117 matches found
CVE-2010-3858
CVE-2010-3858 is a Linux kernel vulnerability described in MiracleLinux advisories as affecting fs/exec.c with CONFIG_STACK_GROWSDOWN. On 64-bit platforms, for 32-bit applications, the setup_arg_pages function does not properly constrain stack usage of arguments and environment, enabling local us...
Debian DSA-2126-1 : linux-2.6 - privilege escalation/denial of service/information leak
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leak. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-2963 Kees Cook discovered an issue in the v4l 32-bit...
CVE-2009-3858
Cross-site scripting XSS vulnerability in GejoSoft allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI in photos/tags...
CVE-2009-3858
CVE-2009-3858 describes a Cross-site Scripting (XSS) vulnerability in GejoSoft. The issue allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI in the photos/tags component. The NVD entry lists a base score of 4.3 (Medium) with network attack vector, ...
CVE-2009-3858
creationtimestamp| type| source ---|---|--- 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34738...
CVE-2008-3858
The Downlevel DB2RA Support component in IBM DB2 9.1 before Fixpak 4a allows remote attackers to cause a denial of service instance crash via a crafted CONNECT data stream that simulates a V7 client connect request...
Debian Security Advisory DSA 1018-1 (kernel-source-2.4.27)
The remote host is missing an update to kernel-source-2.4.27 announced via advisory DSA 1018-1. For details on the issues addressed with this update, please visit the referenced security advisories. OpenVAS Vulnerability Test $Id: deb10181.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description:...
Debian Security Advisory DSA 1017-1 (kernel-source-2.6.8)
The remote host is missing an update to kernel-source-2.6.8 announced via advisory DSA 1017-1. OpenVAS Vulnerability Test $Id: deb10171.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1017-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Linux Kernel IP6_Input_Finish远程拒绝服务漏洞
BUGTRAQ ID: 16043 CVECAN ID: CVE-2005-3858 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的ip6inputfinish函数中存在内存泄露漏洞，远程攻击者可能利用此漏洞对服务器进行拒绝服务攻击。 远程攻击者可以发送特制的IPv6报文导致耗尽所有可用的Kernel内存，造成拒绝服务。 Linux kernel = 2.6.12.5 Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： Linux Upgrade linux-2.6.12.6.tar.bz2...
CVE-2006-3858
IBM Informix Dynamic Server IDS before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory product defects 171893, 171894, 173772...
CVE-2006-3858
CVE-2006-3858 affects IBM Informix Dynamic Server (IDS) prior to 9.40.xC8 and 10.00 prior to 10.00.xC4. The flaw causes passwords to be stored in plaintext in a shared memory region, enabling local users to read memory and obtain passwords. Affected products include IDS versions before the stated...
[SECURITY] [DSA 1018-1] New Linux kernel 2.4.27 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1018-1 [email protected] http://www.debian.org/security/ Dann Frazier, Simon Horman March 26th, 2006 http://www.debian.org/security/faq -...
Ubuntu 4.10 / 5.04 / 5.10 : linux-source-2.6.8.1/-2.6.10/-2.6.12 vulnerabilities (USN-231-1)
Rudolf Polzer reported an abuse of the 'loadkeys' command. By redefining one or more keys and tricking another user like root into logging in on a text console and typing something that involves the redefined keys, a local user could cause execution of arbitrary commands with the privileges of th...
RHEL 3 : kernel (RHSA-2006:0140)
Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...
USN-231-1: Linux kernel vulnerabilities
Rudolf Polzer reported an abuse of the 'loadkeys' command. By redefining one or more keys and tricking another user like root into logging in on a text console and typing something that involves the redefined keys, a local user could cause execution of arbitrary commands with the privileges of th...
CVE-2005-3858
Memory leak in the ip6inputfinish function in ip6input.c in Linux kernel 2.6.12 and earlier might allow attackers to cause a denial of service via malformed IPv6 packets with unspecified parameter problems, which prevents the SKB from being freed...