admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-05-06 18:53:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

"-Synchronized-Data."

Browse Source
This commit is contained in:
CVE Team 2020-06-30 16:01:28 +00:00
parent 1ef986b5e9
commit 51d9209e40
No known key found for this signature in database
GPG Key ID: 5708902F06FEF743
8 changed files with 31 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
2018/1xxx/CVE-2018-1121.json
View File

@ -62,11 +62,6 @@
},
"references": {
"reference_data": [
{
"name": "GLSA-201805-14",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201805-14"
},
{
"name": "44806",
"refsource": "EXPLOIT-DB",

5
2020/3xxx/CVE-2020-3962.json
View File

@ -74,6 +74,11 @@
"refsource": "CONFIRM",
"name": "https://www.vmware.com/security/advisories/VMSA-2020-0015.html",
"url": "https://www.vmware.com/security/advisories/VMSA-2020-0015.html"
},
{
"refsource": "MISC",
"name": "https://www.zerodayinitiative.com/advisories/ZDI-20-785/",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-20-785/"
}
]
},

5
2020/3xxx/CVE-2020-3966.json
View File

@ -74,6 +74,11 @@
"refsource": "CONFIRM",
"name": "https://www.vmware.com/security/advisories/VMSA-2020-0015.html",
"url": "https://www.vmware.com/security/advisories/VMSA-2020-0015.html"
},
{
"refsource": "MISC",
"name": "https://www.zerodayinitiative.com/advisories/ZDI-20-783/",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-20-783/"
}
]
},

5
2020/3xxx/CVE-2020-3967.json
View File

@ -74,6 +74,11 @@
"refsource": "CONFIRM",
"name": "https://www.vmware.com/security/advisories/VMSA-2020-0015.html",
"url": "https://www.vmware.com/security/advisories/VMSA-2020-0015.html"
},
{
"refsource": "MISC",
"name": "https://www.zerodayinitiative.com/advisories/ZDI-20-784/",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-20-784/"
}
]
},

5
2020/3xxx/CVE-2020-3968.json
View File

@ -74,6 +74,11 @@
"refsource": "CONFIRM",
"name": "https://www.vmware.com/security/advisories/VMSA-2020-0015.html",
"url": "https://www.vmware.com/security/advisories/VMSA-2020-0015.html"
},
{
"refsource": "MISC",
"name": "https://www.zerodayinitiative.com/advisories/ZDI-20-781/",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-20-781/"
}
]
},

5
2020/3xxx/CVE-2020-3969.json
View File

@ -74,6 +74,11 @@
"refsource": "CONFIRM",
"name": "https://www.vmware.com/security/advisories/VMSA-2020-0015.html",
"url": "https://www.vmware.com/security/advisories/VMSA-2020-0015.html"
},
{
"refsource": "MISC",
"name": "https://www.zerodayinitiative.com/advisories/ZDI-20-786/",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-20-786/"
}
]
},

5
2020/3xxx/CVE-2020-3970.json
View File

@ -74,6 +74,11 @@
"refsource": "CONFIRM",
"name": "https://www.vmware.com/security/advisories/VMSA-2020-0015.html",
"url": "https://www.vmware.com/security/advisories/VMSA-2020-0015.html"
},
{
"refsource": "MISC",
"name": "https://www.zerodayinitiative.com/advisories/ZDI-20-782/",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-20-782/"
}
]
},

2
2020/4xxx/CVE-2020-4044.json
View File

@ -35,7 +35,7 @@
"description_data": [
{
"lang": "eng",
"value": "The xrdp-sesman service before version 0.9.13.1 can be crashed by connecting over port 3350 and supplying a malicious payload.\n\nOnce the xrdp-sesman process is dead, an unprivileged attacker on the server could then proceed to start their own imposter sesman service listening on port 3350. This will allow them to capture any user credentials that are submitted to XRDP and approve or reject arbitrary login credentials. For xorgxrdp sessions in particular, this allows an unauthorized user to hijack an existing session.\n\nThis is a buffer overflow attack, so there may be a risk of arbitrary code execution as well."
"value": "The xrdp-sesman service before version 0.9.13.1 can be crashed by connecting over port 3350 and supplying a malicious payload. Once the xrdp-sesman process is dead, an unprivileged attacker on the server could then proceed to start their own imposter sesman service listening on port 3350. This will allow them to capture any user credentials that are submitted to XRDP and approve or reject arbitrary login credentials. For xorgxrdp sessions in particular, this allows an unauthorized user to hijack an existing session. This is a buffer overflow attack, so there may be a risk of arbitrary code execution as well."
}
]
},