CVE-2009-2707

Unspecified vulnerability in ia32el aka the IA 32 emulation functionality before 70427022-0.4.2 in SUSE Linux Enterprise SLE 10 SP2 on Itanium IA64 machines allows local users to cause a denial of service system crash via a 32-bit x86 application...

Code injection

Unspecified vulnerability in ia32el aka the IA 32 emulation functionality before 70427022-0.4.2 in SUSE Linux Enterprise SLE 10 SP2 on Itanium IA64 machines allows local users to cause a denial of service system crash via a 32-bit x86 application...

GemStone/S 6.3.1 (stoned) Local Buffer Overflow Exploit

No description provided by source. / wonderfulcaricatureofexploitability.c AKA GemStone/S 6.3.1 "stoned" Local Buffer Overflow Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.07.2009 Gemstone/S "stoned" suffers from a local buffer overflow when parsing input...

GemStone/S 6.3.1 - 'stoned' Local Buffer Overflow

/ wonderfulcaricatureofexploitability.c AKA GemStone/S 6.3.1 "stoned" Local Buffer Overflow Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.07.2009 Gemstone/S "stoned" suffers from a local buffer overflow when parsing input either from the "-e" or "-l" flags,...

FreeBSD <= 6.1 kqueue() NULL pointer Dereference Local Root Exploit

No description provided by source. FreeBSD = 6.1 suffers from classical check/use race condition on SMP systems in kevent syscall, leading to kernel mode NULL pointer dereference. It can be triggered by spawning two threads: 1st thread looping on open and close syscalls, and the 2nd thread loopin...

Slackware 12.2 : kernel [updated] (SSA:2009-231-01)

This is a followup to the SSA:2009-230-01 advisory noting some errata. The generic SMP kernel update for Slackware 12.2 was built using the .config for a huge kernel, not a generic one. The kernel previously published as kernel-generic-smp and in the gemsmp.s directory works and is secure, but is...

Slackware 12.2 / current : kernel (SSA:2009-230-01)

New Linux kernel packages are available for Slackware 12.2 and -current to address a security issue. A kernel bug discovered by Tavis Ormandy and Julien Tinnes of the Google Security Team could allow a local user to fill memory page zero with arbitrary code and then use the kernel sendpage...

python: Multiple buffer overflows in unicode processing

Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service crash or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicoderesize...

VMSA-2008-0018 : VMware Hosted products and patches for ESX and ESXi resolve two security issues

a. A privilege escalation on 32-bit and 64-bit guest operating systems VMware products emulate hardware functions and create the possibility to run guest operating systems. A flaw in the CPU hardware emulation might allow the virtual CPU to incorrectly handle the Trap flag. Exploitation of this...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-1000)

The Mozilla Firefox browser was updated to version 3.0.11, fixing various bugs and security issues : - MFSA 2009-24/CVE-2009-1392/CVE-2009-1832/CVE-2009-1833 Crashes with evidence of memory corruption rv:1.9.0.11 - MFSA 2009-25/CVE-2009-1834 bmo479413 URL spoofing with invalid unicode characters ...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-1000)

The Mozilla Firefox browser was updated to version 3.0.11, fixing various bugs and security issues : - MFSA 2009-24/CVE-2009-1392/CVE-2009-1832/CVE-2009-1833 Crashes with evidence of memory corruption rv:1.9.0.11 - MFSA 2009-25/CVE-2009-1834 bmo479413 URL spoofing with invalid unicode characters ...

openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-1091)

Mozilla Thunderbird was updated to the 2.0.0.22 security release. It fixes various bugs and security issues : - MFSA-2009-14/CVE-2009-1302/CVE-2009-1303/CVE-2009-1304 CVE-2009-1305 Crashes with evidence of memory corruption rv:1.9.0.9 - MFSA 2009-17/CVE-2009-1307 bmo481342 Same-origin violations...

Oracle 8i TNS Listener SERVICE_NAME Buffer Overflow

This module exploits a stack buffer overflow in Oracle. When sending a specially crafted packet containing a long SERVICENAME to the TNS service, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

Mandrake Security Advisory MDVSA-2009:147 (pidgin)

The remote host is missing an update to pidgin announced via advisory MDVSA-2009:147. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

SuSE Security Advisory SUSE-SA:2009:034 (MozillaFirefox)

The remote host is missing updates announced in advisory SUSE-SA:2009:034. OpenVAS Vulnerability Test $Id: susesa2009034.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:034 MozillaFirefox Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

RHEL 5 : kernel (RHSA-2009:1106)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1106 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security fixes: several flaws were found in the way th...

Linux/x86 - sethostname(PwNeD !!, 8) Shellcode (32 bytes)

Linux/x86 - sethostnamePwNeD !!, 8 Shellcode 32 bytes. Shellcode exploit for Linuxx86 platform / Title : sethostname "pwned !!" Name : 32 bytes syssethostname"PwNeD !!",8 x86 linux shellcode Date : may, 31 2009 Author : gunslinger Web : devilzc0de.com blog : gunslingerc0de.wordpress.com tested on...

RedHat Security Advisory RHSA-2009:1059

The remote host is missing updates to Pidgin announced in advisory RHSA-2009:1059. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. A buffer overflow flaw was found in the way Pidgin initiates file transfers when...

pidgin incomplete fix for CVE-2008-2927

Multiple integer overflows in the msnslplinkprocessmsg functions in the MSN protocol handler in 1 libpurple/protocols/msn/slplink.c and 2 libpurple/protocols/msnp9/slplink.c in Pidgin formerly Gaim before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed S...

Xen hypervisor_callback()函数本地拒绝服务漏洞

BUGTRAQ ID: 34957 Xen是可用于Linux内核的一种虚拟化技术，允许同时运行多个操作系统。 Xen的arch/i386/kernel/entry-xen.S文件中的hypervisorcallback函数对中断代码的代码选择器缺少检查，32位x86 guest系统上的本地用户可以导致内核崩溃。 XenSource Xen 3.x 厂商补丁： XenSource --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...