jetlib.sec » Tags » cifs

Feeds

167657 items (5086 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db) (698 unread)
• OSVDB Vulnerabilities
• Exploit-DB (367 unread)
• SecurityFocus Vulnerabilities (1629 unread)
• Bugtraq (528 unread)
• Full Disclosure (875 unread)
• XSSed (3 unread)
• Packet Storm Security Headlines (525 unread)
• Packet Storm Security Advisories (323 unread)
• Packet Storm Security Exploits (115 unread)
• Packet Storm Security Recent Files (2 unread)
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing (11 unread)
• SecuriTeam (10 unread)
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

50 items tagged "cifs"

Related tags: security advisory [+], mount local [+], local security [+], red hat security [+], linux file systems [+], identification [+], gentoo linux security [+], file [+], chdir [+], linux kernel [+], linux [+], x.org [+], setuid [+], server samba [+], security [+], red [+], memory segment [+], memory exhaustion [+], mandriva linux [+], mandriva [+], linux security [+], hp ux [+], hat [+], gentoo [+], kernel [+], denial of service [+], system [+], service [+], server [+], safer use [+], remote buffer overflow vulnerability [+], remote buffer overflow [+], potential security vulnerability [+], null pointer dereference [+], null pointer [+], null [+], mdvsa [+], load [+], flaw [+], direct [+], bugtraq [+], buffer overflow vulnerability [+], audio [+], service vulnerability [+], vulnerability [+]

• December 19, 2012
• 14:12

  [Audio] CIFS is a load of CACA

   » ‎ SecDocs
  Tags: Windows
  Event: DEFCON 5
  

  Tags:  audio load cifs  

• October 02, 2012
• 17:00

  Linux Kernel CIFS 'O_DIRECT' NULL Pointer Deference Local Denial of Service Vulnerability

   » ‎ SecuriTeam
  This allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact by setting the O_DIRECT flag during an attempt to open a file on a CIFS filesystem.

  Tags:  null direct cifs null-pointer-dereference service-vulnerability denial-of-service  

• June 25, 2012
• 15:59

  Gentoo Linux Security Advisory 201206-29

   » ‎ Packet Storm Security Advisories
  Gentoo Linux Security Advisory 201206-29 - Multiple vulnerabilities were found in mount-cifs, the worst of which leading to privilege escalation. Versions less than 3.4.6 are affected.

  Tags:  gentoo security linux gentoo-linux-security security-advisory cifs  

• 15:59

  Gentoo Linux Security Advisory 201206-29

   » ‎ Packet Storm Security Recent Files
  Gentoo Linux Security Advisory 201206-29 - Multiple vulnerabilities were found in mount-cifs, the worst of which leading to privilege escalation. Versions less than 3.4.6 are affected.

  Tags:  gentoo security linux gentoo-linux-security security-advisory cifs  

• 15:59

  Gentoo Linux Security Advisory 201206-29

   » ‎ Packet Storm Security Misc. Files
  Gentoo Linux Security Advisory 201206-29 - Multiple vulnerabilities were found in mount-cifs, the worst of which leading to privilege escalation. Versions less than 3.4.6 are affected.

  Tags:  gentoo-linux-security security-advisory cifs  

• June 20, 2012
• 7:23

  Red Hat Security Advisory 2012-0902-04

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-0902-04 - The cifs-utils package contains tools for mounting and managing shares on Linux using the SMB/CIFS protocol. The CIFS shares can be used as standard Linux file systems. A file existence disclosure flaw was found in mount.cifs. If the tool was installed with the setuid bit set, a local attacker could use this flaw to determine the existence of files or directories in directories not accessible to the attacker. Note: mount.cifs from the cifs-utils package distributed by Red Hat does not have the setuid bit set. We recommend that administrators do not manually set the setuid bit for mount.cifs.

  Tags:  red-hat-security linux-file-systems cifs  

• 7:23

  Red Hat Security Advisory 2012-0902-04

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2012-0902-04 - The cifs-utils package contains tools for mounting and managing shares on Linux using the SMB/CIFS protocol. The CIFS shares can be used as standard Linux file systems. A file existence disclosure flaw was found in mount.cifs. If the tool was installed with the setuid bit set, a local attacker could use this flaw to determine the existence of files or directories in directories not accessible to the attacker. Note: mount.cifs from the cifs-utils package distributed by Red Hat does not have the setuid bit set. We recommend that administrators do not manually set the setuid bit for mount.cifs.

  Tags:  setuid hat red red-hat-security linux-file-systems cifs  

• 7:23

  Red Hat Security Advisory 2012-0902-04

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2012-0902-04 - The cifs-utils package contains tools for mounting and managing shares on Linux using the SMB/CIFS protocol. The CIFS shares can be used as standard Linux file systems. A file existence disclosure flaw was found in mount.cifs. If the tool was installed with the setuid bit set, a local attacker could use this flaw to determine the existence of files or directories in directories not accessible to the attacker. Note: mount.cifs from the cifs-utils package distributed by Red Hat does not have the setuid bit set. We recommend that administrators do not manually set the setuid bit for mount.cifs.

  Tags:  setuid hat red red-hat-security linux-file-systems cifs  

• May 31, 2012
• 17:11

  Ubuntu Security Notice USN-1458-1

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 1458-1 - A flaw was found in the Linux's kernels ext4 file system when mounted with a journal. A local, unprivileged user could exploit this flaw to cause a denial of service. A flaw was discovered in the Linux kernel's cifs file system. An unprivileged local user could exploit this flaw to crash the system leading to a denial of service. H. Peter Anvin reported a flaw in the Linux kernel that could crash the system. A local user could exploit this flaw to crash the system. Various other issues were also addressed.

  Tags:  linux-kernel denial-of-service cifs  

• 17:11

  Ubuntu Security Notice USN-1458-1

   » ‎ Packet Storm Security Recent Files
  Ubuntu Security Notice 1458-1 - A flaw was found in the Linux's kernels ext4 file system when mounted with a journal. A local, unprivileged user could exploit this flaw to cause a denial of service. A flaw was discovered in the Linux kernel's cifs file system. An unprivileged local user could exploit this flaw to crash the system leading to a denial of service. H. Peter Anvin reported a flaw in the Linux kernel that could crash the system. A local user could exploit this flaw to crash the system. Various other issues were also addressed.

  Tags:  linux-kernel denial-of-service cifs  

• 17:11

  Ubuntu Security Notice USN-1458-1

   » ‎ Packet Storm Security Misc. Files
  Ubuntu Security Notice 1458-1 - A flaw was found in the Linux's kernels ext4 file system when mounted with a journal. A local, unprivileged user could exploit this flaw to cause a denial of service. A flaw was discovered in the Linux kernel's cifs file system. An unprivileged local user could exploit this flaw to crash the system leading to a denial of service. H. Peter Anvin reported a flaw in the Linux kernel that could crash the system. A local user could exploit this flaw to crash the system. Various other issues were also addressed.

  Tags:  linux-kernel denial-of-service cifs  

• 0:00

  Vuln: Linux Kernel CVE-2012-1090 CIFS 'umount' Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CVE-2012-1090 CIFS 'umount' Local Denial of Service Vulnerability

  Tags:  kernel cifs linux service-vulnerability linux-kernel denial-of-service  

• May 21, 2012
• 0:00

  Vuln: Linux Kernel CVE-2012-1090 CIFS 'umount' Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CVE-2012-1090 CIFS 'umount' Local Denial of Service Vulnerability

  Tags:  kernel cifs linux service-vulnerability linux-kernel denial-of-service  

• May 08, 2012
• 17:17

  Ubuntu Security Notice USN-1432-1

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 1432-1 - A flaw was found in the Linux's kernels ext4 file system when mounted with a journal. A local, unprivileged user could exploit this flaw to cause a denial of service. A flaw was discovered in the Linux kernel's cifs file system. An unprivileged local user could exploit this flaw to crash the system leading to a denial of service. A flaw was found in the Linux kernel's ext4 file system when mounting a corrupt filesystem. A user-assisted remote attacker could exploit this flaw to cause a denial of service. Various other issues were also addressed.

  Tags:  system flaw linux linux-kernel denial-of-service cifs  

• 17:17

  Ubuntu Security Notice USN-1432-1

   » ‎ Packet Storm Security Recent Files
  Ubuntu Security Notice 1432-1 - A flaw was found in the Linux's kernels ext4 file system when mounted with a journal. A local, unprivileged user could exploit this flaw to cause a denial of service. A flaw was discovered in the Linux kernel's cifs file system. An unprivileged local user could exploit this flaw to crash the system leading to a denial of service. A flaw was found in the Linux kernel's ext4 file system when mounting a corrupt filesystem. A user-assisted remote attacker could exploit this flaw to cause a denial of service. Various other issues were also addressed.

  Tags:  linux-kernel denial-of-service cifs  

• 17:17

  Ubuntu Security Notice USN-1432-1

   » ‎ Packet Storm Security Misc. Files
  Ubuntu Security Notice 1432-1 - A flaw was found in the Linux's kernels ext4 file system when mounted with a journal. A local, unprivileged user could exploit this flaw to cause a denial of service. A flaw was discovered in the Linux kernel's cifs file system. An unprivileged local user could exploit this flaw to crash the system leading to a denial of service. A flaw was found in the Linux kernel's ext4 file system when mounting a corrupt filesystem. A user-assisted remote attacker could exploit this flaw to cause a denial of service. Various other issues were also addressed.

  Tags:  linux-kernel denial-of-service cifs  

• 5:03

  Bugtraq: [ MDVSA-2012:069 ] cifs-utils

   » ‎ SecurityFocus Vulnerabilities
  [ MDVSA-2012:069 ] cifs-utils

  Tags:  bugtraq mdvsa cifs  

• May 05, 2012
• 19:25

  Mandriva Linux Security Advisory 2012-070

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2012-070 - A file existence disclosure flaw was found in the way mount.cifs tool of the Samba SMB/CIFS tools suite performed mount of a Linux CIFS filesystem. A local user, able to mount a remote CIFS share / target to a local directory could use this flaw to confirm existence of a file system object (file, directory or process descriptor) via error messages generated during the mount.cifs tool run. The updated packages have been patched to correct this issue.

  Tags:  mandriva cifs linux mandriva-linux linux-security security-advisory  

• 18:52

  Mandriva Linux Security Advisory 2012-069

   » ‎ Packet Storm Security Misc. Files
  Mandriva Linux Security Advisory 2012-069 - A file existence dislosure flaw was found in the way mount.cifs tool of the Samba SMB/CIFS tools suite performed mount of a Linux CIFS filesystem. A local user, able to mount a remote CIFS share / target to a local directory could use this flaw to confirm existence of a file system object (file, directory or process descriptor) via error messages generated during the mount.cifs tool run. The updated packages have been patched to correct this issue.

  Tags:  mandriva cifs linux mandriva-linux linux-security security-advisory  

• April 25, 2012
• 11:35

  mount.cifs chdir() File Identification

   » ‎ Packet Storm Security Exploits
  mount.cifs chdir() allows for arbitrary file identification as root. All versions prior to 5.4 are affected.

  Tags:  identification chdir file cifs  

• 11:35

  mount.cifs chdir() File Identification

   » ‎ Packet Storm Security Recent Files
  mount.cifs chdir() allows for arbitrary file identification as root. All versions prior to 5.4 are affected.

  Tags:  identification chdir file cifs  

• 11:35

  mount.cifs chdir() File Identification

   » ‎ Packet Storm Security Misc. Files
  mount.cifs chdir() allows for arbitrary file identification as root. All versions prior to 5.4 are affected.

  Tags:  identification chdir file cifs  

• 0:00

  Vuln: Linux Kernel CVE-2012-1090 CIFS 'umount' Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CVE-2012-1090 CIFS 'umount' Local Denial of Service Vulnerability

  Tags:  kernel cifs linux service-vulnerability linux-kernel denial-of-service  

• April 23, 2012
• 0:00

  Vuln: Linux Kernel CVE-2012-1090 CIFS 'umount' Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CVE-2012-1090 CIFS 'umount' Local Denial of Service Vulnerability

  Tags:  kernel cifs linux service-vulnerability linux-kernel denial-of-service  

• April 17, 2012
• 0:00

  Vuln: Linux Kernel CVE-2012-1090 CIFS 'umount' Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CVE-2012-1090 CIFS 'umount' Local Denial of Service Vulnerability

  Tags:  kernel cifs linux service-vulnerability linux-kernel denial-of-service  

• December 19, 2011
• 0:00

  Vuln: Linux Kernel CIFS Mount Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CIFS Mount Local Denial of Service Vulnerability

  Tags:  kernel cifs linux mount-local service-vulnerability linux-kernel denial-of-service  

• November 29, 2011
• 0:00

  Vuln: Linux Kernel CIFS Mount Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CIFS Mount Local Denial of Service Vulnerability

  Tags:  kernel cifs linux mount-local service-vulnerability linux-kernel denial-of-service  

• November 22, 2011
• 0:00

  Vuln: Linux Kernel CIFS Mount Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CIFS Mount Local Denial of Service Vulnerability

  Tags:  kernel cifs linux mount-local service-vulnerability linux-kernel denial-of-service  

• November 21, 2011
• 0:00

  Vuln: Linux Kernel CIFS Local Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CIFS Local Security Bypass Vulnerability

  Tags:  kernel cifs linux linux-kernel local-security vulnerability  

• October 25, 2011
• 0:00

  Vuln: Linux Kernel CIFS Local Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CIFS Local Security Bypass Vulnerability

  Tags:  kernel cifs linux linux-kernel local-security vulnerability  

• 0:00

  Vuln: Linux Kernel CIFS Mount Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CIFS Mount Local Denial of Service Vulnerability

  Tags:  kernel cifs linux mount-local service-vulnerability linux-kernel denial-of-service  

• September 20, 2011
• 0:00

  Vuln: Linux Kernel CIFS Local Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CIFS Local Security Bypass Vulnerability

  Tags:  kernel cifs linux linux-kernel local-security vulnerability  

• September 15, 2011
• 0:00

  Vuln: Linux Kernel CIFS Mount Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CIFS Mount Local Denial of Service Vulnerability

  Tags:  kernel cifs linux mount-local service-vulnerability linux-kernel denial-of-service  

• June 29, 2011
• 0:00

  Vuln: Linux Kernel CIFS Local Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CIFS Local Security Bypass Vulnerability

  Tags:  kernel cifs linux linux-kernel local-security vulnerability  

• June 20, 2011
• 0:00

  Vuln: Linux Kernel CIFS DNS Lookup Cache Poisoning Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CIFS DNS Lookup Cache Poisoning Vulnerability

  Tags:  kernel cifs linux linux-kernel vulnerability  

• June 01, 2011
• 0:00

  Vuln: Linux Kernel CIFS 'O_DIRECT' NULL Pointer Deference Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CIFS 'O_DIRECT' NULL Pointer Deference Local Denial of Service Vulnerability

  Tags:  kernel cifs linux service-vulnerability null-pointer linux-kernel  

• April 15, 2011
• 0:00

  Vuln: Linux Kernel CIFS Local Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CIFS Local Security Bypass Vulnerability

  Tags:  kernel cifs linux linux-kernel local-security vulnerability  

• March 03, 2011
• 0:00

  Vuln: Linux Kernel CIFS 'CIFSSMBWrite()' Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CIFS 'CIFSSMBWrite()' Remote Denial of Service Vulnerability

  Tags:  kernel cifs linux service-vulnerability linux-kernel denial-of-service  

• December 31, 2010
• 13:45

  HP-UX CIFS Server execution of Arbitrary Code and Denial of Service Vulnerabilities

   » ‎ SecuriTeam
  Potential security vulnerabilities have been identified with HP-UX CIFS-Server (Samba).

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  hp-ux service cifs server-samba safer-use  

• October 28, 2010
• 0:00

  Vuln: Linux Kernel CIFS DNS Lookup Cache Poisoning Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CIFS DNS Lookup Cache Poisoning Vulnerability

  Tags:  kernel cifs linux linux-kernel vulnerability  

• September 23, 2010
• 0:00

  Vuln: Linux Kernel CIFS 'CIFSSMBWrite()' Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CIFS 'CIFSSMBWrite()' Remote Denial of Service Vulnerability

  Tags:  kernel cifs linux service-vulnerability linux-kernel denial-of-service  

• 0:00

  Vuln: Linux Kernel CIFS DNS Lookup Cache Poisoning Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CIFS DNS Lookup Cache Poisoning Vulnerability

  Tags:  kernel cifs linux linux-kernel vulnerability  

• September 11, 2010
• 13:01

  MDVSA-2010-172.txt

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2010-172 - Some vulnerabilities were discovered and corrected in the Linux kernel. Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel before 2.6.35 might allow local users to gain privileges or cause a denial of service via unspecified vectors. The DNS resolution functionality in the CIFS implementation in the Linux kernel before 2.6.35, when CONFIG_CIFS_DFS_UPCALL is enabled, relies on a user's keyring for the dns_resolver upcall in the cifs.upcall userspace helper, which allows local users to spoof the results of DNS queries and perform arbitrary CIFS mounts via vectors involving an add_key call, related to a cache stuffing issue and MS-DFS referrals. The do_anonymous_page function in mm/memory.c in the Linux kernel before 2.6.27.52, 2.6.32.x before 2.6.32.19, 2.6.34.x before 2.6.34.4, and 2.6.35.x before 2.6.35.2 does not properly separate the stack and the heap, which allows context-dependent attackers to execute arbitrary code by writing to the bottom page of a shared memory segment, as demonstrated by a memory-exhaustion attack against the X.Org X server. Integer overflow in the ext4_ext_get_blocks function in fs/ext4/extents.c in the Linux kernel before 2.6.34 allows local users to cause a denial of service via a write operation on the last block of a large file, followed by a sync operation.

  Tags:  kernel cifs linux x.org memory-exhaustion memory-segment linux-kernel  

• 13:00

  MDVSA-2010-172.txt

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2010-172 - Some vulnerabilities were discovered and corrected in the Linux kernel. Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel before 2.6.35 might allow local users to gain privileges or cause a denial of service via unspecified vectors. The DNS resolution functionality in the CIFS implementation in the Linux kernel before 2.6.35, when CONFIG_CIFS_DFS_UPCALL is enabled, relies on a user's keyring for the dns_resolver upcall in the cifs.upcall userspace helper, which allows local users to spoof the results of DNS queries and perform arbitrary CIFS mounts via vectors involving an add_key call, related to a cache stuffing issue and MS-DFS referrals. The do_anonymous_page function in mm/memory.c in the Linux kernel before 2.6.27.52, 2.6.32.x before 2.6.32.19, 2.6.34.x before 2.6.34.4, and 2.6.35.x before 2.6.35.2 does not properly separate the stack and the heap, which allows context-dependent attackers to execute arbitrary code by writing to the bottom page of a shared memory segment, as demonstrated by a memory-exhaustion attack against the X.Org X server. Integer overflow in the ext4_ext_get_blocks function in fs/ext4/extents.c in the Linux kernel before 2.6.34 allows local users to cause a denial of service via a write operation on the last block of a large file, followed by a sync operation.

  Tags:  kernel cifs linux x.org memory-exhaustion memory-segment linux-kernel  

• September 10, 2010
• 0:00

  Vuln: Linux Kernel CIFS DNS Lookup Cache Poisoning Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CIFS DNS Lookup Cache Poisoning Vulnerability

  Tags:  kernel cifs linux linux-kernel vulnerability  

• September 08, 2010
• 0:00

  Vuln: Linux Kernel CIFS DNS Lookup Cache Poisoning Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CIFS DNS Lookup Cache Poisoning Vulnerability

  Tags:  kernel cifs linux linux-kernel vulnerability  

• August 10, 2010
• 0:00

  Vuln: Linux Kernel CIFS DNS Lookup Cache Poisoning Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CIFS DNS Lookup Cache Poisoning Vulnerability

  Tags:  kernel cifs linux linux-kernel vulnerability  

• 0:00

  Vuln: Linux Kernel CIFS 'CIFSSMBWrite()' Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CIFS 'CIFSSMBWrite()' Remote Denial of Service Vulnerability

  Tags:  kernel cifs linux service-vulnerability linux-kernel denial-of-service  

• March 18, 2010
• 22:05

  HP-UX running HP CIFS Server Remote Unauthorized Access

   » ‎ SecuriTeam
  A potential security vulnerability has been identified with HP-UX running HP CIFS Server (Samba).

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  server hp-ux cifs potential-security-vulnerability server-samba  

• February 15, 2010
• 0:00

  Vuln: Linux Kernel CIFS 'decode_unicode_ssetup()' Remote Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CIFS 'decode_unicode_ssetup()' Remote Buffer Overflow Vulnerability

  Tags:  kernel cifs linux buffer-overflow-vulnerability remote-buffer-overflow remote-buffer-overflow-vulnerability