Debian: Security Advisory (DLA-1688)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Azure Service Fabric WAagent Exposure of Resource to Wrong Sphere Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on Microsoft Azure. An attacker must first obtain the ability to execute high-privileged code within a container on the target system in order to exploit this vulnerability. The specific flaw exists within the WAagent...

Microsoft Azure Virtual Machine信息泄露漏洞（CVE-2021-27075）

CVE-2021-27075: Microsoft Azure Vulnerability Allows Privilege Escalation and Leak of Private Data Written by Paul Litvak - 11 May 2021 In this post I will explain how the Microsoft Azure Virtual Machine VM extension works and how we found a fatal vulnerability in the extension mechanism affectin...

Debian DLA-1709-1 : waagent security update

Francis McBratney discovered that the Windows Azure Linux Agent created swap files with world-readable permissions, resulting in information disclosure. For Debian 8 'Jessie', this problem has been fixed in version 2.2.18-3deb8u2. We recommend that you upgrade your waagent packages. NOTE: Tenable...

[SECURITY] [DLA 1709-1] waagent security update

Package : waagent Version : 2.2.18-3deb8u2 CVE ID : CVE-2019-0804 Francis McBratney discovered that the Windows Azure Linux Agent created swap files with world-readable permissions, resulting in information disclosure. For Debian 8 "Jessie", this problem has been fixed in version 2.2.18-3deb8u2. ...

Debian DSA-4406-1 : waagent - security update

Francis McBratney discovered that the Windows Azure Linux Agent created swap files with world-readable permissions, resulting in information disclosure. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4406. T...

[SECURITY] [DSA 4406-1] waagent security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4406-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 12, 2019 https://www.debian.org/security/faq -...

DLA-1709-1 waagent - security update

Bulletin has no description...

DSA-4406-1 waagent - security update

Bulletin has no description...

Debian: Security Advisory (DLA-1709-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-4406-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1688-1 : waagent update

A newer version of waagent is needed for several features of the Azure platform. For Debian 8 'Jessie', this problem has been fixed in version 2.2.18-3deb8u1. We recommend that you upgrade your waagent packages. NOTE: Tenable Network Security has extracted the preceding description block directly...

[SECURITY] [DLA 1688-1] waagent update

Package : waagent Version : 2.2.18-3deb8u1 A newer version of waagent is needed for several features of the Azure platform. For Debian 8 "Jessie", this problem has been fixed in version 2.2.18-3deb8u1. We recommend that you upgrade your waagent packages. Further information about Debian LTS...

DLA-1688-1 waagent - update

Bulletin has no description...

PT-2016-5768

Name of the Vulnerable Software and Affected Versions Panda Endpoint Administration Agent versions prior to 7.50.00 Description The issue allows local users to gain SYSTEM privileges by modifying an executable module due to a weak ACL for the Panda Security/WaAgent directory and sub-directories...