Tanzania Computer Emergency Response Team

Advisory No: TZCERT/SA/2018/12/05 Date of First Release: 6th December, 2018 Source: PHP, CISCO Software Affected: PHP versions 5.x through 7.1.24 Overview: Potential vulnerability has been discovered in Hypertext Pre-processor (PHP) which can allow a remote attacker to cause denial of service condition on the affected system. Description: It has been …

Cisco has released security update to address vulnerability in Cisco Prime License Manager. Exploitation of this vulnerability may allow an attacker to take control of affected database with privileges of the postgres user. Users and Administrators are encouraged to review Cisco Security Advisory and apply necessary updates.

Samba has released security update to address multiple vulnerabilities in samba. Exploitation of these vulnerabilities may allow an attacker to take control of an affected system. Users and Administrators are encouraged to review released samba security announcement and apply necessary updates. For more information visit CVE-2018-14629, CVE-2018-16841, CVE-2018-16851, CVE-2018-16852, CVE-2018-16853 …

VMware has released security updates to address vulnerabilities in Fusion Pro and Workstation Pro. Exploitation of these vulnerabilities may allow an attacker to take control of affected system. Users and Administrators are encouraged to review VMware security advisory and apply necessary updates.

VMware has released security update to address vulnerability in VMware vRealize Log Insight (vRLI). Exploitation of this vulnerability may allow an attacker to take control of affected system. Users and Administrators are encouraged to review VMware Security Advisory and apply necessary updates.