USN-1243-1: Linux kernel vulnerabilities

It was discovered that the security fix for CVE-2010-4250 introduced a regression. A remote attacker could exploit this to crash the system, leading to a denial of service. CVE-2011-1479 Vasiliy Kulikov discovered that taskstats did not enforce access restrictions. A local attacker could exploit...

USN-1242-1: Linux kernel (Maverick backport) vulnerabilities

It was discovered that the security fix for CVE-2010-4250 introduced a regression. A remote attacker could exploit this to crash the system, leading to a denial of service. CVE-2011-1479 Vasiliy Kulikov discovered that taskstats did not enforce access restrictions. A local attacker could exploit...

CVE-2011-1479

Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service system crash via vectors involving failed attempts to create files. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-4250...

Linux Kernel 'inotify_init1()'两次释放本地拒绝服务漏洞

Bugtraq ID: 47296 CVE ID：CVE-2011-1479 Linux是一款开放源代码的操作系统。 "inotifyinit1"系统调用实现存在一个两次释放错误，本地攻击者可以利用漏洞使内核崩溃。 Linux kernel 2.6.37 Linux kernel 2.6.36 Linux kernel 2.6.35 Linux kernel 2.6.35 Linux kernel 2.6.35 Linux kernel 2.6.34 Linux kernel 2.6.34 Linux kernel 2.6.33 .1 Linux kernel 2.6.33 Linux...

CVE-2011-1479

creationtimestamp| type| source ---|---|--- 2011-04-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35600...

CVE-2010-1479

SQL injection vulnerability in the RokModule comrokmodule component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the moduleid parameter in a raw action to index.php...

CVE-2010-1479

SQL injection vulnerability in the RokModule comrokmodule component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the moduleid parameter in a raw action to index.php...

CVE-2010-1479

creationtimestamp| type| source ---|---|--- 2010-04-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12148...

openSUSE Security Update : apache2-mod_jk (apache2-mod_jk-1479)

Certain HTTP request could confuse the JK connector in Apache Tomcat which could result in a user seeing responses destined for other users CVE-2008-5519. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

CVE-2009-1479

CVE-2009-1479 affects Boxalino (closed-source) and its HTTP handling of the path in client/desktop/default.htm. A directory traversal vulnerability exists where an attacker can craft a URL containing sequences like ../../.. to read arbitrary files outside the intended directory, leveraging web se...

Boxalino Directory Traversal

COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Boxalino Vendor: Boxalino AG www.boxalino.com CVD ID: CVE-2009-1479 Subject: Directory Traversal Vulnerabilities Risk: High Effect: Remotely exploitable Author: Axel Neumann Date: 2009-10-20 Introduction ----------...

Boxalino 09.05.25-0421 Directory Traversal

No description provided by source. COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Boxalino Vendor: Boxalino AG www.boxalino.com CVD ID: CVE-2009-1479 Subject: Directory Traversal Vulnerabilities Risk: High Effect: Remotely exploitable Author: Axel Neumann...

CVE-2009-1479

creationtimestamp| type| source ---|---|--- 2009-10-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9872...

boxalino 09.05.25-0421 - Directory Traversal

boxalino 09.05.25-0421 - Directory Traversal COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Boxalino Vendor: Boxalino AG www.boxalino.com CVD ID: CVE-2009-1479 Subject: Directory Traversal Vulnerabilities Risk: High Effect: Remotely exploitable Author: Axel...

Boxalino 09.05.25-0421 Directory Traversal

Exploit for unknown platform in category web applications ========================================== Boxalino 09.05.25-0421 Directory Traversal ========================================== Product: Boxalino Vendor: Boxalino AG www.boxalino.com CVD ID: CVE-2009-1479 Subject: Directory Traversal...

[CVE-2009-1479] Boxalino - Directory Traversal Vulnerability

COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Boxalino Vendor: Boxalino AG www.boxalino.com CVD ID: CVE-2009-1479 Subject: Directory Traversal Vulnerabilities Risk: High Effect: Remotely exploitable Author: Axel Neumann [email protected] Date: 2009-10-20...

boxalino 09.05.25-0421 - Directory Traversal

COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Boxalino Vendor: Boxalino AG www.boxalino.com CVD ID: CVE-2009-1479 Subject: Directory Traversal Vulnerabilities Risk: High Effect: Remotely exploitable Author: Axel Neumann Date: 2009-10-20 Introduction ----------...

CVE-2008-1479

The CVE-2008-1479 entry describes a Cross-site scripting (XSS) vulnerability in the CyberFrogs cfnetgs 0.24 package, specifically in index.php where the directory parameter is not properly sanitized. This allows remote attackers to inject arbitrary web script or HTML via the directory parameter. ...

Debian DSA-1479-1 : linux-2.6 - several vulnerabilities

Several local vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-2878 Bart Oldeman reported a denial of service DoS issue ...

CVE-2003-1479

CVE-2003-1479 is a documented cross-site scripting (XSS) vulnerability affecting webcamXP versions 1.02.432 and 1.02.535. The issue allows remote attackers to inject arbitrary web script or HTML through the message field. The NVD entry lists a CVSS v2 base score of 4.3 (MEDIUM) with network attac...