Lucene search
+L

537 matches found

UbuntuCve
UbuntuCve
added 2011/01/25 1:0 a.m.24 views

CVE-2011-0640

The default configuration of udev on Linux does not warn the user before enabling additional Human Interface Device HID functionality over USB, which allows user-assisted attackers to execute arbitrary programs via crafted USB data, as demonstrated by keyboard and mouse data sent by malware on a...

6.9CVSS7.3AI score0.00352EPSS
Exploits0References1
CVE
CVE
added 2011/01/25 12:0 a.m.73 views

CVE-2011-0640

CVE-2011-0640 concerns the default udev configuration on Linux, which does not warn before enabling HID functionality over USB. This can let user-assisted attackers run arbitrary code via crafted USB input (e.g., keyboard/mouse data from aスマートフォン-connected device), as documented by multiple sourc...

6.9CVSS9.5AI score0.00352EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2011/01/25 12:0 a.m.31 views

CVE-2011-0640

The default configuration of udev on Linux does not warn the user before enabling additional Human Interface Device HID functionality over USB, which allows user-assisted attackers to execute arbitrary programs via crafted USB data, as demonstrated by keyboard and mouse data sent by malware on a...

9.6AI score0.00352EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2010/12/09 12:0 a.m.21 views

Fedora Update for udev FEDORA-2010-17912

Check for the Version of udev OpenVAS Vulnerability Test Fedora Update for udev FEDORA-2010-17912 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

4CVSS0.3AI score0.02323EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2010/12/09 12:0 a.m.24 views

Fedora Update for udev FEDORA-2010-17912

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

4CVSS9.5AI score0.02323EPSS
Exploits0References2
NVD
NVD
added 2010/12/07 10:0 p.m.25 views

CVE-2010-4176

plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users...

4CVSS5.9AI score0.02323EPSS
Exploits0References9
Prion
Prion
added 2010/12/07 10:0 p.m.14 views

Code injection

plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users...

4CVSS6.4AI score0.02323EPSS
Exploits0References9
UbuntuCve
UbuntuCve
added 2010/12/07 10:0 p.m.18 views

CVE-2010-4176

plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users...

4CVSS7.1AI score0.02323EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2010/12/07 9:0 p.m.56 views

CVE-2010-4176

plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users...

4CVSS7.2AI score0.02323EPSS
Exploits0
CVE
CVE
added 2010/12/07 9:0 p.m.60 views

CVE-2010-4176

CVE-2010-4176 describes a permission issue in plymouth-pretrigger.sh used by dracut/udev on Fedora 13 and 14. The script sets weak permissions on the /dev/systty device file, enabling remote authenticated users to read terminal data from tty0 for local users. Connected sources (OSV/OpenVAS/CVE re...

4CVSS8.4AI score0.02323EPSS
Exploits0References9Affected Software2
Cvelist
Cvelist
added 2010/12/07 9:0 p.m.37 views

CVE-2010-4176

plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users...

8.7AI score0.02323EPSS
Exploits0References9
Tenable Nessus
Tenable Nessus
added 2010/12/03 12:0 a.m.21 views

Fedora 13 : udev-153-5.fc13 (2010-17912)

It was discovered that /dev/systty device file created by dracut-generated initramfs scripts used an insecure file permissions. This could possibly allow local user to snoop on other user's terminal. Updated dracut no longer creates this file as device file, rather creates it a symbolic link to...

4CVSS7.3AI score0.02323EPSS
Exploits0References3
Fedora
Fedora
added 2010/12/02 7:9 p.m.29 views

[SECURITY] Fedora 13 Update: udev-153-5.fc13

The udev package contains an implementation of devfs in userspace using sysfs and netlink...

4CVSS4.1AI score0.02323EPSS
Exploits0
OpenVAS
OpenVAS
added 2010/12/02 12:0 a.m.15 views

Fedora Update for udev FEDORA-2010-17930

Check for the Version of udev OpenVAS Vulnerability Test Fedora Update for udev FEDORA-2010-17930 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

4CVSS0.2AI score0.02323EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2010/12/02 12:0 a.m.28 views

Fedora Update for dracut FEDORA-2010-17930

Check for the Version of dracut OpenVAS Vulnerability Test Fedora Update for dracut FEDORA-2010-17930 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

4CVSS9.5AI score0.02323EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2010/12/02 12:0 a.m.14 views

Fedora Update for udev FEDORA-2010-17930

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

4CVSS9.5AI score0.02323EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2010/11/28 12:0 a.m.15 views

Fedora 14 : dracut-006-5.fc14 / udev-161-7.fc14 (2010-17930)

It was discovered that /dev/systty device file created by dracut-generated initramfs scripts used an insecure file permissions. This could possibly allow local user to snoop on other user's terminal. Updated dracut no longer creates this file as device file, rather creates it a symbolic link to...

4CVSS7.3AI score0.02323EPSS
Exploits0References4
Fedora
Fedora
added 2010/11/24 10:38 p.m.27 views

[SECURITY] Fedora 14 Update: udev-161-7.fc14

udev is a collection of tools and a daemon to manage events received from the kernel and deal with them in user-space. Primarily this involves managing permissions, and creating and removing meaningful symlinks to device nodes in /dev when hardware is discovered or removed from the system...

4CVSS1.4AI score0.02323EPSS
Exploits0
Fedora
Fedora
added 2010/11/24 10:38 p.m.50 views

[SECURITY] Fedora 14 Update: dracut-006-5.fc14

Dracut contains tools to create a bootable initramfs for 2.6 Linux kernels. Unlike existing implementations, dracut does hard-code as little as possible into the initramfs. Dracut contains various modules which are driven by the event-based udev. Having root on MD, DM, LVM2, LUKS is supported as...

4CVSS2.5AI score0.02323EPSS
Exploits0
0day.today
0day.today
added 2010/09/22 12:0 a.m.17 views

Ubuntu Linux 'mountall' Local Privilege Escalation Vulnerability

Exploit for linux platform in category local exploits ================================================================ Ubuntu Linux 'mountall' Local Privilege Escalation Vulnerability ================================================================ !/bin/sh by fuzz. For Anux inc. ubuntu 10.04 ,...

6.8AI score
Exploits0
Rows per page
Query Builder