-
CVE-2011-4317 httpd: uri scheme bypass of the reverse proxy vulnerability
CVE ID CVE-2011-4317 DESCRIPTION The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse…
-
CVE-2012-0053 httpd: cookie exposure due to error responses
CVE ID CVE-2012-0053 DESCRIPTION protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a (1) long or (2) malformed…
-
Security: Common false positive scan results
SUMMARY Below are some common false positive results from security scans. DESCRIPTION Unitrends vulnerability responses for some common false positive scan resultsShort DescriptionSeverityCVEFamilyUnitrends RiskMicrosoft Windows SMB Guest Account Local User AccessMediumCVE-1999-0505Windowsnone *1SMB Signing…
-
CVE-2016-10012 openssh: Bounds check evaded in shared memory manager with pre-authentication compression support
CVE ID CVE-2016-10012 DESCRIPTION It was found that the boundary checks in the code implementing support for pre-authentication compression could have been optimized out by certain compilers. An attacker able to compromise the privilege-separated process could possibly use this flaw for further attacks against the…
-
CVE-2017-12479: Unitrends LOGDIR privilege escalation RCE
CVE ID CVE-2017-12479 DESCRIPTION It was discovered that an issue in the Unitrends session logic allowed using the LOGDIR environment variable during a web session to elevate an existing low privilege user to root privileges. A remote attacker with existing low-privilege credentials could then execute arbitrary commands…
-
Boomerang FAQ
SUMMARY Frequently Asked Questions for Unitrends Boomerang DESCRIPTION Unitrends Boomerang is available as a virtual appliance that lets you easily replicate your VMware VMs to low cost AWS S3 or Azure Blob storage, without costing you a cent for cloud compute. When needed, Boomerang will automate the conversion and…
-
CVE-2007-2243: OpenSSH S/KEY Authentication Enumeration
SUMMARY Not vulnerable. CVE ID CVE-2007-2243 DESCRIPTION OpenSSH S/KEY Authentication Enumeration OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the existence of user accounts by attempting to authenticate via S/KEY, which displays a different response if the…
-
CVE-2017-1000368 sudo: Privilege escalation via improper get_process_ttyname parsing
CVE ID CVE-2017-1000368 DESCRIPTION It was found that the original fix for CVE-2017-1000367 was incomplete. A flaw was found in the way sudo parsed tty information from the process status file in the proc filesystem. A local user with privileges to execute commands via sudo could use this flaw to escalate their privileges…
-
CVE-2018-3620 kernel: L1 Terminal Fault: OS/SMM
CVE ID CVE-2018-3620 DESCRIPTION Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis. 7.1 High…
-
CVE-2017-1000365: kernel: stack limit bypass
CVE ID CVE-2017-1000365 DESCRIPTION The Linux Kernel imposes a size restriction on the arguments and environmental strings passed through RLIMIT_STACK/RLIM_INFINITY (1/4 of the size), but does not take the argument and environment pointers into account, which allows attackers to bypass this limitation. This affects Linux…