-3813

The fragmentaddwork function in epan/reassemble.c in the packet-reassembly feature in Wireshark 1.12.x before 1.12.5 does not properly determine the defragmentation state in a case of an insufficient snapshot length, which allows remote attackers to cause a denial of service memory consumption vi...

Red Hat Enterprise Virtualization Manager Very Long Snapshot Chain Denial of Service Vulnerability

Red Hat Enterprise Virtualization Manager is an enterprise virtualization management application solution from Red Hat. Red Hat Enterprise Virtualization Manager failed to set the correct snapshot creation permissions during a hot storage migration between two domains, allowing an authenticated...

CVE-2015-0237

Red Hat Enterprise Virtualization RHEV Manager before 3.5.1 ignores the permission to deny snapshot creation during live storage migration between domains, which allows remote authenticated users to cause a denial of service prevent host start by creating a long snapshot chain...

Code injection

Red Hat Enterprise Virtualization RHEV Manager before 3.5.1 ignores the permission to deny snapshot creation during live storage migration between domains, which allows remote authenticated users to cause a denial of service prevent host start by creating a long snapshot chain...