[SECURITY] [DSA 1915-1] New Linux 2.6.26 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1915-1 [email protected] http://www.debian.org/security/ dann frazier October 22, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

[SECURITY] [DSA 1915-1] New Linux 2.6.26 packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-1915-1 [email protected] http://www.debian.org/security/ dann frazier October 22, 2009 http://www.debian.org/security/faq -...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : linux, linux-source-2.6.15 vulnerabilities (USN-852-1)

Solar Designer discovered that the z90crypt driver did not correctly check capabilities. A local attacker could exploit this to shut down the device, leading to a denial of service. Only affected Ubuntu 6.06. CVE-2009-1883 Michael Buesch discovered that the SGI GRU driver did not correctly check...

Fedora Core 11 FEDORA-2009-9044 (kernel)

The remote host is missing an update to kernel announced via advisory FEDORA-2009-9044. OpenVAS Vulnerability Test $Id: fcore20099044.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9044 kernel Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Fedora Core 11 FEDORA-2009-9044 (kernel)

The remote host is missing an update to kernel announced via advisory FEDORA-2009-9044. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

BELL-CVE-2009-2695 CVE-2009-2695 does not affect BellSoft software

Bulletin has no description...

CVE-2009-2695

CVE-2009-2695 affects the Linux kernel before 2.6.31-rc7, where mmap operations targeting page zero and other low memory addresses are not properly prevented. This enables local privilege escalation via NULL pointer dereference vulnerabilities, linked to (1) SELinux’s allow_unconfined_mmap_low se...

Fedora 11 : kernel-2.6.29.6-217.2.16.fc11 (2009-9044)

Security fixes: - CVE-2009-2691: Information disclosure in proc filesystem - CVE-2009-2848: execve: must clear current-childtid - CVE-2009-2849: md: NULL pointer dereference - CVE-2009-2847: Information leak in dosigaltstack Restore missing LIRC drivers, dropped in previous release. Backport...

CVE-2008-2695

CVE-2008-2695 describes a directory traversal in phpInv 0.8.0: entry.php is vulnerable to a dot-dot (..) in the action parameter, enabling remote attackers to include and execute arbitrary local files. This is a straightforward path traversal risk in the PHP script that processes the action value...

CVE-2008-2695

creationtimestamp| type| source ---|---|--- 2008-06-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5754...

CVE-2004-2695

The CVE-2004-2695 entry describes an SQL injection in Jelsoft vBulletin 3.0–3.0.3, exploitable via the x_invoice_num parameter in subscriptions/authorize.php. This allows remote attackers to execute arbitrary SQL statements. The CVE entry notes a possible relation to CVE-2006-4267, which is indep...

CVE-2007-2695

Technical details about CVE-2007-2695 are not publicly provided in the connected documents. Monitor official advisories for updates; current sources only repeat the vulnerability description without specifics on affected products, impact, or fixes.

CVE-2006-2695

admin/upprocess.php in DGNews 1.5 and earlier allows remote attackers to execute arbitrary code by uploading scripts with arbitrary extensions to the img directory...

CVE-2006-2695

The CVE-2006-2695 entry concerns DGNews 1.5 and earlier, where the file admin/upprocess.php allows remote code execution by uploading scripts with arbitrary extensions into the img directory. The vulnerability stems from improper handling of uploaded files, enabling an attacker to run arbitrary c...

CVE-2005-2695

Technical details (affected components, root cause, impact, or remediation) are not publicly available in the provided documents. Monitor for updates to CVE-2005-2695 in the included records (NVD/CVE/CVELIST) for new information.

CVE-2004-2695

SQL injection vulnerability in the Authorize.net callback code subscriptions/authorize.php in Jelsoft vBulletin 3.0 through 3.0.3 allows remote attackers to execute arbitrary SQL statements via the xinvoicenum parameter. NOTE: this issue might be related to CVE-2006-4267...