Linux Kernel 2.6.x - 'net/ipv6/ip6_output.c' Null Pointer Dereference Denial of Service

/ source: https://www.securityfocus.com/bid/38185/info The Linux kernel is prone to a local denial-of-service vulnerability. Attackers can exploit this issue to crash the affected kernel, denying service to legitimate users. Given the nature of this issue, attackers may also be able to execute...

Linux Kernel 2.6.x chown() Group Ownership Alteration Exploit

No description provided by source. / $Id: raptorchown.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorchown.c - syschown missing DAC controls on Linux Copyright c 2004 Marco Ivaldi [email protected] Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of file...

Linux Kernel SCTP拒绝服务攻击漏洞

Secunia Advisory:SA20917 Linux Kernel被报告一个漏洞，此漏洞可被恶意攻击者操作进行拒绝服务攻击Denial of Service。 这个漏洞是由处理不带有块的SCTP信息包时的一个错误引起的。向一个易受攻击系统发送一个临时欺骗性SCTP信息包时这个漏洞会被操作导致内核崩溃。 Linux Kernel 2.6.x 升级到版本2.6.16.23或2.6.17.3。 http://www.kernel.org...

Linux内核Ext3无效索引节点序号拒绝服务攻击漏洞

Secunia Advisory:SA21369 Linux内核被报告一个漏洞，该漏洞可被恶意用户操作进行拒绝服务攻击Denial of Service。 该漏洞是由处理一个无效索引节点序号（inode number）时ext3内的一个错误引起的。盖漏洞可被操作发送一个特殊处理的带有V2程序例如 V2LOOKUP的NFS请求使其列入无效索引节点序号。 成功操作会致使输出目录被重置为只读。 该漏洞已经在版本2.6.14.4、2.6.17.6和2.6.17.7中被证实。其他版本可能同样被影响。 Linux Kernel 2.6.x 仅同意信任用户访问受影响系统。...

CVE-2008-1675

The CVE-2008-1675 issue affects the Linux kernel 2.6.x up to 2.6.25.1, where the bdx_ioctl_priv function in the tehuti driver (tehuti.c) does not properly validate register-size related information. This can lead to an unspecified impact, with local attack vectors and potential kernel memory acce...

XSS vulnerabilities in insert image and link actions

In 2.7.x, the following URL's are vulnerable: - /users/insertlink.action - /users/insertlink-page-attachmentstab.action - /users/insertlink-page-uploadfile.action - /users/insertlink-draft-attachmentstab.action - /users/insertlink-draft-uploadfile.action - /users/doinsertimageinpage.action -...

XSS vulnerabilities in insert image and link actions

In 2.7.x, the following URL's are vulnerable: - /users/insertlink.action - /users/insertlink-page-attachmentstab.action - /users/insertlink-page-uploadfile.action - /users/insertlink-draft-attachmentstab.action - /users/insertlink-draft-uploadfile.action - /users/doinsertimageinpage.action -...

XSS vulnerability in pagepicker.action and spacepagepicker.action

The following URL's are vulnerable: - /users/pagepicker.action - /users/spacepagepicker.action on formname, fieldname and currentspace panel:bgColor=99ff99 h4. Patch instructions for 2.6.x and 2.7.x 1. Shut down Confluence 2. Copy attached pagepicker.vm to confluence/users/ 3. Start up Confluence...

Debian Security Advisory DSA 427-1 (kernel-patch-2.4.17-mips)

The remote host is missing an update to kernel-patch-2.4.17-mips announced via advisory DSA 427-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Debian Security Advisory DSA 427-1 (kernel-patch-2.4.17-mips)

The remote host is missing an update to kernel-patch-2.4.17-mips announced via advisory DSA 427-1. OpenVAS Vulnerability Test $Id: deb4271.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 427-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Linux Kernel 2.6.x sys_timer_create() Local Denial of Service Exploit

No description provided by source. ;nasm -f elf noHeaven.asm ;ld -s -o noHeaven noHeaven.o section .text global start count equ 8 ; threads count - do it quicker start: mov ebx, count call createthreads jmp done pause: mov eax,29 int 0x80 ret createthreads: mov eax,2 int 0x80 test eax,eax jz...

Integer overflow

Integer underflow in the ieee80211rx function in net/ieee80211/ieee80211rx.c in the Linux kernel 2.6.x before 2.6.23 allows remote attackers to cause a denial of service crash via a crafted SKB length value in a runt IEEE 802.11 frame when the IEEE80211STYPEQOSDATA flag is set, aka an "off-by-two...

CVE-2007-4997

Integer underflow in the ieee80211rx function in net/ieee80211/ieee80211rx.c in the Linux kernel 2.6.x before 2.6.23 allows remote attackers to cause a denial of service crash via a crafted SKB length value in a runt IEEE 802.11 frame when the IEEE80211STYPEQOSDATA flag is set, aka an "off-by-two...

CVE-2007-5093

The disconnect method in the Philips USB Webcam pwc driver in Linux kernel 2.6.x before 2.6.22.6 "relies on user space to close the device," which allows user-assisted local attackers to cause a denial of service USB subsystem hang and CPU consumption in khubd by not closing the device after the...

Authentication flaw

Rule Set Based Access Control RSBAC before 1.3.5 does not properly use the Linux Kernel Crypto API for the Linux kernel 2.6.x, which allows context-dependent attackers to bypass authentication controls via unspecified vectors, possibly involving User Management password hashing and unchecked...

Linux Kernel 2.6.x - NETLINK_FIB_LOOKUP Local Denial of Service

/ source: https://www.securityfocus.com/bid/23677/info The Linux kernel is prone to a denial-of-service vulnerability. This issue presents itself when a NETLINK message is misrouted. A local attacker may exploit this issue to trigger an infinite-recursion stack-based overflow in the kernel. This...

CVE-2007-0958

CVE-2007-0958 : In Linux kernel 2.6.x before 2.6.20, local users can read unreadable binaries by abusing the PT_INTERP interpreter mechanism, triggering a core dump. This is a local-privilege issue; the described impact is to read binaries via core-dump behavior. According to the changelog refere...

security flaw

The blockpreparewrite function in fs/buffer.c for Linux kernel 2.6.x before 2.6.13 does not properly clear buffers during certain error conditions, which allows local users to read portions of files that have been unlinked...

CVE-2006-6058

CVE-2006-6058 affects the Linux kernel 2.6.x up to 2.6.24 (including 2.6.18). Local users can cause a denial of service (hang) via a malformed minix file stream that triggers an infinite loop in minix_bmap. The issue may involve an integer overflow or signedness error. The documented fix is a ker...

CVE-2006-5823

The zlibinflate function in Linux kernel 2.6.x allows local users to cause a denial of service crash via a malformed filesystem that uses zlib compression that triggers memory corruption, as demonstrated using cramfs...