[FD] CVE Request -- mapr: information disclosure vulnerability

2017-04-03 Thread Mark Felder
ite docs[1] casually describe the option, "Pass this option to prevent MapR from silently altering permissions in /etc/shadow." These files are part of the mapr-core-internal package: # rpm -fq /opt/mapr/server/configure.sh mapr-core-internal-5.2.0.39122.GA-1.x86_64 # rpm -fq /opt/mapr/serv

[FD] Charter Spectrum Business HTTP MITM

2015-10-05 Thread Mark Felder
Hello, You probably don't need to be told otherwise, but do not trust Charter (or any ISP) with your HTTP traffic even if you're paying for a business connection and expect internet without tampering or analysis. I recently started receiving redirects to a Terms & Conditions page on IPv4 HTTP traf

[FD] Mysterious CVE-2008-568 (Solaris)

2015-04-30 Thread Mark Felder
It appears to me that CVE-2008-568 is rather hard to find information about, outside the public exploit [1] and advisory [2] issued by the team that found it. It's unknown to CVE sites probably because it's only referenced by 3 digits instead of 4. The patch README [3] doesn't seem to reference thi