본문 바로가기

Vulnerability Summary28

[US-CERT: Bulletin (SB13-077)] 2013년 3월 11일까지 공개된 보안 취약점 요약 Vulnerability Summary [Positive Technologies: Main features of MaxPatrol] High VulnerabilitiesPrimary Vendor -- ProductDescriptionPublishedCVSS ScoreSource & Patch InfoBack to top360systems -- image_server_2000360 Systems Maxx, Image Server Maxx, and Image Server 2000 have a hardcoded password for the root account, which makes it easier for remote attackers to execute arbitrary code, or modify video content or schedu.. 2013. 3. 21.
[US-CERT: Bulletin (SB13-070)] 2013년 3월 4일까지 공개된 보안 취약점 요약 Vulnerability Summary [Database Vulnerability Assessment : 2Secure] High VulnerabilitiesPrimary Vendor -- ProductDescriptionPublishedCVSS ScoreSource & Patch InfoBack to topfreedesktop -- dbus-glibThe dbus_g_proxy_manager_filter function in dbus-gproxy in Dbus-glib before 0.100.1 does not properly verify the sender of NameOwnerChanged signals, which allows local users to gain privileges via a spoofed signal.2013-03-0.. 2013. 3. 15.
[US-CERT: Bulletin (SB13-063)] 2013년 2월 25일까지 공개된 보안 취약점 요약 Vulnerability Summary [Vulnerability Assessment Framework] High VulnerabilitiesPrimary Vendor -- ProductDescriptionPublishedCVSS ScoreSource & Patch InfoBack to top3s-software -- codesys_gateway-serverArray index error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet.2013-02-2410.0CVE-2012-47043s-software -- codesys_gateway-serverDirectory traversal v.. 2013. 3. 5.
[US-CERT: Bulletin (SB13-056)] 2013년 2월 18일까지 공개된 보안 취약점 요약 Vulnerability Summary [이미지출처 : 아찔한 유령님의 블로그] High VulnerabilitiesPrimary Vendor -- ProductDescriptionPublishedCVSS ScoreSource & Patch Infoibm -- san_volume_controller The management GUI on the IBM SAN Volume Controller and Storwize V7000 6.x before 6.4.1.3 allows remote attackers to bypass authentication and obtain superuser access via IP packets.2013-02-197.5CVE-2012-6354 mozilla -- firefox The Chrome Object Wrappe.. 2013. 2. 26.