Aggregator

CVE-2001-0872 | OpenBSD OpenSSH 3.0.1 UseLogin Option LD_LIBRARY_PATH privileges management (VU#157447 / Nessus ID 14928)

Vuldb Updates
11 months 3 weeks ago
A vulnerability has been found in OpenBSD OpenSSH 3.0.1 and classified as critical. This vulnerability affects unknown code of the component UseLogin Option. The manipulation of the argument LD_LIBRARY_PATH as part of Environment Variable leads to improper privilege management. This vulnerability was named CVE-2001-0872. The attack needs to be approached locally. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2002-0059 | GNU zlib up to 1.1.3 Decompression inflateEnd memory corruption (VU#368819 / Nessus ID 13930)

Vuldb Updates
11 months 3 weeks ago
A vulnerability was found in GNU zlib up to 1.1.3. It has been rated as critical. Affected by this issue is the function inflateEnd of the component Decompression Handler. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2002-0059. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2002-0566 | Oracle9i 9.0/9.0.1 PL/SQL Module Authorization denial of service (VU#805915 / Nessus ID 57619)

Vuldb Updates
11 months 3 weeks ago
A vulnerability was found in Oracle9i 9.0/9.0.1. It has been rated as problematic. Affected by this issue is some unknown functionality of the component PL/SQL Module. The manipulation of the argument Authorization leads to denial of service. This vulnerability is handled as CVE-2002-0566. The attack may be launched remotely. There is no exploit available.
vuldb.com

CVE-2002-1219 | ISC BIND up to 8.3.3 SIG Record memory corruption (VU#852283 / Nessus ID 13765)

Vuldb Updates
11 months 3 weeks ago
A vulnerability classified as critical has been found in ISC BIND. This affects an unknown part of the component SIG Record Handler. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2002-1219. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2001-0550 | University of Washington wu-ftpd 2.5.0/2.6.0/2.6.1 glob CWD memory corruption (VU#886083 / EDB-348)

Vuldb Updates
11 months 3 weeks ago
A vulnerability was found in University of Washington wu-ftpd 2.5.0/2.6.0/2.6.1. It has been rated as critical. This issue affects the function glob. The manipulation of the argument CWD with the input ~{ leads to memory corruption. The identification of this vulnerability is CVE-2001-0550. The attack may be initiated remotely. Furthermore, there is an exploit available. Due to its background and reception, this vulnerability has an historic impact. It is recommended to upgrade the affected component.
vuldb.com

CVE-2001-0522 | GNU Privacy Guard up to 1.05 tty_printf format string (VU#403051 / EDB-20889)

Vuldb Updates
11 months 3 weeks ago
A vulnerability was found in GNU Privacy Guard up to 1.05. It has been classified as critical. This affects the function tty_printf. The manipulation leads to format string. This vulnerability is uniquely identified as CVE-2001-0522. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-12934 | code-projects Simple Admin Panel 1.0 updateItemController.php p_desk sql injection

Vuldb Updates
11 months 3 weeks ago
A vulnerability classified as critical has been found in code-projects Simple Admin Panel 1.0. This affects an unknown part of the file updateItemController.php. The manipulation of the argument p_desk leads to sql injection. This vulnerability is uniquely identified as CVE-2024-12934. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com

Service disruptions continue to blindside businesses

Help Net Security
11 months 3 weeks ago

Service disruptions remain a critical concern for IT and business executives, with 88% of respondents saying they believe another major incident will occur in the next 12 months, according to PagerDuty. PagerDuty surveyed 1,000 IT and business executives who were director level and above, from the US, UK, Australia and Japan. Organizations must focus on preventing service disruptions 86% of executives surveyed now realize that they have been prioritizing security at the expense of readiness … More →

The post Service disruptions continue to blindside businesses appeared first on Help Net Security.

Help Net Security

CVE-2015-5116 | Adobe Flash Player prior 11.2.202.481/13.0.0.302/18.0.0.203 Same Origin Policy access control (RHSA-2015:1214 / EDB-37851)

Vuldb Updates
11 months 3 weeks ago
A vulnerability was found in Adobe Flash Player. It has been declared as critical. This vulnerability affects unknown code of the component Same Origin Policy. The manipulation leads to improper access controls. This vulnerability was named CVE-2015-5116. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2022-29457 | Zoho ManageEngine ADSelfService Plus Configuration information disclosure (EDB-50904)

Vuldb Updates
11 months 3 weeks ago
A vulnerability was found in Zoho ManageEngine ADSelfService Plus, ADAuditPlus, Exchange Reporter Plus and ADManagerPlus and classified as problematic. Affected by this issue is some unknown functionality of the component Configuration Handler. The manipulation leads to information disclosure. This vulnerability is handled as CVE-2022-29457. Access to the local network is required for this attack to succeed. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2008-4210 | Linux Kernel up to 2.6.21.7 ftruncate access control (Bug 463661 / EDB-6851)

Vuldb Updates
11 months 3 weeks ago
A vulnerability classified as problematic has been found in Linux Kernel. This affects the function ftruncate. The manipulation leads to improper access controls. This vulnerability is uniquely identified as CVE-2008-4210. The attack needs to be approached locally. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

Cybersecurity spending trends and their impact on businesses

Help Net Security
11 months 3 weeks ago

Managing cybersecurity and IT budgets is a critical element of organizational strategy. With increasing threats to data security, the rise of ransomware, and the need to protect IT infrastructure, organizations must invest wisely in cybersecurity to stay secure. This article shares key insights from cybersecurity budget surveys conducted in 2024. Despite massive security spending, 44% of CISOs fail to detect breaches Despite global information security spending projected to reach $215 billion in 2024, 44% of … More →

The post Cybersecurity spending trends and their impact on businesses appeared first on Help Net Security.

Help Net Security

iOS devices more exposed to phishing than Android

Help Net Security
11 months 3 weeks ago

The mobile threat landscape continues to grow at an alarming rate as cybercrime groups shift their tactics and target mobile devices in the early stages of their attacks, according to a recent Lookout report. The report highlights insights behind a 17% increase QoQ (quarter on quarter) in enterprise-focused credential theft and phishing attempts, 32% increase QoQ in malicious app detections and a trend showing iOS devices are more exposed to phishing attacks than Android devices. … More →

The post iOS devices more exposed to phishing than Android appeared first on Help Net Security.

Help Net Security

Apache 修复 Tomcat Web 服务器中的远程代码执行绕过问题

嘶吼
11 months 3 weeks ago

Apache 发布了一个安全更新，解决了 Tomcat Web 服务器中的一个重要漏洞，该漏洞可能导致攻击者实现远程代码执行。

Apache Tomcat 是一种开源 Web 服务器和 Servlet 容器，广泛用于部署和运行基于 Java 的 Web 应用程序。它为 Java Servlet、JavaServer Pages (JSP) 和 Java WebSocket 技术提供运行时环境。

该产品深受运行自定义 Web 应用程序的大型企业和依赖 Java 提供后端服务的 SaaS 提供商的欢迎。云和托管服务集成了 Tomcat 来进行应用程序托管，软件开发人员使用它来构建、测试和部署 Web 应用程序。

新版本中修复的漏洞被追踪为 CVE-2024-56337，并解决了 CVE-2024-50379 的不完整缓解措施，这是一个关键的远程代码执行 (RCE)，供应商已于 12 月 17 日发布了补丁。

人们意识到应用 CVE-2024-50379 的更新不足以保护系统，并决定发布 CVE-2024-56337强调手动操作的必要性。

这两个问题本质上是完全相同的漏洞，但决定使用新的 CVE ID 是为了提高受影响系统管理员的认识。该安全问题是一个检查时间使用时间 (TOCTOU) 竞争条件漏洞，该漏洞会影响启用默认 Servlet 写入（“只读”初始化参数设置为 false）并在不区分大小写的文件系统上运行的系统。

该问题影响 Apache Tomcat 11.0.0-M1 至 11.0.1、10.1.0-M1 至 10.1.33 以及 9.0.0.M1 至 9.0.97。用户应升级到最新的 Tomcat 版本：11.0.2、10.1.34 和 9.0.98。

解决该问题需要采取额外的步骤，根据所使用的 Java 版本，除了升级之外，用户还需要执行以下操作：

·对于 Java 8 或 11，建议将系统属性“sun.io.useCanonCaches”设置为“false”（默认值：true）。

·对于 Java 17，请确保“sun.io.useCanonCaches”（如果设置）配置为 false（默认值：false）。

·对于 Java 21 及更高版本，无需配置。该属性和有问题的缓存已被删除。

Apache 团队分享了即将推出的 Tomcat 版本（11.0.3、10.1.35 和 9.0.99）中的安全增强计划。

具体来说，Tomcat 将在不区分大小写的文件系统上启用默认 servlet 的写访问权限之前检查“sun.io.useCanonCaches”设置是否正确，并在可能的情况下将“sun.io.useCanonCaches”默认为 false。这些更改旨在自动实施更安全的配置，并降低 CVE-2024-50379 和 CVE-2024-56337 被利用的风险。

胡金鱼

Managed ad