CWE-250 Archives - CVE Vulnerability

CVE-2008-1877

Sun, 26 Feb 2023 09:09:14 +0000

tss 0.8.1 allows local users to read arbitrary files via the -a parameter, which is processed while tss is running with privileges.

The post CVE-2008-1877 appeared first on CVE Vulnerability.

CVE-2008-0368

Sun, 26 Feb 2023 09:08:30 +0000

onedcu in IBM Informix Dynamic Server (IDS) 10.x before 10.00.xC8 allows local users to create arbitrary files via the Trace file argument.

The post CVE-2008-0368 appeared first on CVE Vulnerability.

CVE-2008-0162

Sun, 26 Feb 2023 09:08:24 +0000

misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges.

The post CVE-2008-0162 appeared first on CVE Vulnerability.

CVE-2018-10892

Sun, 26 Feb 2023 06:45:02 +0000

The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi pathnames. The flaw allows an attacker to modify host’s hardware like enabling/disabling bluetooth or turning up/down keyboard brightness.

The post CVE-2018-10892 appeared first on CVE Vulnerability.

CVE-2018-10872

Sun, 26 Feb 2023 06:45:01 +0000

A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, processor does not deliver interrupts and exceptions, they are delivered once the first instruction after the stack switch is executed. An unprivileged system user could use this flaw to crash the system kernel resulting in DoS. This CVE-2018-10872 was assigned due to regression of CVE-2018-8897 in Red Hat Enterprise Linux 6.10 GA kernel. No other versions are affected by this CVE.

The post CVE-2018-10872 appeared first on CVE Vulnerability.

CVE-2020-3812

Sun, 26 Feb 2023 06:41:47 +0000

qmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability. A local attacker can test for the existence of files and directories anywhere in the filesystem because qmail-verify runs as root and tests for the existence of files in the attacker’s home directory, without dropping its privileges first.

The post CVE-2020-3812 appeared first on CVE Vulnerability.

CVE-2020-27826

Sun, 26 Feb 2023 06:40:28 +0000

A flaw was found in Keycloak before version 12.0.0 where it is possible to update the user’s metadata attributes using Account REST API. This flaw allows an attacker to change its own NameID attribute to impersonate the admin user for any particular application.

The post CVE-2020-27826 appeared first on CVE Vulnerability.

CVE-2020-26278

Sun, 26 Feb 2023 06:39:59 +0000

Weave Net is open source software which creates a virtual network that connects Docker containers across multiple hosts and enables their automatic discovery. Weave Net before version 2.8.0 has a vulnerability in which can allow an attacker to take over any host in the cluster. Weave Net is supplied with a manifest that runs pods on every node in a Kubernetes cluster, which are responsible for managing network connections for all other pods in the cluster. This requires a lot of power over the host, and the manifest sets `privileged: true`, which gives it that power. It also set `hostPID: true`, which gave it the ability to access all other processes on the host, and write anywhere in the root filesystem of the host. This setting was not necessary, and is being removed. You are only vulnerable if you have an additional vulnerability (e.g. a bug in Kubernetes) or misconfiguration that allows an attacker to run code inside the Weave Net pod, No such bug is known at the time of release, and there are no known instances of this being exploited. Weave Net 2.8.0 removes the hostPID setting and moves CNI plugin install to an init container. Users who do not update to 2.8.0 can edit the hostPID line in their existing DaemonSet manifest to say false instead of true, arrange some other way to install CNI plugins (e.g. Ansible) and remove those mounts from the DaemonSet manifest.

The post CVE-2020-26278 appeared first on CVE Vulnerability.

CVE-2020-10056

Sun, 26 Feb 2023 06:35:41 +0000

A vulnerability has been identified in License Management Utility (LMU) (All versions < V2.4). The lmgrd service of the affected application is executed with local SYSTEM privileges on the server while its configuration can be modified by local users. The vulnerability could allow a local authenticated attacker to execute arbitrary commands on the server with local SYSTEM privileges.

The post CVE-2020-10056 appeared first on CVE Vulnerability.

CVE-2019-10143

Sun, 26 Feb 2023 06:29:04 +0000

** DISPUTED ** It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated “there is simply no way for anyone to gain privileges through this alleged issue.”

The post CVE-2019-10143 appeared first on CVE Vulnerability.