Ronald Volgers

Name of the Vulnerable Software and Affected Versions: Citrix XenServer versions 7.1 and newer Description: The issue is related to incorrect restriction of a directory path name with limited access. Exploitation of this issue may allow a remote attacker to gain unauthorized access to information and compromise its integrity and availability. The problem is described as a Directory Traversal issue. Recommendations: For Citrix XenServer versions 7.1 and newer, apply the necessary security patches or updates to resolve the Directory Traversal issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue concerns the suexec implementation, which contains a cgi-wrapper whitelist entry. This allows remote attackers to execute arbitrary PHP code via a request containing crafted environment variables.

The issue is related to an untrusted search path vulnerability in the /usr/local/psa/admin/sbin/wrapper component. This vulnerability allows local users to gain privileges by crafting the PATH environment variable.

The issue concerns multiple vulnerabilities in the memcached package that can be exploited remotely, potentially leading to breaches of confidentiality, integrity, and availability of protected information. Specifically, integer overflows in certain versions of memcached can allow remote attackers to execute arbitrary code by exploiting length attributes that trigger heap-based buffer overflows.

The issue concerns multiple vulnerabilities in the Samba software, which can lead to a breach of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited by a remote attacker who has passed the authentication procedure. The exploitation can result in unauthorized access to sensitive data.

The issue concerns multiple vulnerabilities in various packages of the Samba software and related components, which can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited locally or remotely. The exploitation may allow attackers to gain privileges or disrupt the system. Technical details about the exploitation include the possibility of a symlink attack on the mountpoint directory file in the mount.cifs component.