chris

SLES 12 — dstat — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — dstat — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 10 December 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2009-3894 Upstream summary: Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow local users to gain privileges via a Trojan horse Python module in (1) the current working […]

Read more
SLES 12 — argyllcms — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — argyllcms — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 9 December 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2012-1616 Upstream summary: Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause […]

Read more
IBM AIX 7.2 — CVE-1999-0057 — vulnerability — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-1999-0057 — vulnerability — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 8 December 2015 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-1999-0057, IBM PSIRT advisory page CVE: CVE-1999-0057 NVD summary: Vacation program allows command execution by remote users through a sendmail command. References: www1.itrc.hp.com/service/cki/docDisplay.do?docId   www1.itrc.hp.com/service/cki/docDisplay.do?docId Table of contents Symptom & Impact Environment […]

Read more
Ubuntu 14.04 — nvidia-graphics-drivers-346 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — nvidia-graphics-drivers-346 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 December 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2747-1 Related CVEs: CVE-2015-5950 Upstream summary: Dario Weisser discovered that the NVIDIA graphics drivers incorrectly handled certain IOCTL writes. A local attacker could use this issue to possibly gain root […]

Read more
SLES 12 — guestfsd — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — guestfsd — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 3 December 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2013:1626-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-4419 CVE-2013-2124 Upstream summary: The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the –remote or –listen option, does not properly check the […]

Read more
CHAT