158 matches found
SQLiteManager 1.2.4 - Remote PHP Code Injection Vulnerability
No description provided by source. Description: =============================================================== Exploit Title: SQLiteManager 0Day Remote PHP Code Injection Vulnerability Google Dork: intitle:SQLiteManager inurl:sqlite/ Date: 23/01/2013 Exploit Author: RealGame Vendor Homepage:...
Linux Kernel /dev/ptmx Key Stroke Timing Local Disclosure
No description provided by source. !/bin/bash ptmx-su-pwdlen.sh -- This PoC determine the password length of a local user who runs su -. Done thanks to the ptmx keystroke timing attack CVE-2013-0160. See http://vladz.devzero.fr/013ptmx-timing.php for more information. Tested on Debian 6.0.5 kerne...
Security fix for the ALT Linux 7 package kernel-image-el-def version 2.6.32-alt25
2.6.32-alt25 built June 21, 2014 Led in task 121761 June 20, 2014 Led - 2.6.32-431.20.3.el6: + CVE-2013-6378 + CVE-2014-0196 + CVE-2014-0203 + CVE-2014-1737 + CVE-2014-1738 + CVE-2014-1874 + CVE-2014-2039 + CVE-2014-3153...
Security fix for the ALT Linux 7 package kernel-image-el-def version 2.6.32-alt24
June 20, 2014 Led 2.6.32-alt24 - futex: Add another early deadlock detection check - futex: Prevent attaching to kernel threads - futex: Validate atomic acquisition in futexlockpiatomic - futex: Always cleanup owner tid in unlockpi - futex: Make lookuppistate more robust - auditsc: auditkrule mas...
DLA-0007-1 linux-2.6 - security update
Bulletin has no description...
kernel security and bug fix update
2.6.32-431.20.3 - kernel futex: Make lookuppistate more robust Jerome Marchand 1104516 1104517 CVE-2014-3153 - kernel futex: Always cleanup owner tid in unlockpi Jerome Marchand 1104516 1104517 CVE-2014-3153 - kernel futex: Validate atomic acquisition in futexlockpiatomic Jerome Marchand 1104516...
[oss-security] Linux kernel futex local privilege escalation (CVE-2014-3153)
Hi, This was handled via linux-distros, hence the mandatory oss-security posting. The issue was made public earlier today, and is included in this Debian advisory: https://lists.debian.org/debian-security-announce/2014/msg00130.html --- CVE-2014-3153 Pinkie Pie discovered an issue in the futex...
Security fix for the ALT Linux 7 package kernel-image-el-def version 2.6.32-alt23
2.6.32-alt23 built June 9, 2014 Led in task 121035 June 7, 2014 Led - futex: Forbid uaddr == uaddr2 in futexrequeue..., requeuepi=1 CVE-2014-3153...
Debian: Security Advisory (DSA-2928-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openswan security update
2.6.32-27.2 - Resolves: rhbz1050337 CVE-2013-6466 refix for delete/notify code 2.6.32-27.1 - Resolves: rhbz1050337 CVE-2013-6466...
Unbreakable Enterprise kernel security update
2.6.32-400.34.3 - inet: fix addrlen/msg-msgnamelen assignment in recverror and rxpmtu functions Hannes Frederic Sowa 18247290 CVE-2013-7263 CVE-2013-7265 2.6.32-400.34.2 - exec/ptrace: fix getdumpable incorrect tests Kees Cook 18239033 CVE-2013-2929 CVE-2013-2929 - inet: prevent leakage of...
Design/Logic Flaw
vzkernel before 042stab080.2 in the OpenVZ modification for the Linux kernel 2.6.32 does not initialize certain length variables, which allows local users to obtain sensitive information from kernel stack memory via 1 a crafted ploop driver ioctl call, related to the ploopgetdeviceioc function in...
kernel: net: IP_REPOPTS invalid free
A certain Red Hat patch for the Linux kernel 2.6.32 on Red Hat Enterprise Linux RHEL 6 allows local users to cause a denial of service invalid free operation and system crash or possibly gain privileges via a sendmsg system call with the IPRETOPTS option, as demonstrated by hemlock.c. NOTE: this...
kernel: net: IP_REPOPTS invalid free
A certain Red Hat patch for the Linux kernel 2.6.32 on Red Hat Enterprise Linux RHEL 6 allows local users to cause a denial of service invalid free operation and system crash or possibly gain privileges via a sendmsg system call with the IPRETOPTS option, as demonstrated by hemlock.c. NOTE: this...
[Auto Rooting v 1.0] Local root [2010 - 2011 - 2012]
Auto Rooting: 2.6.32-46-2011 2.6.37 2.6.33 2.6.18-164-2010 2.6.18-194 2.6.18-6-x86-2011 2.6.18-164 2.6.18-274-2011 2.6.28-2011 etc... CLICK HERE FOR LOGIN TO ARCHIVE Download Auto Rooting v 1.0...
Ubuntu Update for linux-ec2 USN-1913-1
Check for the Version of linux-ec2 OpenVAS Vulnerability Test $Id: gbubuntuUSN19131.nasl 8448 2018-01-17 16:18:06Z teissa $ Ubuntu Update for linux-ec2 USN-1913-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...
CVE-2013-2188
A certain Red Hat patch to the dofilpopen function in fs/namei.c in the kernel package before 2.6.32-358.11.1.el6 on Red Hat Enterprise Linux RHEL 6 does not properly handle failure to obtain write permissions, which allows local users to cause a denial of service system crash by leveraging acces...
Oracle Linux 6 : kernel (ELSA-2011-0329)
The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0329 advisory. 2.6.32-71.18.2.el6 - fs sunrpc: Correct a misapplied patch J. Bruce Fields 678094 678146 Tenable has extracted the preceding description block directly from the...
Design/Logic Flaw
A certain Red Hat patch for the Linux kernel 2.6.32 on Red Hat Enterprise Linux RHEL 6 allows local users to cause a denial of service invalid free operation and system crash or possibly gain privileges via a sendmsg system call with the IPRETOPTS option, as demonstrated by hemlock.c. NOTE: this...