Mandriva Update for kernel MDKSA-2007:226 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDKSA-2007:226 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for kernel MDVSA-2008:113 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDVSA-2008:113 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for kernel MDVSA-2008:112 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDVSA-2008:112 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for kernel MDKSA-2007:002 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDKSA-2007:002 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Debian Security Advisory DSA 1749-1 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 1749-1. OpenVAS Vulnerability Test $Id: deb17491.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1749-1 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian DSA-1755-1 : systemtap - race condition

Erik Sjoelund discovered that a race condition in the stap tool shipped by Systemtap, an instrumentation system for Linux 2.6, allows local privilege escalation for members of the stapusr group. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

DSA-1755-1 systemtap - local privilege escalation

Bulletin has no description...

[SECURITY] [DSA 1749-1] New Linux 2.6.26 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1749-1 [email protected] http://www.debian.org/security/ dann frazier March 20, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

SA-CONTRIB-2009-010 Plus 1 - Cross-site request forgery

The Plus 1 module provides a voting widget for content that records votes using Ajax. The URL for voting is vulnerable to cross-site request forgeries CSRF making it possible for users to unknowingly vote for content. Versions affected Versions of Plus 1 prior to 6.x-2.6 Drupal core is not...

Linux Kernel /proc/net/rt_cache远程拒绝服务漏洞

BUGTRAQ ID: 34084 CVECAN ID: CVE-2009-0778 Linux Kernel是开放源码操作系统Linux所使用的内核。 即使缓存的路由表保持不变，/proc/slabinfo中的ipdstcache值也会一直递增，这会导致ipdstcache最终会到达 /proc/sys/net/ipv4/route/maxsize的值。当到达该值的时候，内核就会报告“dst cache overflow”，之后服务器不再响应任何网络活动。 Linux kernel 2.6.x 临时解决方法： 删除REJECT路由，或用ip route add 10.10.0.0/16...

Fedora Core 10 FEDORA-2009-2583 (roundup)

The remote host is missing an update to roundup announced via advisory FEDORA-2009-2583. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Mandrake Security Advisory MDVSA-2009:071 (kernel)

The remote host is missing an update to kernel announced via advisory MDVSA-2009:071. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Fedora Core 9 FEDORA-2009-2591 (roundup)

The remote host is missing an update to roundup announced via advisory FEDORA-2009-2591. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Fedora 9 : roundup-1.4.6-4.fc9 (2009-2591)

Mon Mar 9 2009 Paul P. Komkoff Jr - 1.4.6-4 - security bug bz489355 - Wed Feb 25 2009 Fedora Release Engineering - 1.4.6-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora11MassRebuild - Sat Nov 29 2008 Ignacio Vazquez-Abrams - 1.4.6-2 - Rebuild for Python 2.6 - Fri Oct 3 2008 Paul P. Komkoff...

Linux Kernel /ipc/shm.c文件本地拒绝服务漏洞

BUGTRAQ ID: 34020 CVECAN ID: CVE-2009-0859 Linux Kernel是开放源码操作系统Linux所使用的内核。 如果禁用了CONFIGSHMEM的话，Linux Kernel的shm子系统中ipc/shm.c文件的shmgetstat函数没有正确地解释inode的数据类型，这允许本地用户通过SHMINFO shmctl调用导致系统挂起。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Code injection

The ext4isize function in fs/ext4/ext4.h in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 uses the isizehigh structure member during operations on arbitrary types of files, which allows local users to cause a denial of service CPU consumption and error-message flood by...

Linux Kernel readlink本地权限提升漏洞

BUGTRAQ ID: 33412 CVECAN ID: CVE-2009-0269 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的eCryptfs子系统的fs/ecryptfs/inode.c文件没有正确地检查readlink调用的返回结果。如果readlink调用生成的错误导致将-1返回值用作了数组索引，本地用户就可以导致拒绝服务或获得权限提升。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Linux Kernel dell_rbu本地拒绝服务漏洞

BUGTRAQ ID: 33428 CVECAN ID: CVE-2009-0322 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的drivers/firmware/dellrbu.c文件中的readrbuimagetype和 readrbupacketsize函数中存在拒绝服务漏洞。如果上述函数从sys/devices/platform/dellrbu /imagetype或/sys/devices/platform/dellrbu/packetsize读取了0字节的话，就会导致系统崩溃。 Linux kernel 2.6.x 厂商补丁：...

Linux Kernel SysKonnect FDDI驱动非授权重置统计漏洞

CVECAN ID: CVE-2009-0675 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的drivers/net/skfp/skfddi.c文件中的skfpioctl函数中存在错误的逻辑，本地用户在缺少CAPNETADMIN权限而不是拥有这个权限的时候才可以执行SKFPCLRSTATS请求，因此无需授权便可以重置驱动统计。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Linux Kernel 2.6.x - 'sock.c' SO_BSDCOMPAT Option Information Disclosure

/ source: https://www.securityfocus.com/bid/33846/info The Linux Kernel is prone to an information-disclosure vulnerability because it fails to properly initialize certain memory before using using it in a user-accessible operation. Successful exploits will allow attackers to view portions of...