SOL86772626 - OpenSSL vulnerability CVE-2015-3194

Vulnerability Recommended Actions BIG-IP Configuration utility The Configuration utility is not vulnerable by default. To be vulnerable, the system administrator must modify the configuration to perform client-side certification authentication, such as when you perform the procedures in either of...

CentOS 7 : wireshark (CESA-2015:2393)

Updated wireshark packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which...

Oracle Linux 7 : cpio (ELSA-2015-2108)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2015-2108 advisory. - fix for CVE-2014-9112 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested...

Oracle Linux 7 : wireshark (ELSA-2015-2393)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-2393 advisory. - Related: CVE-2015-6244 - Resolves: CVE-2015-3182 - Resolves: CVE-2015-6243 CVE-2015-6244 CVE-2015-6245 CVE-2015-6246 CVE-2015-6248 - Resolves:...

Moderate: Red Hat Security Advisory: python security, bug fix, and enhancement update

Updated python packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which gi...

Moderate: Red Hat Security Advisory: wireshark security, bug fix, and enhancement update

Updated wireshark packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which...

Moderate: Red Hat Security Advisory: cups-filters security, bug fix, and enhancement update

Updated cups-filters packages that fix two security issues, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

file: out of bounds read in mconvert()

An ouf-of-bounds read flaw was found in the way the file utility processed certain Pascal strings. A remote attacker could cause an application using the file utility for example, PHP using the fileinfo module to crash if it was used to identify the type of the attacker-supplied file...

binutils: directory traversal vulnerability

A directory traversal flaw was found in the strip and objcopy utilities. A specially crafted file could cause strip or objdump to overwrite an arbitrary file writable by the user running either of these utilities...

binutils: invalid read flaw in libbfd

An integer overflow flaw was found in the way the strings utility processed certain files. If a user were tricked into running the strings utility on a specially crafted file, it could cause the strings executable to crash...

Port Scan v2.0 iOS - Command Inject Vulnerability

Port Scan version 2.0 suffers from a command injection vulnerability. Document Title: =============== Port Scan v2.0 iOS - Command Inject Vulnerability Product & Service Introduction: =============================== Port Scanning is a essential network utility for every IT professional and this i...

Port Scan 2.0 Command Injection

Document Title: =============== Port Scan v2.0 iOS - Command Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1619 Release Date: ============= 2015-11-02 Vulnerability Laboratory ID VL-ID: ==================================== 1619...

The vulnerability of the Solaris operating system allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Utility/Zones subcomponent of the Solaris operating system is related to errors in the code. Exploiting this vulnerability can allow an attacker, acting locally, to compromise the integrity, accessibility, and confidentiality of information...

EPSON Network Utility eEBSVC.exe Wrong Authorization Vulnerability

EPSON Network Utility is a set of programs from Japan's Epson EPSON to provide printer drivers with the ability to be used on a network. A misauthorization vulnerability exists in EPSON Network Utility 4.10. It allows local users to gain privileges via a Trojan horse file...

CVE-2015-6034

EPSON Network Utility 4.10 uses weak permissions Everyone: Full Control for eEBSVC.exe, which allows local users to gain privileges via a Trojan horse file...

Design/Logic Flaw

EPSON Network Utility 4.10 uses weak permissions Everyone: Full Control for eEBSVC.exe, which allows local users to gain privileges via a Trojan horse file...

CVE-2015-6034

EPSON Network Utility 4.10 uses weak permissions Everyone: Full Control for eEBSVC.exe, which allows local users to gain privileges via a Trojan horse file...

CVE-2015-6034

Affected software: Epson Network Utility 4.10. The vulnerability arises from insecure permissions on the eEBSVC.exe service binary (Everyone: Full Control) created during installation. Root cause: misconfigured default permissions enable a local attacker to replace eEBSVC.exe with a Trojan horse ...

EPSON Network Utility installs EpsonBidirectionalService with insecure permissions

Overview EPSON Network Utility contains a local privilege escalation vulnerability, which allows a local attacker to execute arbitrary code with SYSTEM privileges. Description CWE-276: Incorrect Default Permissions - CVE-2015-6034EPSON Network Utility v4.10 is an application that checks the print...

Breaching a bank in 20 minutes - Horror Stories 2015

I arrived onsite to suite 102 the banks corporate headquarters around 9:40 a.m. I was impersonating a local utility worker - with all the garments like a hardhat, clipboard, obnoxious yellow vest, and some old Timberland work boots. I played the part well...