Linux Kernel 2.6 2.6.19 (White Box 4 CentOS 4.44.5 Fedora Core 456 x86) - ip_append_data() Ring0 Privilege Escalation (1)

Linux Kernel 2.6 2.6.19 White Box 4 CentOS 4.44.5 Fedora Core 456 x86 - ipappenddata Ring0 Privilege Escalation 1 / 0x82-CVE-2009-2698 Linux kernel 2.6 . / include include include include include include include unsigned int uid, gid; void getrootuidunsigned task unsigned addr=task;...

Linux Kernel 2.6 < 2.6.19 (32bit) ip_append_data() ring0 Root Exploit

Exploit for linux platform in category local exploits ===================================================================== Linux Kernel 2.6 include include include include include include unsigned int uid, gid; void getrootuidunsigned task unsigned addr=task;...

CentOS 3 : kernel (CESA-2009:1233)

Updated kernel packages that fix two security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux operating system. These...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix two security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux operating system. These...

BELL-CVE-2009-2698 CVE-2009-2698 does not affect BellSoft software

Bulletin has no description...

CVE-2009-2698

The udpsendmsg function in the UDP implementation in 1 net/ipv4/udp.c and 2 net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service NULL pointer dereference and system crash via vectors involving the MSGMORE flag and a UDP socket...

Immunity Canvas: PROTO_OPS_NULL

Name| protoopsnull ---|--- CVE| CVE-2009-2692 / CVE-2009-2698 Exploit Pack| CANVAS Description| protoopsnull / udpsendmsg Notes| References: 'http://blog.cr0.org/2009/08/linux-null-pointer-dereference-due-to.html' Date public: VENDOR: Linux CVE Url: https://vulners.com/cve/CVE-2009-2692 CVE Name:...

CVE-2009-2698

CVE-2009-2698 affects the Linux kernel UDP implementation (net/ipv4/udp.c and net/ipv6/udp.c) prior to 2.6.19. Local users can gain privileges or cause a denial of service (NULL pointer dereference/system crash) via UDP socket use with MSG_MORE. Oracle Linux/MiracleLinux advisories reference this...

Linux Kernel udp_sendmsg() MSG_MORE标记本地权限提升漏洞

BUGTRAQ ID: 36108 CVECAN ID: CVE-2009-2698 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在对UDP套接字使用MSGMORE标记时udpsendmsg实现中存在漏洞，本地非特权用户可以利用这个漏洞导致拒绝服务或提升权限。 Linux kernel 2.6.x 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1872-1）以及相应补丁: DSA-1872-1：New Linux 2.6.18 packages fix several vulnerabilities...

RHEL 4 : kernel (RHSA-2009:1223)

Updated kernel packages that fix two security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux operating system. These...

CentOS 4 : kernel (CESA-2009:1223)

Updated kernel packages that fix two security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux operating system. These...

[SECURITY] [DSA 1872-1] New Linux 2.6.18 packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-1872-1 [email protected] http://www.debian.org/security/ dann frazier August 24, 2009 http://www.debian.org/security/faq -...

RHEL 5 : kernel (RHSA-2009:1222)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1222 advisory. - kernel: uninit op in SOCKOPSWRAP leads to privesc CVE-2009-2692 - kernel: udp socket NULL ptr dereference CVE-2009-2698 Note that Nessus h...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix two security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux operating system. These...

CVE-2008-2698

The CVE-2008-2698 entry affects WEBalbum 2.0 and earlier, with concrete details in connected sources. The vulnerability is a cross-site scripting (XSS) flaw in photo_add-c.php (the “add comment” section). It allows remote attackers to inject arbitrary web script or HTML via one of three parameter...

CVE-2004-2698

The CVE-2004-2698 entry concerns a race condition in IMWheel before or at 1.0.0pre11 when run with the -k option. This condition can allow a local attacker to cause a denial of service (IMWheel crash) and, via a symlink attack on the imwheel.pid file, potentially modify arbitrary files. The conne...

CVE-2007-2698

Summary: CVE-2007-2698 affects BEA WebLogic Server 9.0 Administr ation Console. The issue allows an attacker to view plaintext Web Service attributes during configuration creation, potentially exposing sensitive credentials. The published CVSS v2 base score is 5.0 (Medium): Network access, low at...

CVE-2006-2698

Geeklog 1.4.0sr2 and earlier is affected by a path-disclosure vulnerability. Remote attackers can obtain the full installation path by sending direct requests to layout/professional/functions.php or getimage.php with possibly invalid arguments. No remediation details are provided in the supplied ...

CVE-2005-2698

CVE-2005-2698 describes a cross-site scripting (XSS) vulnerability in Nephp Publisher Enterprise 3.04, affecting the file/browse.php. The issue allows remote attackers to inject arbitrary web script or HTML by supplying a hex-encoded value for the keywords parameter. The vulnerability could impac...

CVE-2004-2698

Race condition in IMWheel 1.0.0pre11 and earlier, when running with the -k option, allows local users to cause a denial of service IMWheel crash and possibly modify arbitrary files via a symlink attack on the imwheel.pid file...