[SECURITY] Fedora 11 Update: systemtap-1.0-2.fc11

SystemTap is an instrumentation system for systems running Linux 2.6. Developers can write instrumentation to collect data on the operation of the system...

Debian: Security Advisory (DSA-1915-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Code injection

The tcffillnode function in net/sched/clsapi.c in the netlink subsystem in the Linux kernel 2.6.x before 2.6.32-rc5, and 2.4.37.6 and earlier, does not initialize a certain tcmpad2 structure member, which might allow local users to obtain sensitive information from kernel memory via unspecified...

CVE-2009-3612

The tcffillnode function in net/sched/clsapi.c in the netlink subsystem in the Linux kernel 2.6.x before 2.6.32-rc5, and 2.4.37.6 and earlier, does not initialize a certain tcmpad2 structure member, which might allow local users to obtain sensitive information from kernel memory via unspecified...

PT-2009-5889 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 2.4.37.6 and earlier Linux kernel versions 2.6.x before 2.6.32-rc5 Description: The issue is related to the tcf fill node function in the netlink subsystem, which does not initialize a certain structure member. This migh...

Linux Kernel eCryptfs空指针引用本地拒绝服务漏洞

BUGTRAQ ID: 36639 CVE ID: CVE-2009-2908 Linux Kernel是开放源码操作系统Linux所使用的内核。 在对低位的dentry调用vfsunlink时，如果dcount为1则ddelete会将dentry转换为负数的dentry。在执行read或write时ecryptfsreadupdateatime或ecryptfsgetxattr中引用了负数的 dentry会触发空指针引用，导致拒绝服务的情况。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Overflow vulnerability:linux, each version corresponding overflow vulnerability finishing summary(overflow code)-vulnerability warning-the black bar safety net

2.4.17 local kmod 2.4.18 brk brk2 local kmod km. 2 2.4.19 brk brk2 local kmod km. 2 2.4.20 ptrace kmod ptrace-kmod km. 2 brk brk2 2.4.21 km. 2 brk brk2 ptrace ptrace-kmod 2.4.22 km. 2 brk2 brk ptrace ptrace-kmod 2.4.22-1 0 loginx ./ loginx 2.4.23 mremappte 2.4.24 mremappte Uselib24 2.4.25-1...

Linux Kernel get_random_int函数不充分随机数漏洞

Linux kernel 2.6.x CVE ID: CVE-2009-3238 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的drivers/char/random.c文件中的getrandomint函数所生成的随机数随机性不够，攻击者可以相对容易的预测返回值，绕过基于随机化的保护机制。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Mandrake Security Advisory MDVSA-2009:233 (kernel)

The remote host is missing an update to kernel announced via advisory MDVSA-2009:233. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Linux Kernel tc_fill_tclass()函数本地信息泄露漏洞

BUGTRAQ ID: 36304 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的net/sched/schapi.c文件中的tcfilltclass函数没有清除某些结构成员便将其返回给了用户空间，这可能导致泄漏3个字节的未初始化内核内存。 Linux kernel 2.6.x Linux kernel 2.4.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Linux Kernel 2.4/2.6 sock_sendpage() Local Root Exploit [3]

Exploit for linux platform in category local exploits =========================================================== Linux Kernel 2.4/2.6 socksendpage Local Root Exploit 3 =========================================================== This third version features: Complete support for i386, x8664, ppc a...

CVE-2009-3120

CVE-2009-3120 is an XSS vulnerability affecting BIGACE Web CMS 2.6, reachable via public/index.php and the id parameter. The issue allows remote attackers to inject arbitrary web script or HTML. The NVD entry lists a CVSS v2 base score of 4.3 (Medium) with no confidentiality impact, partial integ...

CVE-2008-7188

ClipShare 2.6 does not properly restrict access to certain functionality, which allows remote attackers to change the profile of arbitrary users via a modified uid variable to siteadmin/useredit.php. NOTE: this can be used to recover the password of the user by using the modified e-mail address i...

CVE-2008-7188

ClipShare 2.6 does not properly restrict access to certain functionality, which allows remote attackers to change the profile of arbitrary users via a modified uid variable to siteadmin/useredit.php. NOTE: this can be used to recover the password of the user by using the modified e-mail address i...

Mandrake Security Advisory MDVSA-2009:205 (kernel)

The remote host is missing an update to kernel announced via advisory MDVSA-2009:205. OpenVAS Vulnerability Test $Id: mdksa2009205.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:205 kernel Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Debian: Security Advisory (DSA-1862-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Kernel 2.4/2.6 sock_sendpage() Local Root Exploit (ppc)

No description provided by source. / Linux socksendpage NULL pointer dereference Copyright 2009 Ramon de Carvalho Valle [email protected] This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Softwar...

Linux Kernel 2.6 < 2.6.19 (32bit) ip_append_data() ring0 Root Exploit

No description provided by source. / 0x82-CVE-2009-2698 Linux kernel 2.6 2.6.19 32bit ipappenddata local ring0 root exploit Tested White Box 42.6.9-5.ELsmp, CentOS 4.42.6.9-42.ELsmp, CentOS 4.52.6.9-55.ELsmp, Fedora Core 42.6.11-1.1369FC4smp, Fedora Core 52.6.15-1.2054FC5, Fedora Core...

Design/Logic Flaw

pphoto in Ariadne before 2.6 allows remote authenticated users with certain privileges to execute arbitrary shell commands via vectors related to PINP programs and the annotate command. NOTE: some of these details are obtained from third party information...

CVE-2008-7125

pphoto in Ariadne before 2.6 allows remote authenticated users with certain privileges to execute arbitrary shell commands via vectors related to PINP programs and the annotate command. NOTE: some of these details are obtained from third party information...