CVE-2015-2126

Unspecified vulnerability in pppoec in HP HP-UX 11iv2 and 11iv3 allows local users to gain privileges by leveraging setuid permissions...

HP-UX privilege escalation

pppoec privilege escalation...

[security bulletin] HPSBUX03359 rev.1 - HP-UX pppoec, local elevation of privilege

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04718530 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04718530 Version: 1 HPSBUX03359 rev....

CA20150604-01: Security Notice for CA Common Services

-----BEGIN PGP SIGNED MESSAGE----- CA20150604-01: Security Notice for CA Common Services Issued: June 4, 2015 CA Technologies Support is alerting customers to multiple potential risks with products that bundle CA Common Services on Unix/Linux platforms. A local attacker may exploit these...

HP-UX PHNE_44236 : s700_800 11.23 NTP timeservices upgrade plus utilities

s700800 11.23 NTP timeservices upgrade plus utilities : Potential security vulnerabilities have been identified with HP-UX running NTP. These could be exploited remotely to execute code, create a Denial of Service DoS, or other vulnerabilities. References: CVE-2014-9293 - Insufficient Entropy in...

HP-UX PHNE_44235 : s700_800 11.11 NTP timeservices upgrade plus utilities

s700800 11.11 NTP timeservices upgrade plus utilities : Potential security vulnerabilities have been identified with HP-UX running NTP. These could be exploited remotely to execute code, create a Denial of Service DoS, or other vulnerabilities. References: CVE-2014-9293 - Insufficient Entropy in...

iOS, OS X Library AFNetwork Patches MiTM Vulnerability

Until yesterday, a popular networking library for iOS and OS X used in apps such as Pinterest and Simple was susceptible to SSL man-in-the-middle MiTM attacks. The developer behind the framework AFNetworking on Thursday pushed a fix for the issue, a logic flaw. The flaw had lingered in the wild f...

Faraday v1.0.7 - Integrated Penetration-Test Environment a multiuser Penetration test IDE

Faraday introduces a new concept IPE Integrated Penetration-Test Environment a multiuser Penetration test IDE. Designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use the available tools in the...

CVE-2014-7879

HP HP-UX B.11.11, B.11.23, and B.11.31, when the PAM configuration includes libpamupdbe, allows remote authenticated users to bypass authentication, and consequently execute arbitrary code, via unspecified vectors...

Authentication flaw

HP HP-UX B.11.11, B.11.23, and B.11.31, when the PAM configuration includes libpamupdbe, allows remote authenticated users to bypass authentication, and consequently execute arbitrary code, via unspecified vectors...

CVE-2014-7879

CVE-2014-7879 – HP-UX PAM bypass . Affected: HP-UX B.11.11, B.11.23, and B.11.31 when pam.conf uses libpam_updbe. Root cause: a flaw in pam_updbe handling allows remote authenticated users to bypass authentication and execute arbitrary code via unspecified vectors. CVSS base score in the HP bulle...

CVE-2014-7879

HP HP-UX B.11.11, B.11.23, and B.11.31, when the PAM configuration includes libpamupdbe, allows remote authenticated users to bypass authentication, and consequently execute arbitrary code, via unspecified vectors...

GPG 32-Bit Short Key ID Collision Attacks

Attack and vulnerability details are often disclosed in order to prompt vendors and project maintainers into action. It happened recently with publication of attack code that mimicked the work of Karsten Nohl on BadUSB and tried to nudge Phison Electronics of Taiwan into looking at its USB...

HP-UX authentication bypass

HP-UX libpamupdbe authentication bypass...

[security bulletin] HPSBUX03166 SSRT101489 rev.1 - HP-UX running PAM libpam_updbe, Remote Authentication Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04511778 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04511778 Version: 1 HPSBUX03166...

HP-UX PHCO_43874 : s700_800 11.23 libpam_updbe cumulative patch

s700800 11.23 libpamupdbe cumulative patch : A potential security vulnerability has been identified in the HP-UX running PAM using libpamupdbe in pam.conf4. This vulnerability could allow remote users to bypass certain authentication restrictions. References: CVE-2014-7879 SSRT101489. %NASLMINLEV...

HP-UX PHCO_43873 : s700_800 11.11 libpam_updbe patch

s700800 11.11 libpamupdbe patch : A potential security vulnerability has been identified in the HP-UX running PAM using libpamupdbe in pam.conf4. This vulnerability could allow remote users to bypass certain authentication restrictions. References: CVE-2014-7879 SSRT101489. %NASLMINLEVEL 70300 C...

HP-UX PHCO_43875 : s700_800 11.31 libpam_updbe patch

s700800 11.31 libpamupdbe patch : A potential security vulnerability has been identified in the HP-UX running PAM using libpamupdbe in pam.conf4. This vulnerability could allow remote users to bypass certain authentication restrictions. References: CVE-2014-7879 SSRT101489. %NASLMINLEVEL 70300 C...

HP-UX DoS

No description provided...

[security bulletin] HPSBUX03159 SSRT101785 rev.2 - HP-UX kernel, Local Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04491186 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04491186 Version: 2 HPSBUX03159...