MICROSENS PLMISWM 10.3.1 Privilege Escalation

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Privilege escalation vulnerability product: MICROSENS Profi Line Modular Industrial Switch Web Manager MS652119PM vulnerable version: Firmware version 10.3.1 fixed versio...

MICROSENS Profi Line Switch 10.3.1 - Privilege Escalation

MICROSENS Profi Line Modular Industrial Switch Web Manager version 10.3.1 suffers from a privilege escalation vulnerability. title: Privilege escalation vulnerability product: MICROSENS Profi Line Modular Industrial Switch Web Manager MS652119PM vulnerable version: Firmware version 10.3.1 fixed...

MICROSENS Profi Line Switch 10.3.1 - Privilege Escalation

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Privilege escalation vulnerability product: MICROSENS Profi Line Modular Industrial Switch Web Manager MS652119PM vulnerable version: Firmware version 10.3.1 fixed versio...

Updated kernel-vserver packages fix security vulnerability

This kernel update provides an update to the 3.10 longterm branch, currently 3.10.28 and fixes the following security issues: The ath9khtcsetbssidmask function in drivers/net/wireless/ath/ath9k/htcdrvmain.c in the Linux kernel through 3.12 uses a BSSID masking approach to determine the set of MAC...

Emerson Network Power Avocent MergePoint Unity KVM Switch < 1.14 / 1.18 download.php filename Parameter Directory Traversal

The remote host is an Emerson Network Power Avocent MergePoint Unity KVM Switch with a firmware version prior to 1.14 or 1.18. It is, therefore, affected by a directory traversal vulnerability due to a failure to sanitize user-supplied input to the 'filename' parameter of the 'download.php' scrip...

Emerson Network Power Avocent MergePoint Unity KVM Switch Detection

Binary data emersonmpukvmdetect.nbin...

CVE-2013-6030

Directory traversal vulnerability on the Emerson Network Power Avocent MergePoint Unity 2016 aka MPU2016 KVM switch with firmware 1.9.16473 allows remote attackers to read arbitrary files via unspecified vectors, as demonstrated by reading the /etc/passwd file...

Directory traversal

Directory traversal vulnerability on the Emerson Network Power Avocent MergePoint Unity 2016 aka MPU2016 KVM switch with firmware 1.9.16473 allows remote attackers to read arbitrary files via unspecified vectors, as demonstrated by reading the /etc/passwd file...

CVE-2013-6030

CVE-2013-6030 affects the Emerson Network Power Avocent MergePoint Unity 2016 KVM Switch (MPU2016). A directory traversal vulnerability exists in the download.php handler due to insufficient sanitization of the filename parameter, enabling reading of arbitrary files (e.g., “/etc/passwd”). Affecte...

CVE-2013-6030

Directory traversal vulnerability on the Emerson Network Power Avocent MergePoint Unity 2016 aka MPU2016 KVM switch with firmware 1.9.16473 allows remote attackers to read arbitrary files via unspecified vectors, as demonstrated by reading the /etc/passwd file...

CVE-2013-7308

The OSPF implementation on the D-Link DES-3810-28 switch with firmware R2.20.B017 does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of servic...

CVE-2013-7308

The CVE-2013-0149 family covers OSPF LSA handling flaws across multiple vendors where duplicates of Link State ID in LSAs are not validated before LSA database operations, enabling DoS or information disclosure via crafted LSAs. Concrete examples from connected docs include: Cisco IOS/IOS-XE/NX-O...

CVE-2013-6645

Use-after-free vulnerability in the OnWindowRemovingFromRootWindow function in content/browser/webcontents/webcontentsviewaura.cc in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows user-assisted remote attackers to cause a denial of service or...

Design/Logic Flaw

Use-after-free vulnerability in the OnWindowRemovingFromRootWindow function in content/browser/webcontents/webcontentsviewaura.cc in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows user-assisted remote attackers to cause a denial of service or...

CVE-2013-6645

CVE-2013-6645 is a use-after-free in Chromium’s OnWindowRemovingFromRootWindow (web_contents_view_aura.cc) that can allow user-assisted remote denial of service via speech-input related vectors. Public references show Chromium/Chromium-based browsers were fixed in updates: openSUSE notes Chromium...

Huawei CloudEngine系列交换机安全绕过漏洞

BUGTRAQ ID: 64634 CloudEngine系列是华为公司面向下一代数据中心和高端园区推出的“云”级高性能交换机。 Huawei CloudEngine系列交换机的HWTACACS模块在实现上存在多个安全限制绕过漏洞。若攻击者拥有低权限的用户名称和密码并能够登录受影响设备，则可以利用这些漏洞绕过服务器身份验证检查，提升用户权限并执行任意命令。 0 Huawei CloudEngine Series Switches CE6800 Huawei CloudEngine Series Switches CE5800 Huawei CloudEngine Series...

CVE-2013-4776

NETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier, GS748Tv4 5.4.1.14, and GS510TP 5.0.4.4 allows remote attackers to cause a denial of service reboot or crash via a crafted HTTP request to filesystem/...

EMC Connectrix Manager Converged Network Edition远程代码执行漏洞

Bugtraq ID:64242 CVE ID:CVE-2013-6810 EMC Connectrix是一款网络交换机解决方案，EMC Connectrix Manager提供Connectrix server的接口，可对设备进行管理和保护。 EMC Connectrix Manager不正确限制对某些Servlet的访问，允许远程攻击者利用漏洞提交特殊的请求，可获取敏感文件信息，操作数据或执行任意代码。 0 EMC Connectrix Manager 12.x 厂商补丁： EMC ----- EMC Connectrix Manager Converged Network...

UBUNTU-CVE-2013-4495

The sendthemail function in server/svrmail.c in Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager before 4.2.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the email -M switch to qsub...

CVE-2013-5556

Cisco Nexus 1000V CVE-2013-5556 is a local-authenticated command-execution vulnerability in the license-installation module. Crafted input to the install all iso command can let an authenticated local attacker gain privileges and run arbitrary shell commands. Affected are Cisco Nexus 1000V switch...