News Items

News Categories

News Items

Exploits Discovered - Published CVE-2017-14484

Security News, Business News - Sep 15, 2017

Title: Gentoo sci-mathematics/gimps root privilege escalation via init scriptAuthor: Michael OrlitzkyFixedin:SummaryThe Gentoo sci-mathematics/gimps package before 28.10-r1 allows local users to gain root privileges by creating a hard link under /var/lib/gimps, because an unsafe chown -R command is...

Baltimore Business Journal ranks Metro Data, Inc. as Top-50 "Veteran Owned Businesses"

Business News ( Hunt Valley, Maryland ) - Sep 14, 2017

The Baltimore Business Journal (BBJ) ranks Metro Data, Inc. as one of 2016's Top-50 "Veteran Owned Businesses" in the Baltimore region as published in the September 8-14, 2017 Newspaper. About the Baltimore Business JournalThe Baltimore Business Journal, where you'll find the latest...

Exploits Discovered - Published CVE-2017-14312

Security News, Business News - Sep 11, 2017

Title: Nagios core root privilege escalation via insecure permissionsAuthor: Michael OrlitzkyFixedin:SummaryNagios installs two sets of files with insecure permissions: after installation, the executables and the configuration files are all owned by the same unprivileged user and group (typically, n...

Exploits Discovered - Published CVE-2017-14159

Security News, Business News - Sep 05, 2017

Title: OpenLDAP privilege escalation via PID file manipulationAuthor: Michael OrlitzkyFixedin:SummaryThe slapd daemon in all versions of OpenLDAP creates a PID file after dropping privileges to a non-root account. That may be exploitable by the non-root account to kill root processes, because any ro...

Exploits Discovered - Published CVE-2017-14102

Security News, Business News - Sep 01, 2017

Title: MIMEDefang privilege escalation via PID file manipulationAuthor: Michael OrlitzkyFixedin: Version 2.81SummaryMIMEDefang 2.80 and earlier creates a PID file after dropping privileges to a non-root account. This is exploitable by that non-root account to kill root processes, because the init sc...

Exploits Discovered - Published CVE-2017-13649

Security News, Business News - Aug 23, 2017

Title: UnrealIRCd privilege escalation via PID file manipulationAuthor: Michael OrlitzkyFixedin:SummaryUnrealIRCd (all versions) creates a PID file after dropping privileges to a non-root account. That may be exploitable by the non-root account to kill root processes, because any root script (for ex...

Exploits Discovered - Published CVE-2017-12847

Security News, Business News - Aug 14, 2017

Title: Nagios core privilege escalation via PID file manipulationAuthor: Michael OrlitzkyFixedin: commits 1b19734 and 3baffa7, version 4.3.3SummaryNagios 4.3.2 and earlier creates a PID file after dropping privileges to a non-root account. This is exploitable by that non-root account to kill root p...

Metro Data, Inc. staff attend launch of Baltimore Cyber Range, and are proud to be members of the cybersec consortium.

Business News ( Baltimore, Maryland ) - Aug 03, 2017

The staff of Metro Data, Inc. were excited to attend of launch of the Baltimore Cyber Range, and are proud to be members of their cybersec consortium.Maryland Governor Larry Hogan today joined Stephen Thomas, general manager of Cyberbit North America; Bruce Spector, CEO of Baltimore-based Elec...

Exploits Discovered - Published CVE-2017-11747

Security News, Business News - Jul 30, 2017

Title: Tinyproxy privilege escalation via PID file manipulationAuthor: Michael OrlitzkyFixedin: commit 9acb0cbSummaryThe tinyproxy daemon creates its PID file after dropping privileges to a non-root user. That may be exploited (through init scripts or other management tools) by the unprivileged use...

Exploits Discovered - Published CVE-2017-11746

Security News, Business News - Jul 30, 2017

Title: Tenshi privilege escalation via PID file manipulationAuthor: Michael OrlitzkyFixedin: commits 46b0148 and d0e7f28, version 0.16SummaryTenshi 0.15 and earlier creates a tenshi.pid file after dropping privileges to a non-root account. This is exploitable by that non-root account to kill root pr...

Pages

Under no circumstances should you send an email to ackbar@viabit.com .

Managed I.T. Services

The difference with our "Metro Manage I.T." model is that we proactively monitor your systems and keep them up-to-date and healthy.

Hardware Sales & Support

Whether you're in need of computer support, networking monitoring, hardware or software, Metro Data is the one-stop solution for all of your business and corporate technology needs.

Email Hosting and Filtering

We offer filtering services to stop the constant flow of junk mail before it ever makes it into your inbox. Let Metro Data be your one stop shop for all your I.T. needs!