110 matches found
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 6113)
This Linux kernel update for SUSE Linux Enterprise 10 Service Pack 2 fixes various bugs and several security issues. The following security issues were fixed: CVE-2009-0675: The skfpioctl function in drivers/net/skfp/skfddi.c in the Linux kernel permits SKFPCLRSTATS requests only when the...
CVE-2012-1046
CVE-2012-1046 describes a cross-site scripting (XSS) vulnerability in IBM Cognos TM1 9.5.2 FP1, affecting TM1 Web . The description states the vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, and clarifies this is a separate issue from CVE-2012...
CVE-2011-1046
CVE-2011-1046 : IBM FileNet P8 Content Engine (P8CE) versions 4.0.1–5.0.0 (used in FileNet P8 CM and BPM) do not require the PRIVILEGED_WRITE access role for all intended Object Store modifications, allowing remote attackers to change a privileged property of an object through unspecified vectors...
Ubuntu 9.10 / 10.04 LTS / 10.10 : sudo vulnerability (USN-1046-1)
Alexander Kurtz discovered that sudo would not prompt for a password when a group was specified in the RunasSpec. A local attacker could exploit this to execute arbitrary code as the specified group if sudo was configured to allow the attacker to use a program as this group. The group RunasSpec i...
Ubuntu: Security Advisory (USN-1046-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-1046
CVE-2010-1046 affects Rostermain 1.1 and earlier, where multiple SQL injection vulnerabilities exist in index.php. The underlying issue is improper input handling in the (1) userid (username) and (2) password parameters, enabling remote attackers to inject and execute arbitrary SQL commands. The ...
CVE-2010-1046
creationtimestamp| type| source ---|---|--- 2010-02-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11356...
SLES10: Security update for Linux kernel
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kernel-bigsmp kernel-debug kernel-default kernel-kdump kernel-smp kernel-source kernel-syms kernel-vmi kernel-vmipae kernel-xen kernel-xenpae More details ma...
SLES9: Security update for kdelibs3
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kdelibs3 For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5014846 within the Su...
SLES9: Security update for kdelibs3
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kdelibs3 For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5014846 within the Su...
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 6109)
This Linux kernel update for SUSE Linux Enterprise 10 Service Pack 2 fixes various bugs and several security issues. The following security issues were fixed: CVE-2009-0675: The skfpioctl function in drivers/net/skfp/skfddi.c in the Linux kernel permits SKFPCLRSTATS requests only when the...
SUSE: Security Advisory for kernel (SUSE-SA:2009:045)
The remote host is missing updates announced in advisory SUSE-SA:2009:045. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...
openSUSE Security Update : kernel (kernel-1211)
This kernel update for openSUSE 11.0 fixes some bugs and several security problems. The following security issues are fixed: CVE-2009-2692: A missing NULL pointer check in the socket sendpage function can be used by local attackers to gain root privileges. CVE-2009-2406: A kernel stack overflow...
Linux Kernel <= 2.6.28.3 set_selection() UTF-8 Off By One Local Exploit
No description provided by source. / CVE-2009-1046 Virtual Console UTF-8 setselection off-by-onetwo Memory Corruption Linux Kernel = 2.6.28.3 coded by: sgrakkyu at antifork.org http://kernelbof.blogspot.com/2009/07/even-when-one-byte-matters.html Dedicated to all people talking nonsense about non...
CVE-2009-1046
creationtimestamp| type| source ---|---|--- 2009-07-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9083...
Linux Kernel 2.6.24_16-23/2.6.27_7-10/2.6.28.3 (Ubuntu 8.04/8.10 / Fedora Core 10 x86-64) - 'set_selection()' UTF-8 Off-by-One Privilege Escalation
/ CVE-2009-1046 Virtual Console UTF-8 setselection off-by-onetwo Memory Corruption Linux Kernel antifork.org http://kernelbof.blogspot.com/2009/07/even-when-one-byte-matters.html Dedicated to all people talking nonsense about non exploitability of kernel heap off-by-one overflow NOTE-1: you need ...
Linux Kernel <= 2.6.28.3 set_selection() UTF-8 Off By One Local Exploit
Exploit for linux platform in category local exploits ======================================================================= Linux Kernel include include include include include include sys/sock...
Debian: Security Advisory (DSA-1800-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 1800-1] New Linux 2.6.26 packages fix several vulnerabilities
---------------------------------------------------------------------- Debian Security Advisory DSA-1800-1 [email protected] http://www.debian.org/security/ dann frazier May 15, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...
