Apache Guacamole terminal emulator buffer overflow vulnerability

Apache Guacamole is a clientless remote desktop gateway from the Apache Software Foundation that supports standard protocols such as VNC, RDP and SSH. terminal emulator is one of the terminal emulators. A buffer overflow vulnerability exists in Apache Guacamole terminal emulator versions 0.9.5...

January 19, 2018—KB4057400 (Preview of Monthly Rollup)

None None...

[SECURITY] Fedora 27 Update: rootsh-1.5.3-17.fc27

Rootsh is a wrapper for shells which logs all echoed keystrokes and terminal output to a file and/or to syslog. Its main purpose is the auditing of users who need a shell with root privileges. They start rootsh through the sudo mechanism...

Race condition

A race condition in Guacamole's terminal emulator in versions 0.9.5 through 0.9.10-incubating could allow writes of blocks of printed data to overlap. Such overlapping writes could cause packet data to be misread as the packet length, resulting in the remaining data being written beyond the end o...

CVE-2017-3158

A race condition in Guacamole's terminal emulator in versions 0.9.5 through 0.9.10-incubating could allow writes of blocks of printed data to overlap. Such overlapping writes could cause packet data to be misread as the packet length, resulting in the remaining data being written beyond the end o...

CVE-2017-3158

A race condition in Guacamole's terminal emulator in versions 0.9.5 through 0.9.10-incubating could allow writes of blocks of printed data to overlap. Such overlapping writes could cause packet data to be misread as the packet length, resulting in the remaining data being written beyond the end o...

UBUNTU-CVE-2017-3158

A race condition in Guacamole's terminal emulator in versions 0.9.5 through 0.9.10-incubating could allow writes of blocks of printed data to overlap. Such overlapping writes could cause packet data to be misread as the packet length, resulting in the remaining data being written beyond the end o...

CVE-2017-3158

CVE-2017-3158 affects Apache Guacamole’s terminal emulator, with vulnerable versions 0.9.5 through 0.9.10-incubating. The issue is a race condition where overlapping writes of blocks of printed data can cause packet data to be misread as the packet length, leading to writes beyond the end of a st...

CVE-2017-3158

Removed by vendor...

CVE-2017-3158

A race condition in Guacamole's terminal emulator in versions 0.9.5 through 0.9.10-incubating could allow writes of blocks of printed data to overlap. Such overlapping writes could cause packet data to be misread as the packet length, resulting in the remaining data being written beyond the end o...

USN-3528-1 ruby1.9.1, ruby2.3 vulnerabilities

It was discovered that Ruby incorrectly handled certain terminal emulator escape sequences. An attacker could use this to execute arbitrary code via a crafted user name. This issue only affected Ubuntu 16.04 LTS and Ubuntu 17.10. CVE-2017-10784 It was discovered that Ruby incorrectly handled...

January 3, 2018—KB4056893 (OS Build 10240.17738)

None None...

Wapiti 3.0.0 - The Web-Application Vulnerability Scanner

Wapiti allows you to audit the security of your websites or web applications. It performs "black-box" scans it does not study the source code of the web application by crawling the webpages of the deployed webapp, looking for scripts and forms where it can inject data. Once it gets the list of...

Code injection

Multiple Huawei Campus switches allow remote attackers to enumerate usernames via vectors involving use of SSH by the maintenance terminal...

CVE-2014-5394

Multiple Huawei Campus switches allow remote attackers to enumerate usernames via vectors involving use of SSH by the maintenance terminal...

Xplico - Remote Code Execution (Metasploit)

Xplico - Remote Code Execution Metasploit This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Xplico Remote Code Execution', 'Description' = %q This module exploits command injection vulnerability...

Hawt.io admin terminal cross-site request forgery vulnerability

Hawt.io is a web console for managing Java frameworks. admin terminal is one of the management terminals. A cross-site request forgery vulnerability exists in the admin terminal in Hawt.io. A remote attacker could use this vulnerability to execute commands on the Karaf server...

Hawt.io admin terminal command execution vulnerability

Hawt.io is a web console for managing Java frameworks. admin terminal is one of the management terminals. A security vulnerability exists in the admin terminal in Hawt.io, which is caused by the program failing to require authentication. A remote attacker can exploit this vulnerability to execute...

Crips - IP Tools To quickly get information about IP Address's, Web Pages and DNS records

This Tools is a collection of online IP Tools that can be used to quickly get information about IP Address's, Web Pages and DNS records. Menu Whois lookup Traceroute DNS Lookup Reverse DNS Lookup GeoIP Lookup Port Scan Reverse IP Lookup INSTALL & UPDATE Exit Whois lookup Determine the registered...

Arbitrary Command Execution

hawtio-karaf-terminal is vulnerable to arbitrary command execution. Attackers can execute arbitrary commands through the admin terminal as it doesn't require authentication...