9837 matches found
Windows Service Trusted Path Privilege Escalation
Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...
Scientific Linux Security Update : kdelibs on SL6.x i386/x86_64
The kdelibs packages provide libraries for the K Desktop Environment KDE. An input sanitization flaw was found in the KSSL KDE SSL Wrapper API. An attacker could supply a specially crafted SSL certificate for example, via a web page to an application using KSSL, such as the Konqueror web browser,...
Scientific Linux Security Update : kernel on SL5.x i386/x86_64
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security fixes : - The maximum file offset handling for ext4 file systems could allow a local, unprivileged user to cause a denial of service. CVE-2011-2695, Important - IPv6 fragment identification value...
Scientific Linux Security Update : exim on SL4.x, SL5.x i386/x86_64
A privilege escalation flaw was discovered in Exim. If an attacker were able to gain access to the 'exim' user, they could cause Exim to execute arbitrary commands as the root user. CVE-2010-4345 This update adds a new configuration file, '/etc/exim/trusted-configs'. To prevent Exim from running...
CentOS Update for exim CESA-2011:0153 centos4 x86_64
Check for the Version of exim OpenVAS Vulnerability Test CentOS Update for exim CESA-2011:0153 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
CentOS Update for exim CESA-2011:0153 centos5 x86_64
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2012-4024
Stack-based buffer overflow in the getcomponent function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote attackers to execute arbitrary code via a crafted list file aka a crafted file for the -ef option. NOTE: probably in most cases, the list file is a trusted file...
Mac OS X Admin Group User List
Using the supplied credentials, Nessus was able to extract the member list of the 'Admin' and 'Wheel' groups. Members of these groups have administrative access to the remote system. TRUSTED...
Microsoft Office for Mac Improper Folder Permissions Local Privilege Escalation Vulnerability
Description Microsoft Office for Mac is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with administrator privileges, resulting in a complete compromise of the affected computer. Microsoft Office for Mac 2011 is vulnerable...
Microsoft Windows CVE-2012-1890 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Technologies Affected...
PT-2012-4669 · Cyberoam · Cyberoam Utm
Name of the Vulnerable Software and Affected Versions: Cyberoam UTM appliances affected versions not specified Description: The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations. This...
qt security and bug fix update
1:4.6.2-24 - Resolves: bz734444, list of trusted CA certificates should not be compiled into library 1:4.6.2-23 - Resolves: bz805433, CVE-2011-3922 1:4.6.2-22 - Resolves: bz694684, phonon crash 1:4.6.2-21 - Resolves: rhbz757793, add OpenGL 3.1, 3.2, 3.3 and 4.0 recognition to QGLFormat...
Secunia Research: Network Instruments Observer SNMP Processing Buffer Overflows
====================================================================== Secunia Research 07/06/2012 - Network Instruments Observer - - SNMP Processing Buffer Overflows - ====================================================================== Table of Contents Affected...
Microsoft Windows CVE-2012-1865 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Technologies Affected...
Microsoft Windows CVE-2012-1864 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Technologies Affected...
Oracle Java GlueGen Arbitrary Native Library Loading Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the Java GlueGen library...
White House Security Czar Howard Schmidt Retiring
Howard Schmidt, the top White House information security adviser, is retiring after more than two years on the job and several decades in security both in government and private industry. Schmidt is in his second stint as the White House security chief and he’s leaving at a time when cybersecurit...
Microsoft Windows CVE-2012-0180 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Technologies Affected...
Design/Logic Flaw
The GENESIS32 IcoSetServer ActiveX control in ICONICS GENESIS32 9.21 and BizViz 9.21 configures the trusted zone on the basis of user input, which allows remote attackers to execute arbitrary code via a crafted web site, related to a "Workbench32/WebHMI component SetTrustedZone Policy...
CVE-2011-5088
The GENESIS32 IcoSetServer ActiveX control in ICONICS GENESIS32 9.21 and BizViz 9.21 configures the trusted zone on the basis of user input, which allows remote attackers to execute arbitrary code via a crafted web site, related to a "Workbench32/WebHMI component SetTrustedZone Policy...