Important: Red Hat Security Advisory: rhev-hypervisor security and bug fix update

An updated rhev-hypervisor package that fixes security issues and several bugs is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The rhev-hypervisor package provides a Red Hat Enterprise Virtualization RHEV Hypervisor ISO disk...

SuSE Security Advisory SUSE-SA:2009:060 (kernel)

The remote host is missing updates announced in advisory SUSE-SA:2009:060. OpenVAS Vulnerability Test $Id: susesa2009060.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:060 kernel Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

SuSE Security Advisory SUSE-SA:2009:060 (kernel)

The remote host is missing updates announced in advisory SUSE-SA:2009:060. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

openSUSE Security Update : kernel (kernel-1593)

The openSUSE 11.1 Kernel was updated to 2.6.27.39 fixing various bugs and security issues. Following security issues have been fixed: CVE-2009-3547: A race condition during pipe open could be used by local attackers to cause a denial of service. Due to mmapminaddr protection enabled by default,...

RedHat Security Advisory RHSA-2009:1548

The remote host is missing updates to the kernel announced in advisory RHSA-2009:1548. For details on the issues addressed in this update, please visit the referenced security advisories. Users should upgrade to these updated packages, which contain backported patches to correct these issues. The...

CentOS Security Advisory CESA-2009:1548 (kernel)

The remote host is missing updates to kernel announced in advisory CESA-2009:1548. CESA-2009:1548 66219 2 $Id: ovcesa20091548.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1548 kernel Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CentOS Security Advisory CESA-2009:1548 (kernel)

The remote host is missing updates to kernel announced in advisory CESA-2009:1548. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

[SECURITY] [DSA 1928-1] New Linux 2.6.24 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1928-1 [email protected] http://www.debian.org/security/ Dann Frazier November 5, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

DSA-1929-1 linux-2.6 - several vulnerabilities

Bulletin has no description...

DSA-1928-1 linux-2.6.24 - several vulnerabilities

Bulletin has no description...

Debian Security Advisory DSA 1915-1 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 1915-1. OpenVAS Vulnerability Test $Id: deb19151.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1915-1 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

[SECURITY] [DSA 1915-1] New Linux 2.6.26 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1915-1 [email protected] http://www.debian.org/security/ dann frazier October 22, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

[SECURITY] [DSA 1915-1] New Linux 2.6.26 packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-1915-1 [email protected] http://www.debian.org/security/ dann frazier October 22, 2009 http://www.debian.org/security/faq -...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : linux, linux-source-2.6.15 vulnerabilities (USN-852-1)

Solar Designer discovered that the z90crypt driver did not correctly check capabilities. A local attacker could exploit this to shut down the device, leading to a denial of service. Only affected Ubuntu 6.06. CVE-2009-1883 Michael Buesch discovered that the SGI GRU driver did not correctly check...

Linux Kernel O_EXCL NFSv4本地权限提升漏洞

BUGTRAQ ID: 36472 CVE ID: CVE-2009-3286 Linux Kernel是开放源码操作系统Linux所使用的内核。 当OEXCL创建文件失败时，Linux Kernel的NFSv4没有正确地清除inode。这导致以不安全的设置（如setuid位）创建文件，本地用户可以通过执行doopenpermission函数获得权限提升。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://git.kernel.org/linus/af85852d...

CVE-2009-3286

CVE-2009-3286 affects the Linux kernel 2.6.18 (and possibly other versions) where NFSv4 O_EXCL creates are not properly cleaned up, causing files to be created with insecure settings (e.g., setuid bits) and potentially enabling local privilege escalation. The issue is tied to the do_open_permissi...

CVE-2008-3286

CVE-2008-3286 affects SWAT 4 (version 1.1 and earlier). The issue is a remote denial of service caused by specific commands (VERIFYCONTENT, GAMECONFIG) sent to the server before user session initialization, triggering a NULL pointer dereference, or by a GAMESPYRESPONSE command followed by a long ...

CVE-2008-3286

creationtimestamp| type| source ---|---|--- 2008-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32086...

CVE-2007-3286

CVE-2007-3286 affects Avaya IP Softphone (R5.2 before SP3 and R6.0). The root cause is multiple buffer overflows in unspecified ActiveX controls within COM objects, allowing remote attackers to execute arbitrary code via unspecified vectors. The available documents do not specify affected version...

CVE-2006-3286

The CVE-2006-3286 entry concerns Cisco Wireless Control System (WCS) for Linux and Windows prior to 3.2(63). The vulnerability arises from a hard-coded username and password stored in plaintext in unspecified files within the WCS database, enabling remote authenticated users to access the databas...