Mandriva Update for kernel MDVSA-2010:198 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDVSA-2010:198 kernel Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Debian: Security Advisory (DSA-2094-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

phpmyfaq -- cross site scripting vulnerabilities

The phpMyFAQ project reports: The phpMyFAQ Team has learned of a security issue that has been discovered in phpMyFAQ 2.6.x: phpMyFAQ doesn't sanitize some variables in different pages correctly. With a properly crafted URL it is e.g. possible to inject JavaScript code into the output of a page,...

Mandriva Update for kernel MDVSA-2010:172 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDVSA-2010:172 kernel Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for kernel MDVSA-2010:188 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDVSA-2010:188 kernel Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Linux kernel 2.6.x DRM模块IOCTL请求信息泄露漏洞

BUGTRAQ ID: 42577 CVE ID: CVE-2010-2803 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的drivers/gpu/drm/drmdrv.c驱动中的drmioctl函数没有正确地清除内核内存便将其拷贝到了用户空间，这允许本地用户通过发送特制的IOCTL请求泄露敏感信息。成功利用这个漏洞要求用户又有对DRI路径的读写访问权限。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Computer Associates Advantage Ingres 2.6 Denial of Service

Exploit for windows platform in category dos / poc ========================================================== Computer Associates Advantage Ingres 2.6 Denial of Service ========================================================== Exploit Title: Computer Associates Advantage Ingres 2.6 Denial of...

Mandriva Linux Security Advisory : kernel (MDVSA-2009:119)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The exitnotify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAPKILL capability is held, which allows local users to send an arbitrary signal to a process by...

System V Derived /bin/login - Extraneous Arguments Buffer Overflow (Metasploit)

$Id: manyargs.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

kernel: NFS: Fix an Oops when truncating a file

The nfswaitonrequest function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service Oops via unknown vectors related to truncating a file and an operation that is not interruptible...

Debian: Security Advisory (DSA-2053-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Integer overflow

Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 allow context-dependent attackers to cause a denial of service application crash via a large fragment, as demonstrated by a call to audioop.lin2lin with a long string in the first argument, leading to a...

CVE-2010-1634

Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 allow context-dependent attackers to cause a denial of service application crash via a large fragment, as demonstrated by a call to audioop.lin2lin with a long string in the first argument, leading to a...

kernel: ipv6: skb is unexpectedly freed

Use-after-free vulnerability in net/ipv4/tcpinput.c in the Linux kernel 2.6 before 2.6.20, when IPV6RECVPKTINFO is set on a listening socket, allows remote attackers to cause a denial of service kernel panic via a SYN packet while the socket is in a listening TCPLISTEN state, which is not properl...

CVE-2010-1087

CVE-2010-1087 affects the Linux kernel family 2.6.x up to 2.6.33-rc5. The vulnerability is in nfs_wait_on_request (fs/nfs/pagelist.c) and can cause a denial of service (kernel OOPS) via unknown vectors related to truncating a file and an operation that is not interruptible. The impact is a DoS on...

CVE-2010-1083

CVE-2010-1083 affects the Linux kernel 2.6.x up to 2.6.32 (and possibly similar versions); the processcompl_compat path in drivers/usb/core/devio.c fails to clear the transfer buffer before returning to userspace when a USB command fails, enabling potential information leakage of kernel memory to...

CVE-2010-1083

The processcomplcompat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate attackers to obtain sensiti...

squid security and bug fix update

7:2.6.STABLE21-6 - Resolves: 561828 - CVE-2009-2855 CVE-2010-0308 squid various flaws rhel-5.5 7:2.6.STABLE21-5 - Resolves: 538738 - improved patch 7:2.6.STABLE21-4 - Resolves: 521926 - squid 'stop after stop' is not LSB compliant - Resolves: 496170 - Add arp filter option - Resolves: 516245 -...

Free MP3 CD Ripper 2.6 - .wav (PoC)

Free MP3 CD Ripper 2.6 - .wav PoC Exploit Title: Free MP3 CD Ripper 2.6 wav 0-day Date: 30/03/2010 Author: Richard leahy Software Link: http://www.soft32.com/Download/Free/FreeMP3CDRipper/4-250188-1.html Version: 2.6 Tested on: Windows Xp Sp2 to exploit this open up the application select file -...

Linux Kernel ip6_dst_lookup_tail()函数远程拒绝服务漏洞

CVECAN ID: CVE-2010-0437 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的ip6dstlookuptail函数中存在空指针引用漏洞。本地网络上的攻击者可以通过向目标系统发送IPv6通讯来触发这个漏洞，如果接收到IPv6报文时目标系统上dst-neighbour为空，就会导致系统崩溃 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...