[SECURITY] [DSA 1494-2] New linux-2.6 packages fix privilege escalation

---------------------------------------------------------------------- Debian Security Advisory DSA-1494-2 [email protected] http://www.debian.org/security/ Florian Weimer, dann frazier February 12, 2008 http://www.debian.org/security/faq -...

CVE-2008-0163

Linux kernel 2.6, when using vservers, allows local users to access resources of other vservers via a symlink attack in /proc...

CVE-2008-0163

Linux kernel 2.6, when using vservers, allows local users to access resources of other vservers via a symlink attack in /proc...

CVE-2008-0163

The CVE affects Linux kernel 2.6 in vserver setups, where a symlink issue in /proc allows local attackers to access resources across vservers (CVE-2008-0163). Public advisories confirm affected packages and indicate fixes: Debian DSA-1494-1/2 address linux-2.6 vulnerabilities and upgrade to a pat...

[slackware-security] kernel exploit fix

New kernel packages are available for Slackware 12.0, and -current to fix a local root exploit. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-0010 https://vulners.com/cve/CVE-2008-0163...

Slackware 12.0 / current : kernel exploit fix (SSA:2008-042-01)

New kernel packages are available for Slackware 12.0, and -current to fix a local root exploit. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-042-01. The text itself is copyright C...

[SECURITY] [DSA 1494-1] New linux-2.6 packages fix privilege escalation

---------------------------------------------------------------------- Debian Security Advisory DSA-1494-1 [email protected] http://www.debian.org/security/ Florian Weimer February 11, 2008 http://www.debian.org/security/faq -...

DSA-1494-1 linux-2.6 - privilege escalation

Bulletin has no description...

CVE-2007-0163

SecureKit Steganography 1.7.1 and 1.8 variants are affected. The vulnerability arises from embedding password data in the carrier file, enabling remote attackers to bypass authentication and decrypt embedded steganography by replacing the last 20 bytes of the JPEG image with alternate password in...

CentOS 3 / 4 : cups (CESA-2006:0163)

Updated CUPS packages that fix multiple security issues are now available for Red Hat Enterprise Linux. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR operating...

CVE-2006-0163

The CVE-2006-0163 entry describes a concrete SQL injection vulnerability in the PHPNuke EV 7.7 -R1 Search module (modules/Search/index.php). The flaw allows remote attackers to inject arbitrary SQL via the query parameter used by the search field, enabling potential data access or manipulation. I...

CVE-2001-0163

Cisco AP340 base station is affected by CVE-2001-0163, which causes predictable TCP Initial Sequence Numbers (ISNs) enabling a attacker to spoof or hijack TCP connections. The vulnerability is described across CVE records and corroborated by Nessus (TCP/IP Predictable ISN). The available document...

CVE-2004-0163

Sygate Secure Enterprise (SSE) 3.5MR3 and earlier are affected by a replay-based DoS vulnerability. The issue stems from using a static encryption key for HTTP exchanges between SSE servers and SSA clients and the absence of replay protection, allowing an attacker to capture a valid session and r...

Mandrake Linux Security Advisory : squid (MDKSA-2002:027)

A security issue has recently been found and fixed in the Squid-2.X releases up to and including 2.4.STABLE4. Error and boundary conditions were not checked when handling compressed DNS answer messages in the internal DNS code lib/rfc1035.c. A malicous DNS server could craft a DNS reply that caus...

CVE-2003-0163

decryptmsg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter, which allows remote attackers to cause a denial of service crash via a negative length, which overwrites arbitrary heap memory with a zero byte...

CVE-2003-0163

decryptmsg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter, which allows remote attackers to cause a denial of service crash via a negative length, which overwrites arbitrary heap memory with a zero byte...

CVE-2003-0163

The CVE affects the Gaim-Encryption plugin (versions 1.15 and earlier). The underlying issue is insufficient validation of the message length parameter in decrypt_msg, allowing a remote attacker to cause a denial of service by writing a zero byte into arbitrary heap memory when a negative length ...

CVE-2002-0163

Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via compressed DNS responses...

CVE-2002-0163

Vulnerability: Squid earlier than 2.4 STABLE4 and some 2.5/2.6 builds were exposed to a heap-based buffer overflow in the internal DNS code when handling compressed DNS responses, caused by improper bounds/checks in lib/rfc1035.c. Impact per sources: potential denial of service and possible remot...

CVE-2000-0163

CVE-2000-0163 affects FreeBSD components asmon and ascpu; local users can escalate to root via a configuration file. The connected documents confirm the vulnerable elements but do not provide version-specific details, exploit vectors, or explicit remediation steps. The impact is local privilege e...