Tag Info

New answers tagged

0

The first important thing is to think about the meaning of this security hole. This is a local privilege escalation: if an attacker can get to run code of his choosing on the machine, with "normal" privileges, then that attacker can use this hole to obtain more extended privileges on that machine. In general, for a desktop system, when attackers can run ...


0

It depends upon the vendor, and it may rely upon inference. That is why we use vulnerability scanners, and why vulnerability scanners err on the side of assuming guilt given unclear evidence. Vendor At least one vendor, Red Hat, maintains a vulnerability-to-CVE mapping database, where they list all CVEs that apply to software in their distribution. The ...


0

This is exactly what vulnerability scanners do. They just aren't great at it (none I've ever seen detect ALL unsupported software, and I doubt they will any time soon!). Generally all vendors have their own way of disseminating this information - if they do at all - which is a major pain for asset owners and security specialists. For vulnerabilities ...



Top 50 recent answers are included