Month: February 2021

  • Design weakness of Root File System mechanism – Nvidia multiple products (4th Feb, 2021)

    Preface: In 2020, the global AI software market is expected to grow approximately 54 percent year-on-year, reaching a forecast size of 22.6 billion U.S. dollars. Background: NVIDIA® Jetson™ Linux requires a root file system. You must create a Linux host system and copy it to your reference board. NVIDIA provides a tool to generate a…

  • cve-2021-22159 – local privilege escalation vulnerability in observeIT windows agent (3rd Feb 2021)

    Preface: About decades ago, video recording was used to perform IT system monitoring and governance. The most famous brands are RSA NetWitness and CyberArk. However, products made in Israel provide a cost-effective solution. The software product named “ObserveIT”. The “ObserveIT” software product is now under the umbrella of Proofpoint, Inc.. Vulnerability details: The Proofpoint Insider…

  • No workaround: You should patch immediately – Linux sudo flaw (2nd Feb 2021)

    Background: sudo command allows you to run programs with the security privileges of another user. All auditors and security expert highly recommend to use. We can say it is a best practices. Vulnerability details: Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via “sudoedit -s”and a command-line argument that ends…

  • Adobe ColdFusion Design weakness (Vulnerability Note VU#125331) 1st Feb 2021

    Background: Adobe ColdFusion is a development platform that uses CFML to quickly build modern web apps. Unlike other programming languages, ColdFusion is tag-based. It’s easy to use and can be the backbone of numerous development modules and functionalities. Dynamic-link library loading mechanism: The DLL loaded once and all programs share the same in-memory copy of…

  • You should be vigilant! (CVE-2020-17380) – 1st Feb 2021

    Preface: Mount a drive image emulated as an SD card with qemu-system-x86_64. qemu-system-x86_64 -smp cores=4 -m 1024 -device sdhci-pci -device sd-card,drive=mydrive -drive id=mydrive,if=none,format=raw,file=image.bin Background: QEMU Integration with other virtual machines VirtualBox uses some QEMU virtual hardware devices and has a built-in qemudede-based Dynamic re-compiler.Same as KQEMU. Xen HVM has device emulation based on the QEMU…