CVE-2013-0403

CVE-2013-0403 affects Oracle/Sun Solaris (versions 8–11) in the Solaris Utilities component. The vulnerability is described as an unspecified local issue that can affect availability and requires a logon, with exploitation deemed difficult and capable of causing partial denial of service. Nessus/...

CVE-2013-0412

CVE-2013-0412 affects Oracle Solaris 8–11 with a vulnerability in the Solaris utility pax subcomponent. The underlying issue allows local users to impact integrity and availability via unknown or hard-to-exploit vectors, requiring local access and typically user interaction or multiple logins dep...

CVE-2013-0412

Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect integrity and availability via unknown vectors related to Utility/pax...

CVE-2013-0403

Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect availability via unknown vectors related to Utility...

CVE-2012-0568

Unspecified vulnerability in Oracle Sun Solaris 8, 9, and 10 allows local users to affect confidentiality via unknown vectors related to Utility/fdformat...

CVE-2012-0568

Summary (CVE-2012-0568) : A vulnerability in Oracle/Sun Solaris 8–10 affecting the Solaris component (subcomponent: Utility/fdformat). The underlying issue is unspecified and relates to confidentiality, with local attackers able to influence confidentiality via unknown vectors. Exploitation requi...

PHP file include vulnerability details(including the truncated method)-vulnerability warning-the black bar safety net

One, what is”remote file inclusion vulnerability”for? The answer is: the server through the php properties of a function to contain any files, since you want to include this file source filter is not strict, so can go to that contains a malicious file and we can construct the malicious file to...

SOL14334 - BIG-IP Analytics generates predictable session cookies

Recommended action To mitigate this vulnerability, you can use an iRule to encrypt the BIG-IP Analytics session cookie sent to the client. To do so, perform the following procedure: Impact of procedure: Performing the following procedure should not have a negative impact on your system. 1. Log in...

OpenFabrics ibutils 1.5.7 /tmp clobbering vulnerability

OpenFabrics ibutils 1.5.7 /tmp clobbering vulnerability 3/6/2013 Larry W. Cashdollar @larry0 The infiniband diagnostic utiltiy handles files in /tmp insecurely. A malicious user can clobber root owned files with common symlink attacks. http://www.openfabrics.org/downloads/ibutils/ nobody@exdb01...

OpenFabrics ibutils symbolic links vulnerability

infiniband utility unsafe temporary files creation...

Fedora Update for rubygem-activesupport FEDORA-2013-4130

Check for the Version of rubygem-activesupport OpenVAS Vulnerability Test Fedora Update for rubygem-activesupport FEDORA-2013-4130 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora Update for rubygem-activesupport FEDORA-2013-4198

Check for the Version of rubygem-activesupport OpenVAS Vulnerability Test Fedora Update for rubygem-activesupport FEDORA-2013-4198 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

[SECURITY] Fedora 17 Update: rubygem-activesupport-3.0.11-9.fc17

Utility library which carries commonly used classes and goodies from the Rails framework...

[SECURITY] Fedora 18 Update: rubygem-activesupport-3.2.8-3.fc18

Utility library which carries commonly used classes and goodies from the Rails framework...

D-Link DIR-615H HTTP Login Utility

This module attempts to authenticate to different D-Link HTTP management services. It has been tested successfully on D-Link DIR-615 Hardware revision H devices. It is possible that this module also works with other models. This module requires Metasploit: https://metasploit.com/download Current...

Code injection

The Keyboard Shortcut Utility module 7.x-1.x before 7.x-1.1 for Drupal does not properly check node restrictions, which allows 1 remote authenticated users with the "view shortcuts" permission to read nodes or 2 remote authenticated users with the "admin shortcuts" permission to read, edit, or...

CVE-2013-0226

The Keyboard Shortcut Utility module 7.x-1.x before 7.x-1.1 for Drupal does not properly check node restrictions, which allows 1 remote authenticated users with the "view shortcuts" permission to read nodes or 2 remote authenticated users with the "admin shortcuts" permission to read, edit, or...

CVE-2013-0226

The Drupal Keyboard Shortcut Utility module (7.x-1.x) is vulnerable prior to 7.x-1.1 due to insufficient checks of node access. Remote authenticated users with the “view shortcuts” permission can read nodes, and those with the “admin shortcuts” permission can read, edit, or delete nodes via unspe...

DSA-2645-1 inetutils - denial of service

Bulletin has no description...

OpenFabrics ibutils 1.5.7 /tmp File Clobber

OpenFabrics ibutils 1.5.7 /tmp clobbering vulnerability 3/6/2013 Larry W. Cashdollar @larry0 The infiniband diagnostic utiltiy handles files in /tmp insecurely. A malicious user can clobber root owned files with common symlink attacks. http://www.openfabrics.org/downloads/ibutils/ nobody@exdb01...