Tag

Root Access

All articles tagged with #root access

Critical Cisco Vulnerability in Unified CM Exposes Root Access and Urges Phone Replacement

Originally Published 6 months ago — by The Hacker News

Cisco has issued security updates for a critical vulnerability (CVE-2025-20309) in Unified Communications Manager that allows attackers to gain root access using static credentials, potentially leading to severe network compromise. The flaw affects multiple versions and was discovered during internal testing, with no evidence of active exploitation yet.

technology network-security cisco cve-2025-20309 network-security root-access unified-cm vulnerability

CISA Warns of Active Linux Kernel Privilege Escalation Vulnerabilities Exploited in the Wild

Originally Published 6 months ago — by The Hacker News

Cybersecurity researchers have discovered two critical local privilege escalation flaws in Linux distributions, allowing unprivileged users to gain root access via PAM and udisks, with potential for system compromise. Patches are recommended to mitigate these vulnerabilities.

technology cybersecurity cybersecurity linux-vulnerabilities pam-flaw privilege-escalation root-access udisks-exploit

"Critical Root Access Flaw Discovered in Glibc Library on Major Linux Distros"

Originally Published 1 year ago — by The Hacker News

A new security flaw in the GNU C library (glibc) allows local attackers to gain root access on Linux machines, impacting major distributions like Debian, Ubuntu, and Fedora. The vulnerability, tracked as CVE-2023-6246, is a heap-based buffer overflow in the __vsyslog_internal() function and was accidentally introduced in glibc 2.37. Further analysis also revealed two more flaws in the same function and a bug in the qsort() function, affecting all glibc versions released since 1992. This comes after a previous high-severity flaw in glibc was detailed by Qualys, emphasizing the critical need for strict security measures in software development.

technology technologysecurity cybersecurity glibc linux root-access technologysecurity vulnerability