Webyast (Suse) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2013-12-23. Vendor: Suse.

CVEs of Webyast

• CVE-2013-3709 - CVSS 7.2 (high), 2013-12-23: WebYaST 1.3 uses weak permissions for config/initializers/secret_token.rb, which allows local users to gain privileges by reading the Rails secret token from…
• CVE-2013-4547 - CVSS 7.5 (high), 2013-11-23: nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI.
• CVE-2012-0435 - CVSS 5.8 (medium), 2013-01-26: SUSE WebYaST before 1.2 0.2.63-0.6.1 allows remote attackers to modify the hosts list, and subsequently conduct man-in-the-middle attacks, via a crafted /host…
• CVE-2011-4315 - CVSS 6.8 (medium), 2011-12-08: Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of…