2485 matches found
CVE-2005-1041
The fibseqstart function in fibhash.c in Linux kernel allows local users to cause a denial of service system crash via /proc/net/route...
DEBIAN-CVE-2005-0337
Postfix 2.1.3, when /proc/net/ifinet6 is not available and permitmxbackup is enabled in smtpdrecipientrestrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname...
security flaw
Linux kernel 2.6.10 and 2.6.11rc1-bk6 uses different size types for offset arguments to the procfileread and locksreadproc functions, which leads to a heap-based buffer overflow when a signed comparison causes negative integers to be used in a positive context...
security flaw
The fibseqstart function in fibhash.c in Linux kernel allows local users to cause a denial of service system crash via /proc/net/route...
CVE-2005-1041
The CVE-2005-1041 issue affects the Linux kernel and is caused by the fib_seq_start() function in fib_hash.c, allowing a local attacker to crash the system via /proc/net/route (Denial of Service). Public advisories confirm affected distributions and provide fixes: Ubuntu USN-131-1 upgrades to ker...
CVE-2005-1041
The fibseqstart function in fibhash.c in Linux kernel allows local users to cause a denial of service system crash via /proc/net/route...
CVE-2005-1041: Undefined Security Weakness
The fibseqstart function in fibhash.c in Linux kernel allows local users to cause a denial of service system crash via /proc/net/route...
USN-95-1: Linux kernel vulnerabilities
A remote Denial of Service vulnerability was discovered in the Netfilter IP packet handler. This allowed a remote attacker to crash the machine by sending specially crafted IP packet fragments. CAN-2005-0209 The Netfilter code also contained a memory leak. Certain locally generated packet fragmen...
PT-2005-1582 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions 2.6.10 through 2.6.11rc1-bk6 Description: The issue arises from the Linux kernel using different size types for offset arguments to the proc file read and locks read proc functions. This discrepancy leads to a heap-based...
CVE-2004-2613
Unspecified vulnerability in procfs in the Linux-VServer stable branch for the 2.4 kernel before 1.23 and Linux-VServer development branch for the 2.4 kernel before 1.3.5 has unspecified impact and attack vectors, related to "write access to specific proc entries from a vserver context", a...
CVE-2004-1058: Undefined Security Weakness
Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is still spawning via /proc/.../cmdline...
CVE-2002-1231
CVE-2002-1231 affects SCO UnixWare 7.1.1 and Open UNIX 8.0.0. A local user can trigger a denial of service by performing an rcp of /proc. Vulnerable binaries include /etc/conf/pack.d/fs/Driver_atup.o and Driver_mp.o. The advisory CSSA-2002-SCO.41 provides fixed packages: erg712112c.pkg.Z for Unix...
CVE-2002-1380: Undefined Security Weakness
Linux kernel 2.2.x allows local users to cause a denial of service crash by using the mmap function with a PROTREAD parameter to access non-readable memory pages through the /proc/pid/mem interface...
CVE-2002-1231: Undefined Security Weakness
SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to cause a denial of service via an rcp call on /proc...
linux kernel information leak
/proc problems hit again...
GLSA-200407-16 : Linux Kernel: Multiple DoS and permission vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200407-16 Linux Kernel: Multiple DoS and permission vulnerabilities The Linux kernel allows a local attacker to mount a remote file system on a vulnerable Linux host and modify files' group IDs. On 2.4 series kernels this...
Linux Kernel: Multiple DoS and permission vulnerabilities
Background The Linux kernel is responsible for managing the core aspects of a GNU/Linux system, providing an interface for core system applications as well as providing the essential structure and capability to access hardware that is needed for a running system. Description The Linux kernel allo...
CVE-2004-0587
CVE-2004-0587: Insecure permissions on /proc/scsi/qla2300/HbaApiNode in the Linux kernel allow a local unprivileged user to cause a denial of service. Connected advisories (RHSA-2004:413, RHSA-2004:418, Mandrake MDKSA-2004:066, Ubuntu/NVD entry) describe kernel updates to fix this and related iss...
CVE-2004-0587: Undefined Security Weakness
Insecure permissions for the /proc/scsi/qla2300/HbaApiNode file in Linux allows local users to cause a denial of service...
CVE-2004-0228
CVE-2004-0228 refers to an integer signedness error in the cpufreq /proc handler (cpufreq_procctl) of the Linux 2.6 kernel, enabling local users to escalate privileges to kernel level. The issue is discussed in multiple advisories (e.g., SUSE, Gentoo GLSA 200407-02, Fedora 2004-111) as part of Li...