BSD

FreeBSD 12 — unzoo — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — unzoo — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: unzoo — Directory Traversal Vulnerability Upstream summary: Secunia reports: Doubles has discovered a vulnerability in Unzoo, which potentially can be exploited by malicious people to compromise a user's system. The […]

Read more
FreeBSD 12 — drupal-pubcookie — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — drupal-pubcookie — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: drupal-pubcookie — authentication may be bypassed Related CVEs: CVE-2006-4717 Upstream summary: The Drupal Project reports: It is possible for a malicious user to spoof a user's identity by bypassing the […]

Read more
FreeBSD 12 — linux-phoenix — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — linux-phoenix — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 18 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908 CVE-2004-0909 CVE-2004-1156 CVE-2004-1157  +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]

Read more
FreeBSD 12 — mariadb-connector-c — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mariadb-connector-c — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MariaDB — Vulnerability in C API Related CVEs: CVE-2020-2574 Upstream summary: MariaDB reports: Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client. […]

Read more
FreeBSD 12 — eggdrop — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — eggdrop — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: eggdrop — denial of service vulnerability Related CVEs: CVE-2009-1789 Upstream summary: Secunia reports: The vulnerability is caused due to an error in the processing of private messages within the server […]

Read more
FreeBSD 12 — apache13-modssl — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — apache13-modssl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: apache — heap overflow in mod_proxy Related CVEs: CVE-2004-0492 Upstream summary: A buffer overflow exists in mod_proxy which may allow an attacker to launch local DoS attacks and possibly execute […]

Read more
FreeBSD 12 — zip — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — zip — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: zip — long path buffer overflow Related CVEs: CVE-2004-1010 Upstream summary: A HexView security advisory reports: When zip performs recursive folder compression, it does not check for the length of […]

Read more
FreeBSD 12 — pubcookie-login-server — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — pubcookie-login-server — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Pubcookie Login Server — XSS vulnerability Upstream summary: Nathan Dors, Pubcookie Project reports: A new non-persistent XSS vulnerability was found in the Pubcookie login server's compiled binary "index.cgi" CGI program. […]

Read more
FreeBSD 12 — mysql-connector-c — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mysql-connector-c — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 16 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MySQL Client — Multiple vulerabilities Related CVEs: CVE-2020-2752 CVE-2020-2875 CVE-2020-2922 CVE-2020-2933 CVE-2020-2934 Upstream summary: Oracle reports: This Critical Patch Update contains 45 new security patches for Oracle MySQL. 9 of […]

Read more
FreeBSD 12 — p5-XSLoader — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — p5-XSLoader — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: p5-XSLoader — local arbitrary code execution Related CVEs: CVE-2016-6185 Upstream summary: Jakub Wilk reports: XSLoader tries to load code from a subdirectory in the cwd when called inside a string […]

Read more
CHAT