Mageia: Security Advisory (MGASA-2015-0443)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sudo <= 1.8.14 - Unauthorized Privilege

Exploit Title: sudo -e - a.k.a. sudoedit - unauthorized privilege escalation Date: 07-23-2015 Exploit Author: Daniel Svartman Version: Sudo =1.8.14 Tested on: RHEL 5/6/7 and Ubuntu all versions CVE: CVE-2015-5602. Hello, I found a security bug in sudo checked in the latest versions of sudorunning...

Sudo 1.8.14 (RHEL 5/6/7 / Ubuntu) - 'Sudoedit' Unauthorized Privilege Escalation

Exploit Title: sudo -e - a.k.a. sudoedit - unauthorized privilege escalation Date: 07-23-2015 Exploit Author: Daniel Svartman Version: Sudo ALL=root NOPASSWD: sudoedit /home///test.txt Then, logged as that user, create a subdirectory within its home folder e.g. /home//newdir and later create a...

Pointter PHP Content Management System Unauthorized Privilege Escalation

No description provided by source. 'Pointter PHP Content Management System' Unauthorized Privilege Escalation CVE-2010-4332 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Pointter PHP Content Management System'...

Pointter PHP Micro-Blogging Social Network Unauthorized Privilege Escalation

No description provided by source. 'Pointter PHP Micro-Blogging Social Network' Unauthorized Privilege Escalation CVE-2010-4333 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Pointter PHP Micro-Blogging Social Networ...

samba -- incorrect permission checks vulnerability

The Samba project reports: Samba versions 3.4.x to 3.6.4 inclusive are affected by a vulnerability that allows arbitrary users to modify privileges on a file server. Security checks were incorrectly applied to the Local Security Authority LSA remote proceedure calls RPC CreateAccount, OpenAccount...

Ubuntu: Security Advisory (USN-1299-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

&#39;Pointter PHP Micro-Blogging Social &#39;Pointter PHP Content Management System&#39; Unauthorized Privilege Escalation &#40;CVE-2010-4332&#41;

'Pointter PHP Content Management System' Unauthorized Privilege Escalation CVE-2010-4332 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Pointter PHP Content Management System' authentication system which allows for...

&#39;Pointter PHP Micro-Blogging Social Network&#39; Unauthorized Privilege Escalation &#40;CVE-2010-4333&#41;

'Pointter PHP Micro-Blogging Social Network' Unauthorized Privilege Escalation CVE-2010-4333 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Pointter PHP Micro-Blogging Social Network' authentication system which allo...

Pointter PHP Content Management System - Unauthorized Privilege Escalation

Pointter PHP Content Management System - Unauthorized Privilege Escalation 'Pointter PHP Content Management System' Unauthorized Privilege Escalation CVE-2010-4332 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the...

Pointter PHP Micro-Blogging Social Network - Unauthorized Privilege Escalation

Pointter PHP Micro-Blogging Social Network - Unauthorized Privilege Escalation 'Pointter PHP Micro-Blogging Social Network' Unauthorized Privilege Escalation CVE-2010-4333 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in th...

SuSE 10 Security Update : pcsc-lite (ZYPP Patch Number 7092)

This update of pcsc-lite fixes a local vulnerability stack overflow which allowed every user with write-access to '/var/run/pcscd/pcscd.comm' to gain root privileges. CVE-2010-0407 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this...

[security bulletin] HPSBMA02513 SSRT090110 rev.1 - Insight Control for Linux &#40;IC-Linux&#41; Remote Execution of Arbitrary Code, Local Unauthorized Elevation of Privilege

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02062621 Version: 1 HPSBMA02513 SSRT090110 rev.1 - Insight Control for Linux IC-Linux Remote Execution of Arbitrary Code, Local Unauthorized Elevation of Privilege NOTICE: The information in this...

Cisco Unified Communications管理应用程序特权提升漏洞

Cisco Unified Communications Manager（CUCM，之前被称为CallManager）是Cisco IP电话解决方案中的呼叫处理组件。 Cisco Unified Communications管理应用程序包含的基于WEB的工具存在访问验证问题，远程攻击者可以利用漏洞访问设备敏感信息和更改应用程序配置。 Cisco Unified ICME, Unified ICMH, UCCE,...

CVE-2007-0405

The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user...

HP-UX PHSS_32175 : HP OpenView Operations (OVO), Remote Unauthorized Privilege Elevation (HPSBMA01092 SSRT4847 rev.2)

s700800 11.00 OV ITO6.X intermediate server A.06.18 : A potential security vulnerability has been identified with HP OpenView Operations which could allow an OVO operator to gain unauthorized elevated privileges on remote systems that are managed by OVO. %NASLMINLEVEL 70300 C Tenable Network...

HP-UX PHSS_32176 : HP OpenView Operations (OVO), Remote Unauthorized Privilege Elevation (HPSBMA01092 SSRT4847 rev.2)

s700800 11.X OV OVO8.0X consolidated server A.08.01 : A potential security vulnerability has been identified with HP OpenView Operations which could allow an OVO operator to gain unauthorized elevated privileges on remote systems that are managed by OVO. %NASLMINLEVEL 70300 C Tenable Network...

HP-UX PHSS_31068 : HP-UX Running Serviceguard, Remote Increase in Privilege (HPSBUX01080 SSRT3526 rev.2)

s700800 11.23 MC/ServiceGuard A.11.15.00 : A potential security vulnerability has been identified with HP Serviceguard running on HP-UX and Linux that may allow remote unauthorized privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugi...

HP-UX PHCO_23492 : HP-UX running dlkm, Local Unauthorized Increase in Privilege (HPSBUX00159 SSRT071344 rev.3)

s700800 11.11 Kernsymtab Patch : dlkm static kernel symbol table is incorrectly configured. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO23492. The text itself is copyright C Hewlett-Packard Development...

Mandrake Linux Security Advisory : procmail (MDKSA-2001:085)

In older versions of procmail, it is possible to crash procmail by sending it certain signals. If procmail is installed setuid, this could be exploited to gain unauthorized privilege. This problem is fixed in unstable version 3.20 and stable version 3.15.2. %NASLMINLEVEL 70300 C Tenable Network...