FreeBSD

FreeBSD 12 — apache+ipv — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — apache+ipv — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Apache 1.3 — mod_proxy reverse proxy exposure Related CVEs: CVE-2004-0940 CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 CVE-2011-3368 Upstream summary: Apache HTTP server project reports: An exposure was found when using mod_proxy in reverse […]

Read more
FreeBSD 12 — poweradmin — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — poweradmin — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: poweradmin — multiple XSS vulnerabilities Upstream summary: Multiple cross-site scripting (XSS) vulnerabilities Multiple scripts are vulnerable to XSS attacks. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
FreeBSD 12 — ezbounce — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ezbounce — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ezbounce remote format string vulnerability Related CVEs: CVE-2003-0510 Upstream summary: A security hole exists that can be used to crash the proxy and execute arbitrary code. An exploit is circulating […]

Read more
FreeBSD 12 — memcached — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — memcached — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: memcached — multiple vulnerabilities Related CVEs: CVE-2009-1255 CVE-2016-8704 CVE-2016-8705 CVE-2016-8706 Upstream summary: Cisco Talos reports: Multiple integer overflow vulnerabilities exist within Memcached that could be exploited to achieve remote code […]

Read more
FreeBSD 12 — avahi-qt — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — avahi-qt — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: avahi — denial of service Related CVEs: CVE-2010-2244 CVE-2011-1002 Upstream summary: Avahi developers reports: A vulnerability has been reported in Avahi, which can be exploited by malicious people to cause […]

Read more
FreeBSD 12 — hlstats — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — hlstats — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 16 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: hlstats — multiple cross site scripting vulnerabilities Related CVEs: CVE-2006-4454 CVE-2006-6780 CVE-2006-6781 CVE-2007-2812 Upstream summary: Kefka reports multiple cross site scripting vulnerabilities within hlstats. The vulnerabilities are caused due to […]

Read more
FreeBSD 12 — phpmyadmin — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — phpmyadmin — multiple vulnerabilities (20 CVEs) — patch and remediation guide (PATCH-REMEDIATION-2)

🟠 High   ⏱ 15–60 min  Last verified: 16 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: phpmyadmin — multiple vulnerabilities Related CVEs: CVE-2005-0543 CVE-2005-0544 CVE-2005-0567 CVE-2005-0653 CVE-2005-0992 CVE-2007-6100 CVE-2016-1927 CVE-2016-2038  +12 more Upstream summary: the phpmyadmin team reports: This security fix is part of an ongoing […]

Read more
FreeBSD 12 — node — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — node — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 16 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: NodeJS — Vulnerabilities Related CVEs: CVE-2011-4815 CVE-2011-4838 CVE-2011-5036 CVE-2011-5037 CVE-2015-0278 CVE-2015-5380 CVE-2016-0702 CVE-2016-0705  +12 more Upstream summary: Node.js reports: Code injection and privilege escalation through Linux capabilities- (High) http: Reading […]

Read more
FreeBSD 12 — krb5-appl — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — krb5-appl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: krb5-appl — telnetd code execution vulnerability Related CVEs: CVE-2011-4862 Upstream summary: The MIT Kerberos Team reports: When an encryption key is supplied via the TELNET protocol, its length is not […]

Read more
FreeBSD 12 — sharutils — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — sharutils — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: sharutils — unshar insecure temporary file creation Related CVEs: CVE-2005-0990 Upstream summary: An Ubuntu Advisory reports: Joey Hess discovered that "unshar" created temporary files in an insecure manner. This could […]

Read more
CHAT