CVE-2011-0676

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer...

Microsoft Windows Kernel 'Win32k.sys' (CVE-2011-0676) Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel due to a NULL-pointer dereference. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete...

CVE-2010-0676

Directory traversal vulnerability in index.php in the RWCards comrwcards component 3.0.18 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter...

CVE-2010-0676

Directory traversal vulnerability in index.php in the RWCards comrwcards component 3.0.18 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter...

CVE-2010-0676

CVE-2010-0676 describes a directory traversal vulnerability in the Joomla! component RWCards (com_rwcards) version 3.0.18, where an attacker can read arbitrary files by manipulating the controller parameter with a .. sequence. The issue affects the index.php file in the component and is documente...

SLES10: Security update for Linux kernel

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kernel-bigsmp kernel-debug kernel-default kernel-kdump kernel-smp kernel-source kernel-syms kernel-vmi kernel-vmipae kernel-xen kernel-xenpae More details ma...

openSUSE 10 Security Update : kernel (kernel-6440)

This kernel update for openSUSE 10.3 fixes some bugs and several security problems. The following security issues are fixed: CVE-2009-2692: A missing NULL pointer check in the socket sendpage function can be used by local attackers to gain root privileges. CVE-2009-2406: A kernel stack overflow...

SuSE 11 Security Update : Linux kernel (SAT Patch Numbers 713 / 715 / 716)

This Linux kernel update for SUSE Linux Enterprise 11 fixes lots of bugs and some security issues. The kernel was also updated to the 2.6.27.21 stable release. - nfsd in the Linux kernel does not drop the CAPMKNOD capability before handling a user request in a thread, which allows local users to...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 6109)

This Linux kernel update for SUSE Linux Enterprise 10 Service Pack 2 fixes various bugs and several security issues. The following security issues were fixed: CVE-2009-0675: The skfpioctl function in drivers/net/skfp/skfddi.c in the Linux kernel permits SKFPCLRSTATS requests only when the...

SUSE: Security Advisory for kernel (SUSE-SA:2009:045)

The remote host is missing updates announced in advisory SUSE-SA:2009:045. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

openSUSE Security Update : kernel (kernel-733)

This Linux kernel update for openSUSE 11.1 fixes lots of bugs and some security issues. The kernel was also updated to the 2.6.27.21 stable release. CVE-2009-1072: nfsd in the Linux kernel does not drop the CAPMKNOD capability before handling a user request in a thread, which allows local users t...

[SECURITY] [DSA 1794-1] New Linux 2.6.18 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1794-1 [email protected] http://www.debian.org/security/ dann frazier May 6, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

CentOS Security Advisory CESA-2009:0459 (kernel)

The remote host is missing updates to kernel announced in advisory CESA-2009:0459. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

CentOS Security Advisory CESA-2009:0459 (kernel)

The remote host is missing updates to kernel announced in advisory CESA-2009:0459. CESA-2009:0459 63946 2 $Id: ovcesa20090459.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:0459 kernel Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

SuSE Security Advisory SUSE-SA:2009:021 (kernel)

The remote host is missing updates announced in advisory SUSE-SA:2009:021. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

SuSE Security Advisory SUSE-SA:2009:021 (kernel)

The remote host is missing updates announced in advisory SUSE-SA:2009:021. OpenVAS Vulnerability Test $Id: susesa2009021.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:021 kernel Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CentOS Security Advisory CESA-2009:0326 (kernel)

The remote host is missing updates to kernel announced in advisory CESA-2009:0326. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

RedHat Security Advisory RHSA-2009:0326

The remote host is missing updates to the kernel announced in advisory RHSA-2009:0326. Security fixes: memory leaks were found on some error paths in the icmpsend function in the Linux kernel. This could, potentially, cause the network connectivity to cease. CVE-2009-0778, Important Chris Evans...

Debian: Security Advisory (DSA-1749-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-0676

The sockgetsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel memory via an SOBSDCOMPAT getsockopt request...