Debian DSA-2015-1 : drbd8 - privilege escalation

A local vulnerability has been discovered in drbd8. Philipp Reisner fixed an issue in the drbd kernel module that allows local users to send netlink packets to perform actions that should be restricted to users with CAPSYSADMIN privileges. This is a similar issue to those described by...

[SECURITY] [DSA 2015-1] New drbd8 packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-2015 [email protected] http://www.debian.org/security/ Dann Frazier March 15, 2010 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

Debian Security Advisory DSA 2012-1 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 2012-1. OpenVAS Vulnerability Test $Id: deb20121.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2012-1 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

DSA-2015-1 drbd8 linux-modules-extra-2.6 - privilege escalation

Bulletin has no description...

Microsoft Security Bulletin MS10-016 - Important Vulnerability in Windows Movie Maker Could Allow Remote Code Execution (975561)

Microsoft Security Bulletin MS10-016 - Important Vulnerability in Windows Movie Maker Could Allow Remote Code Execution 975561 Published: March 09, 2010 Version: 1.0 General Information Executive Summary This security update addresses a privately reported vulnerability in Windows Movie Maker and...

Linux Kernel dvb_net_ule()函数远程拒绝服务漏洞

BUGTRAQ ID: 38479 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的ULE解封装处理代码中存在拒绝服务漏洞，如果远程用户所发送的MPEG2-TS帧的负载指针为182或183，就会导致ULE SNDU的接收程序陷入死循环。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

SA-CONTRIB-2010-023 - Workflow - Cross Site Scripting

When used in combination with the Token module, the Workflow module does not escape the text entered into the Comment field of the workflow fieldset on the node form. This allows a user with the permission to change the workflow state of a node to perform a Cross Site Scripting XSS attack if a...

CVE-2010-0765

fipsForum 2.6 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/forumFips.mdb...

Improper access control

fipsForum 2.6 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/forumFips.mdb...

CVE-2010-0765

CVE-2010-0765 affects fipsForum 2.6, where sensitive data is stored under the web root with insufficient access control, allowing remote attackers to directly request and download the _database/forumFips.mdb file. The available documents attribute the issue to improper access control but do not p...

Linux kernel 2.6.x hda-intel驱动本地拒绝服务漏洞

BUGTRAQ ID: 38348 Linux Kernel是开放源码操作系统Linux所使用的内核。 对于使用了hda-intel驱动的Linux Kernel操作系统，sound/pci/hda/hdaintel.c文件中的azxpositionok函数在执行计算时可能将0用作初始，导致内核崩溃。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Fedora Update for systemtap FEDORA-2010-0688

Check for the Version of systemtap OpenVAS Vulnerability Test Fedora Update for systemtap FEDORA-2010-0688 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Fedora Update for systemtap FEDORA-2010-1373

Check for the Version of systemtap OpenVAS Vulnerability Test Fedora Update for systemtap FEDORA-2010-1373 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Moderate: Red Hat Security Advisory: systemtap security update

Updated systemtap packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SystemTap is an instrumentation system for systems running the Linux kernel, version 2.6...

Debian DSA-1862-1 : linux-2.6 - privilege escalation

A vulnerability has been discovered in the Linux kernel that may lead to privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problem : - CVE-2009-2692 Tavis Ormandy and Julien Tinnes discovered an issue with how the sendpage function is initialized in t...

Debian DSA-1996-1 : linux-2.6 - privilege escalation/denial of service/sensitive memory leak

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service, sensitive memory leak or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-3939 Joseph Malicki reported that the dbglvl sysfs...

[SECURITY] Fedora 12 Update: systemtap-1.1-2.fc12

SystemTap is an instrumentation system for systems running Linux 2.6. Developers can write instrumentation to collect data on the operation of the system...

[SECURITY] Fedora 11 Update: systemtap-1.1-2.fc11

SystemTap is an instrumentation system for systems running Linux 2.6. Developers can write instrumentation to collect data on the operation of the system...

Drupal 6.15 Twitter module v 6.x-2.6 clear text Vulnerability

Exploit for unknown platform in category web applications ====================================================================================== Drupal 6.15 Twitter module version 6.x-2.6 clear text credential storage vulnerability...

Linux Kernel do_pages_move()本地信息泄露漏洞

BUGTRAQ ID: 38144 CVE ID: CVE-2010-0415 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的mm/migrate.c文件中的dopagesmove函数没有正确地验证从用户空间所接收到的node值，本地用户可以通过特制的movepages系统调用读取内核内存。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...