1622 matches found
Mandriva Update for kernel MDVSA-2010:030 (kernel)
Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDVSA-2010:030 kernel Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
Mandriva Update for kernel MDVSA-2010:030 (kernel)
Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDVSA-2010:030 kernel Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
Linux Kernel 64位Personality处理本地拒绝服务漏洞
BUGTRAQ ID: 38027 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在设置进程的personality时存在错误，本地用户在执行缺少ELF解释器的64位应用时可能触发分段错误，导致内核崩溃。 漏洞起因是fs/binfmtelf.c文件中的loadelfbinary函数，该函数在检查ELF解释器可用之前调用了 SETPERSONALITY，将之前的32位进程转换为了64位进程。如果execve成功，这不会导致问题，但在...
Linux Kernel 2.6.x - KVM pit_ioport_read() Local Denial of Service
Linux Kernel 2.6.x - KVM pitioportread Local Denial of Service source: https://www.securityfocus.com/bid/38038/info The Linux kernel is prone to a local denial-of-service vulnerability that affects the Kernel-based Virtual Machine KVM. Attackers with local access to a guest operating system can...
Linux Kernel 2.6.x (x64) - Personality Handling Local Denial of Service
source: https://www.securityfocus.com/bid/38027/info The Linux kernel is prone to a local denial-of-service vulnerability. Attackers can exploit this issue to cause the affected kernel to crash, denying service to legitimate users. Versions prior to Linux kernel 2.6.33-rc6 are vulnerable. NOTE:...
Linux Kernel ipv6_hop_jumbo()函数远程拒绝服务漏洞
BUGTRAQ ID: 37810 CVE ID: CVE-2010-0006 Linux Kernel是开放源码操作系统Linux所使用的内核。 如果启用了网络名称空间，Linux Kernel的net/ipv6/exthdrs.c文件中的ipv6hopjumbo函数允许远程攻击者发送无效的IPv6超大包触发空指针引用，导致拒绝服务的情况。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Buffer overflow
Buffer overflow in Cisco CiscoWorks Internetwork Performance Monitor IPM 2.6 and earlier on Windows, as distributed in CiscoWorks LAN Management Solution LMS, allows remote attackers to execute arbitrary code via a malformed getProcessName CORBA General Inter-ORB Protocol GIOP request, related to...
CVE-2010-0138
Buffer overflow in Cisco CiscoWorks Internetwork Performance Monitor IPM 2.6 and earlier on Windows, as distributed in CiscoWorks LAN Management Solution LMS, allows remote attackers to execute arbitrary code via a malformed getProcessName CORBA General Inter-ORB Protocol GIOP request, related to...
[SECURITY] Fedora 12 Update: systemtap-1.1-1.fc12
SystemTap is an instrumentation system for systems running Linux 2.6. Developers can write instrumentation to collect data on the operation of the system...
[SECURITY] Fedora 11 Update: systemtap-1.1-1.fc11
SystemTap is an instrumentation system for systems running Linux 2.6. Developers can write instrumentation to collect data on the operation of the system...
StarDevelop Live Help 2.6 - 'SERVER' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/37558/info Stardevelop Live Help is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of...
Linux Kernel KVM handle_dr()本地拒绝服务漏洞
BUGTRAQ ID: 37221 CVECAN ID: CVE-2009-3722 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel KVM子系统中arch/x86/kvm/vmx.c文件的handledr函数在访问调试寄存器之前没有正确地验证当前权限级别（CPL），这可能允许guest操作系统用户通过特制的应用程序导致host操作系统拒绝服务。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Linux Kernel collect_rx_frame函数本地权限提升漏洞
BUGTRAQ ID: 37036 CVE ID: CVE-2009-4005 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的drivers/isdn/hisax/hfcusb.c文件中的collectrxframe函数存在错误，通过ISDN到达的特制HDLC报文可能触发读缓冲区溢出，导致执行任意内核态代码。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Linux Kernel 2.6.x - Ext4 'move extents' ioctl Privilege Escalation
source: https://www.securityfocus.com/bid/37277/info Linux kernel is prone to a local privilege-escalation vulnerability because the software fails to verify access permissions. Exploits may allow attackers to execute arbitrary code with kernel-level privileges and launch other attacks. Successfu...
Linux Kernel 2.6.x - Ext4 move extents ioctl Privilege Escalation
Linux Kernel 2.6.x - Ext4 move extents ioctl Privilege Escalation source: https://www.securityfocus.com/bid/37277/info Linux kernel is prone to a local privilege-escalation vulnerability because the software fails to verify access permissions. Exploits may allow attackers to execute arbitrary cod...
Linux 2.6.x fs/pipe.c local root exploit
No description provided by source. For those who were not yet aware, there is at least 3 public exploits since 11/05/2009 for CVE-2009-3547 targeting all linux kernels from 2.6.0 to 2.6.31 included. Since spender and fotis have already release their own, there is not need for us to keep this on o...
Linux Kernel子系统连接器缺少能力检查漏洞
BUGTRAQ ID: 36834 CVECAN ID: CVE-2009-3725 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的drivers/video/uvesafb.c、drivers/staging/pohmelfs/config.c、drivers/staging/dst/dcore.c和drivers/md/dm-log-userspace-transfer.c驱动中缺少能力检查，非特权用户可以向某些使用连接器的子系统发送netlink报文执行一些非授权的操作。 Linux kernel 2.6.x 厂商补丁： Linux...
Linux Kernel r8169驱动Out-of-IOMMU错误本地拒绝服务漏洞
BUGTRAQ ID: 36706 CVECAN ID: CVE-2009-3613 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的Realtek r8169以太网驱动中存在漏洞，pciunmapsingle中的内存泄露可能导致耗尽IOMMU空间和系统崩溃。本地网络中的攻击者可以通过ping操作发送巨型帧触发out-of-IOMMU错误，导致拒绝服务的情况。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Linux Kernel 2.6.x - pipe.c Local Privilege Escalation (2)
Linux Kernel 2.6.x - pipe.c Local Privilege Escalation 2 / source: https://www.securityfocus.com/bid/36901/info Linux kernel is prone to a local privilege-escalation vulnerability that is caused by a NULL-pointer dereference. Local attackers can exploit this issue to execute arbitrary code with...