CVE-2003-1195

SQL injection vulnerability in getmember.asp in VieBoard 2.6 Beta 1 allows remote attackers to execute arbitrary SQL commands via the msn variable...

CVE-2003-1196

SQL injection vulnerability in viewtopic.asp in VieBoard 2.6 allows remote attackers to execute arbitrary SQL commands via the forumid parameter...

CVE-2005-1229

Directory traversal vulnerability in cpio 2.6 and earlier allows remote attackers to write to arbitrary directories via a .. dot dot in a cpio file...

CVE-2005-0135

The unwunwindtouser function in unwind.c on Itanium ia64 architectures in Linux kernel 2.6 allows local users to cause a denial of service system crash...

CVE-2005-0867

Integer overflow in Linux kernel 2.6 allows local users to overwrite kernel memory by writing to a sysfs file...

CVE-2005-1111

Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpio after the decompression is complete...

CVE-2005-1369

The 1 it87 and 2 via686a drivers in I2C for Linux 2.6.x before 2.6.11.8, and 2.6.12 before 2.6.12-rc2, create the sysfs "alarms" file with write permissions, which allows local users to cause a denial of service CPU consumption by attempting to write to the file, which does not have an associated...

CVE-2005-1369

CVE-2005-1369 affects the it87 and via686a I2C drivers; prior to fixes in 2.6.11.8 and 2.6.12-rc2, these drivers created a writable sysfs file alarms, enabling a local attacker to cause CPU DoS by writing to it. Connected advisories indicate the issue is resolved by upgrading the kernel to a vers...

CVE-2005-0137

CVE-2005-0137 refers to a vulnerability in the Linux kernel 2.6 on Itanium (ia64) where a missing Itanium syscall table entry could be exploited by a local user to trigger a denial of service. The core issue is a kernel-level handling gap for an Itanium syscall entry, enabling a local attacker to...

CVE-2005-0135

The unwunwindtouser function in unwind.c on Itanium ia64 architectures in Linux kernel 2.6 allows local users to cause a denial of service system crash...

security flaw

The unwunwindtouser function in unwind.c on Itanium ia64 architectures in Linux kernel 2.6 allows local users to cause a denial of service system crash...

CVE-2005-1229

CPIO (GNU cpio) prior to version 2.6 is affected by CVE-2005-1229, a directory-traversal flaw that lets an attacker write to arbitrary directories during extraction via a .. path in an archive. The root cause is that cpio does not sanitise extracted paths (even with --no-absolute-filenames). Cons...

Logwatch 2.6 Secure Script - Denial of Service

Logwatch 2.6 Secure Script - Denial of Service source: https://www.securityfocus.com/bid/13273/info Logwatch is prone to a denial of vulnerability in the secure script. This issue may be exploited by a local attacker who can inject a malicious string into a log file, causing a denial of service...

CVE-2005-1111

Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpio after the decompression is complete...

CVE-2005-0977

The CVE-2005-0977 entry concerns the Linux kernel 2.6 tmpfs shmem_nopage function, where the address argument is not properly verified in shmem.c. This allows a local user to trigger a denial of service (kernel crash) via an invalid address. Public advisories (RHSA-2005:366 / CESA-2005:366) indic...

CVE-2005-0937

The CVE-2005-0937 issue is a Linux kernel vulnerability in futex.c (2.6.x) where get_user may be invoked while mmap_sem is held. This can lead to a deadlock in do_page_fault if another thread is executing mmap or related operations, as described in the Linux kernel advisories. Public references (...

kernel26lowmem.txt

it is possible to partially overwrite low kernel = 2.6 include include include include include include include define KERNEL include undef KERNEL define MAXV 500 int mainint argc,char argv int epfd; int i; int res; struct epollevent ev; int fds; int over; void km; over= unsigned int-1/sizeofstruc...

CVE-2005-0504

Buffer overflow in the MoxaDriverIoctl function for the moxa serial driver moxa.c in Linux 2.2.x, 2.4.x, and 2.6.x before 2.6.22 allows local users to execute arbitrary code via a certain modified length value...

CVE-2005-0937

Some futex functions in futex.c for Linux kernel 2.6.x perform getuser calls while holding the mmapsem semaphore, which could allow local users to cause a deadlock condition in dopagefault by triggering getuser faults while another thread is executing mmap or other functions...

CVE-2005-0323

CVE-2005-0323 affects Infinite Mobile Delivery Webmail 2.6. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the URL, enabling potential credential theft or session manipulation. The issue is documented in multiple sour...