Team IT Security (TSEC) Nachrichtenportal Logo


🐧 Performance Co-Pilot (pcp): Unsafe use of Directories in /var/lib/pcp and /var/log/pcp breaks pcp Service User Isolation (CVE-2023-6917)


Nachrichtenbereich: 🐧 Linux Tipps
🔗 Quelle: reddit.com

Linux usually has a good reputation for being secure and I just realized that I know several people responsible for that, doing proactive reviews at SUSE.

submitted by /u/bmwiedemann
[link] [comments] ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🐧 Performance Co-Pilot (pcp): Unsafe use of Directories in /var/lib/pcp and /var/log/pcp breaks pcp Service User Isolation (CVE-2023-6917)


📈 192.74 Punkte
🐧 Linux Tipps

🕵️ Apache Cordova bis 5.2.2 auf Android Log.v()/Log.d()/Log.i()/Log.w()/Log.e() Information Disclosure


📈 43.26 Punkte
🕵️ Sicherheitslücken

🕵️ Apache Cordova up to 5.2.2 on Android Log.v/Log.d()/Log.i()/Log.w()/Log.e() information disclosure


📈 43.26 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-3695 | SuSE Linux Enterprise Server Code Generation /var/log/pcp/configs.sh code injection (Bug 1152763)


📈 40.73 Punkte
🕵️ Sicherheitslücken

📰 Facebook uses "unsafe-inline" and "unsafe-eval"....should users be worried about that ?


📈 35.61 Punkte
📰 IT Security Nachrichten

🔧 Danger: Unsafe Code (or How To Build On An Unsafe Foundation)


📈 33.94 Punkte
🔧 Programmierung

🐧 Command Help with "Top 10 Sub Directories w/ Largest File Total Size Excluding Further Sub Directories"


📈 33.11 Punkte
🐧 Linux Tipps

🕵️ CVE-2020-15334 | ZyXEL CloudCNM SecuManager 3.1.0/3.1.1 /var/log/axxmpp.log injection


📈 32.05 Punkte
🕵️ Sicherheitslücken

🔧 Multi-tenant workload isolation in Apache Doris: a better balance between isolation and utilization


📈 31.04 Punkte
🔧 Programmierung

🕵️ nginx 1.6.2-5 auf Debian Log File Handler /var/log/nginx Information Disclosure


📈 30.91 Punkte
🕵️ Sicherheitslücken

🕵️ nginx 1.6.2-5 auf Debian Log File Handler /var/log/nginx Information Disclosure


📈 30.91 Punkte
🕵️ Sicherheitslücken

🕵️ F5 BIG-IP bis 11.6.1 REST Authentication Timeout /var/log/restjavad.0.log Information Disclosure


📈 30.91 Punkte
🕵️ Sicherheitslücken

🕵️ F5 BIG-IP Log /var/log/ltm Password Information Disclosure


📈 30.91 Punkte
🕵️ Sicherheitslücken

🕵️ nginx 1.6.2-5 on Debian/Ubuntu Log File /var/log/nginx privilege escalation


📈 30.91 Punkte
🕵️ Sicherheitslücken

🕵️ nginx 1.6.2-5 on Debian/Ubuntu Log File /var/log/nginx privilege escalation


📈 30.91 Punkte
🕵️ Sicherheitslücken

🕵️ F5 BIG-IP up to 11.6.1 REST Authentication Timeout /var/log/restjavad.0.log information disclosure


📈 30.91 Punkte
🕵️ Sicherheitslücken

🕵️ F5 BIG-IP on VIPRION Log /var/log/ltm Password information disclosure


📈 30.91 Punkte
🕵️ Sicherheitslücken

🕵️ Juniper ATP up to 5.0.3 Log /var/log/syslog information disclosure


📈 30.91 Punkte
🕵️ Sicherheitslücken

🕵️ rsyslog Permission /var/log/cron log file


📈 30.91 Punkte
🕵️ Sicherheitslücken

🕵️ APT 0.8.16/0.9.7 /var/log/apt/term.log information disclosure


📈 30.91 Punkte
🕵️ Sicherheitslücken

📰 Facebook’s Ongoing VIP-User Data Exfiltration Vulnerability via Adobe’s Marketo Software & Why One-Token-User-Authentication Protocols are Unsafe


📈 28.38 Punkte
📰 IT Security Nachrichten

📰 Facebook’s Ongoing VIP-User Data Exfiltration Vulnerability via Adobe’s Marketo Software & Why One-Token-User-Authentication Protocols are Unsafe


📈 28.38 Punkte
📰 IT Security Nachrichten

🕵️ Ti Kan xmcd 2.6.17.1 var/lib/cddb denial of service


📈 27.94 Punkte
🕵️ Sicherheitslücken

🕵️ D-Link DSL-2640T cgi-bin/webcm var:RelaodHref/var:conid cross site scripting


📈 27.2 Punkte
🕵️ Sicherheitslücken

🐧 [ask] ZRam on /var/tmp? Compressing /var/tmp, possible?


📈 27.2 Punkte
🐧 Linux Tipps

📰 Stack Overflow is leaking user emails (unsafe use of md5 hashes)


📈 27.17 Punkte
📰 IT Security Nachrichten

🕵️ CVE-2013-1771 | Monkeyd on Gentoo Log File master.log log file (OSVDB-90602)


📈 27.1 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2014-3536 | CloudForms Management Engine 5 Registration top_output.log Log log file


📈 27.1 Punkte
🕵️ Sicherheitslücken

🐧 The file /var/lib/dbus/machine-id matters for your privacy (and Devuan fixed it)


📈 26.8 Punkte
🐧 Linux Tipps

📰 The File<nobr> <wbr></nobr>/var/lib/dbus/machine-id Matters For Your Privacy (and Devuan Fixed It)


📈 26.8 Punkte
📰 IT Security Nachrichten

🕵️ Dibbler 0.6.0 var/lib/dibbler unknown vulnerability [CVE-2007-5028]


📈 26.28 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2015-8222 | Ubuntu lxd prior 0.20-0ubuntu4.1 /var/lib/lxd/unix.socket access control (USN-2809-1 / SBV-54568)


📈 26.28 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2016-1581 | lxd up to 2.0.1 /var/lib/lxd/zfs.img access control (USN-2988-1 / Nessus ID 91424)


📈 26.28 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2016-20015 | SmokePing up to 2.7.3-r1 on Gentoo initscript /var/lib/smokeping race condition


📈 26.28 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-33912 | Checkmk up to 1.6.9p29/2.0.0p26/2.1.0p3/2.2.0i1 on Debian /var/lib/dpkg/info/ permission


📈 26.28 Punkte
🕵️ Sicherheitslücken

matomo
•