Debian DSA-1928-1 : linux-2.6.24 - privilege escalation/denial of service/sensitive memory leak

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service, sensitive memory leak or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-2846 Michael Buesch noticed a typing issue in the...

CentOS 5 : kernel (CESA-2009:1455)

Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 23rd February 2010 This update adds references to two KBase articles...

CentOS Security Advisory CESA-2009:1455 (kernel)

The remote host is missing updates to kernel announced in advisory CESA-2009:1455. CESA-2009:1455 66168 2 $Id: ovcesa20091455.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1455 kernel Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1928-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1928-1] New Linux 2.6.24 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1928-1 [email protected] http://www.debian.org/security/ Dann Frazier November 5, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

DSA-1928-1 linux-2.6.24 - several vulnerabilities

Bulletin has no description...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : linux, linux-source-2.6.15 vulnerabilities (USN-852-1)

Solar Designer discovered that the z90crypt driver did not correctly check capabilities. A local attacker could exploit this to shut down the device, leading to a denial of service. Only affected Ubuntu 6.06. CVE-2009-1883 Michael Buesch discovered that the SGI GRU driver did not correctly check...

RedHat Security Advisory RHSA-2009:1455

The remote host is missing updates to the kernel announced in advisory RHSA-2009:1455. Security fix: a NULL pointer dereference flaw was found in the Multiple Devices md driver in the Linux kernel. If the suspendlo or suspendhi file on the sysfs file system /sys/ is modified when the disk array i...

Fedora Core 11 FEDORA-2009-9044 (kernel)

The remote host is missing an update to kernel announced via advisory FEDORA-2009-9044. OpenVAS Vulnerability Test $Id: fcore20099044.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9044 kernel Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Fedora Core 11 FEDORA-2009-9044 (kernel)

The remote host is missing an update to kernel announced via advisory FEDORA-2009-9044. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Debian: Security Advisory (DSA-1872-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 11 : kernel-2.6.29.6-217.2.16.fc11 (2009-9044)

Security fixes: - CVE-2009-2691: Information disclosure in proc filesystem - CVE-2009-2848: execve: must clear current-childtid - CVE-2009-2849: md: NULL pointer dereference - CVE-2009-2847: Information leak in dosigaltstack Restore missing LIRC drivers, dropped in previous release. Backport...

[SECURITY] [DSA 1872-1] New Linux 2.6.18 packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-1872-1 [email protected] http://www.debian.org/security/ dann frazier August 24, 2009 http://www.debian.org/security/faq -...

BELL-CVE-2009-2849 CVE-2009-2849 does not affect BellSoft software

Bulletin has no description...

CVE-2009-2849

CVE-2009-2849 affects the Linux kernel md driver (drivers/md/md.c) prior to version 2.6.30.2. The issue allows local attackers to trigger a NULL pointer dereference in suspend_lo_store and suspend_hi_store via writable sysfs suspend_* attributes, potentially causing a denial of service. The vulne...

CVE-2008-2849

Cross-site scripting XSS vulnerability in the TrailScout module 5.x before 5.x-1.4 for Drupal allows remote authenticated users, with create post permissions, to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-2849

CVE-2008-2849 affects the Drupal TrailScout module (5.x) prior to 5.x-1.4. The issue is a Cross-site Scripting (XSS) vulnerability that can be triggered by remote authenticated users with create post permissions, enabling insertion of arbitrary web script or HTML via unspecified vectors. The sour...

CVE-2007-2849

The CVE-2007-2849 entry affects KnowledgeTree Document Management (KnowledgeTree Open Source) prior to STABLE 3.3.7. The vulnerability allows an unregistered user to log in if the user exists in Active Directory, bypassing the intended authorization check and enabling remote login to KTDMS. Affec...

CVE-2006-2849

Summary: CVE-2006-2849 is a PHP remote file inclusion vulnerability affecting Bytehoard 2.1 Epsilon/Delta. The flaw resides in includes/webdav/server.php and is triggered by a crafted value in the bhconfig[bhfilepath] parameter, allowing an attacker to execute arbitrary PHP code remotely. The pro...

CVE-2005-2849

CVE-2005-2849 affects Barracuda Spam Firewall firmware 3.1.16 and 3.1.17. The vulnerability is an argument injection in CGI scripts that grant attackers the following capabilities: read portions of source code via the -f option to Dig (dig_device.cgi); determine file existence via the -r option t...