canonical ubuntu linux 13.04 vulnerabilities and exploits

(subscribe to this query)

X.org X server 1.13.3 and previous versions, when not run as root, allows local users to cause a denial of service (crash) or possibly gain privileges via vectors involving cached xkb files.

Canonical Ubuntu Linux 13.04 Canonical Ubuntu Linux 12.10 Canonical Ubuntu Linux 12.04

Apport 2.12.5 and previous versions uses weak permissions for core dump files created by setuid binaries, which allows local users to obtain sensitive information by reading the file.

Canonical Ubuntu Linux 13.04 Canonical Ubuntu Linux 13.10 Canonical Ubuntu Linux 12.10 Canonical Ubuntu Linux 12.04

Race condition in the post-installation script (mysql-server-5.5.postinst) for MySQL Server 5.5 for Debian GNU/Linux and Ubuntu Linux creates a configuration file with world-readable permissions before restricting the permissions, which allows local users to read the file and obt...

Canonical Ubuntu Linux 13.04 Canonical Ubuntu Linux 12.10 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 10.04

A certain Ubuntu build procedure for perf, as distributed in the Linux kernel packages in Ubuntu 10.04 LTS, 12.04 LTS, 12.10, 13.04, and 13.10, sets the HOME environment variable to the ~buildd directory and consequently reads the system configuration file from the ~buildd direct...

Canonical Ubuntu Linux 13.04 Canonical Ubuntu Linux 13.10 Canonical Ubuntu Linux 12.10 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 10.04

The winbind_name_list_to_sid_string_list function in nsswitch/pam_winbind.c in Samba up to and including 4.1.2 handles invalid require_membership_of group names by accepting authentication by any user, which allows remote authenticated users to bypass intended access restrictions...

Samba Samba Canonical Ubuntu Linux 13.04 Canonical Ubuntu Linux 13.10 Canonical Ubuntu Linux 12.10 Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 12.04

Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and previous versions allow local users to inject arbitrary web script or HTML via an instance name to (1) "Volumes" or (2) "Network Topology" page.

Openstack Horizon Opensuse Opensuse 13.1 Canonical Ubuntu Linux 13.04 Canonical Ubuntu Linux 13.10 Canonical Ubuntu Linux 12.10

Multiple stack-based and heap-based buffer overflows in Network Audio System (NAS) 1.9.3 allow local users to cause a denial of service (crash) or possibly execute arbitrary code via the (1) display command argument to the ProcessCommandLine function in server/os/utils.c; (2) Res...

Canonical Ubuntu Linux 13.04 Canonical Ubuntu Linux 12.10 Canonical Ubuntu Linux 12.04 Radscan Network Audio System 1.9.3

Format string vulnerability in the b43_request_firmware function in drivers/net/wireless/b43/main.c in the Broadcom B43 wireless driver in the Linux kernel up to and including 3.9.4 allows local users to gain privileges by leveraging root access and including format string specif...

Linux Linux Kernel Debian Debian Linux 6.0 Canonical Ubuntu Linux 13.04 Canonical Ubuntu Linux 12.10 Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 12.04

1 EDB exploit

Directory traversal vulnerability in File Roller 3.6.x prior to 3.6.4, 3.8.x prior to 3.8.3, and 3.9.x prior to 3.9.3, when libarchive is used, allows remote malicious users to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory str...

File Roller Project File Roller Canonical Ubuntu Linux 13.04 Canonical Ubuntu Linux 12.10

httplib2 0.7.2, 0.8, and previous versions, after an initial connection is made, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle malicious users ...

Canonical Ubuntu Linux 13.04 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 12.10 Canonical Ubuntu Linux 10.04 Httplib2 Project Httplib2 Httplib2 Project Httplib2 0.8

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook