🟢 Low ⏱ 5–15 min Last verified: 12 August 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3026-1 Related CVEs: CVE-2016-5104 Upstream summary: It was discovered that libimobiledevice incorrectly handled socket permissions. A remote attacker could use this issue to access services on iOS devices, contrary to […]
🟡 Medium ⏱ 10–30 min Last verified: 12 August 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4774-1 Related CVEs: CVE-2015-3192 CVE-2015-5211 CVE-2016-9878 CVE-2014-0225 CVE-2014-3625 CVE-2014-3578 Upstream summary: Toshiaki Maki discovered that Spring Framework incorrectly handled certain XML files. A remote attacker could exploit this with a […]
🟠 High ⏱ 30–90 min Last verified: 11 August 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2002-0745, IBM PSIRT advisory page CVE: CVE-2002-0745 NVD summary: Buffer overflow in uucp in AIX 4.3.3. References: archives.neohapsis.com/archives/aix/2002-q2/0005 archives.neohapsis.com/archives/aix/2002-q2/0005 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟠 High ⏱ 30–90 min Last verified: 10 August 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-1999-1583, IBM Support Bulletin CVE: CVE-1999-1583 NVD summary: Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line argument. References: www-1.ibm.com/support/search.wss?rs=0&q=IY02120& […]
🟢 Low ⏱ 5–15 min Last verified: 7 August 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3463-1 Related CVEs: CVE-2016-10516 Upstream summary: It was discovered that Werkzeug did not properly handle certain web scripts. A remote attacker could use this to inject arbitrary code via a […]
🟠 High ⏱ 30–90 min Last verified: 6 August 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2001-0671, IBM PSIRT advisory page CVE: CVE-2001-0671 NVD summary: Buffer overflows in (1) send_status, (2) kill_print, and (3) chk_fhost in lpd in AIX 4.3 and 5.1 allow remote attackers to gain root […]
🟠 High ⏱ 30–90 min Last verified: 6 August 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2008-0587, IBM Support Bulletin CVE: CVE-2008-0587 NVD summary: Buffer overflow in the uspchrp program in devices.chrp.base.diag in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors. References: […]
🟠 High ⏱ 30–90 min Last verified: 5 August 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2009-0370, IBM Support Bulletin CVE: CVE-2009-0370 NVD summary: Multiple unspecified vulnerabilities in IBM AIX 5.2.0 through 6.1.2 allow local users to append data to arbitrary files, related to (1) rmsock and (2) […]
🟠 High ⏱ 30–90 min Last verified: 5 August 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2009-3516, IBM Support Bulletin CVE: CVE-2009-3516 NVD summary: gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users […]
🟢 Low ⏱ 5–15 min Last verified: 2 August 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3391-2 Related CVEs: https://launchpad.net/bugs/1711137 Upstream summary: USN-3391-1 fixed vulnerabilities in Firefox. This update provides the corresponding update for Ubufox. Original advisory details: Multiple security issues were discovered in Firefox. If […]
