Linux Kernel 'perf'工具本地特权提升漏洞

Bugtraq ID: 49140 CVE ID：CVE-2011-2905 Linux是一款开放源代码的操作系统。 perf工具从当前目录装载配置文件存在缺陷，构建用户在包含恶意配置文件中的目录中执行perf工具，可提升特权。 Linux kernel 2.6.x 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息： http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=aba8d056078e47350d85b06a9cabd5afcc4b72ea...

CentOS Update for newt CESA-2009:1463 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-2905

CVE-2010-2905 is a SQL injection vulnerability affecting the ScriptsFeed and BrotherScripts (BS) Scripts Directory, exploitable via the id parameter in info.php and allowing remote execution of arbitrary SQL commands. The CVE has corroborating entries in multiple sources (NVD, CVE list, PRION) de...

CVE-2010-2905

creationtimestamp| type| source ---|---|--- 2010-07-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14370...

VMSA-2010-0004:ESX Service Console and vMA third party updates

VMSA-2010-0004.5 ESX Service Console and vMA third party updates VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0004.5 VMware Security Advisory Synopsis: ESX Service Console and vMA third party updates VMware Security Advisory Issue date: 2010-03-03 VMware Security...

Debian DSA-1894-1 : newt - buffer overflow

Miroslav Lichvar discovered that newt, a windowing toolkit, is prone to a buffer overflow in the content processing code, which can lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

Mandriva Security Advisory MDVSA-2009:249-1 (newt)

The remote host is missing an update to newt announced via advisory MDVSA-2009:249-1. OpenVAS Vulnerability Test $Id: mdksa20092491.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:249-1 newt Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

openSUSE 10 Security Update : libnewt0_52 (libnewt0_52-6504)

A heap-based buffer overflow was found in the way newt used to process content, to be rendered in text dialog box. Local attacker could issue a specially crafted text dialog box rendering request direct or via custom application, leading to denial of service application crash or, potentially, to...

SuSE Security Summary SUSE-SR:2009:017

The remote host is missing updates announced in advisory SUSE-SR:2009:017. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

openSUSE Security Update : libnewt0_52 (libnewt0_52-1331)

A heap-based buffer overflow was found in the way newt used to process content, to be rendered in text dialog box. Local attacker could issue a specially crafted text dialog box rendering request direct or via custom application, leading to denial of service application crash or, potentially, to...

openSUSE Security Update : libnewt0_52 (libnewt0_52-1331)

A heap-based buffer overflow was found in the way newt used to process content, to be rendered in text dialog box. Local attacker could issue a specially crafted text dialog box rendering request direct or via custom application, leading to denial of service application crash or, potentially, to...

CVE-2009-2905

CVE-2009-2905 is a heap-based buffer overflow in the newt library’s textbox handling when reflowing content, reported to affect newt versions 0.51.5, 0.51.6, and 0.52.2. Exploitation could cause a denial of service (crash) or potentially allow arbitrary code execution via a crafted text dialog re...

Fedora Core 10 FEDORA-2009-9957 (newt)

The remote host is missing an update to newt announced via advisory FEDORA-2009-9957. OpenVAS Vulnerability Test $Id: fcore20099957.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9957 newt Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Ubuntu USN-837-1 (newt)

The remote host is missing an update to newt announced via advisory USN-837-1. OpenVAS Vulnerability Test $Id: ubuntu8371.nasl 8616 2018-02-01 08:24:13Z cfischer $ $Id: ubuntu8371.nasl 8616 2018-02-01 08:24:13Z cfischer $ Description: Auto-generated from advisory USN-837-1 newt Authors: Thomas...

Fedora Core 11 FEDORA-2009-9961 (newt)

The remote host is missing an update to newt announced via advisory FEDORA-2009-9961. OpenVAS Vulnerability Test $Id: fcore20099961.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9961 newt Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Fedora Core 10 FEDORA-2009-9957 (newt)

The remote host is missing an update to newt announced via advisory FEDORA-2009-9957. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CentOS 3 / 4 / 5 : newt (CESA-2009:1463)

Updated newt packages that fix one security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Newt is a programming library for color text mode, widget-based user interfaces. Newt...

CentOS Security Advisory CESA-2009:1463 (newt)

The remote host is missing updates to newt announced in advisory CESA-2009:1463. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Moderate: Red Hat Security Advisory: newt security update

Updated newt packages that fix one security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Newt is a programming library for color text mode, widget-based user interfaces. Newt...

[SECURITY] [DSA 1894-1] New newt packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1894-1 [email protected] http://www.debian.org/security/ Steffen Joeris September 24, 2009 http://www.debian.org/security/faq -...