121 matches found
Linux Kernel RDS协议本地权限提升漏洞
BUGTRAQ ID: 44219 CVE ID: CVE-2010-3904 Linux Kernel是开放源码操作系统Linux所使用的内核。 在Linux上，使用了iovec结构执行recvmsg样式套接字调用以允许用户指定用于接收套接字数据的缓冲区基址和大小。每个报文家族负责定义拷贝套接字数据的函数，内核接收到这些数据后返回给用户空间以便用户程序处理所接收到的网络数据。 在将数据拷贝到用户空间时，RDS协议没有确认用户所提供iovec结构的基址指向了有效的用户空间地址便使用...
Linux RDS Protocol Local Privilege Escalation
No description provided by source. Source: http://www.vsecurity.com/resources/advisory/20101019-1/ / Linux Kernel = 2.6.36-rc8 RDS privilege escalation exploit CVE-2010-3904 by Dan Rosenberg [email protected] Copyright 2010 Virtual Security Research, LLC The handling functions for sending...
Linux kernel RDS protocol vulnerability
Overview The RDS protocol implementation of Linux kernels 2.6.30 through 2.6.38-rc8 contain a local privilege escalation vulnerability. Description Kernel functions fail to properly check if a user supplied address exists in the user segment of memory. By providing a kernel address to a socket ca...
kernel security update
2.6.18-194.17.1.0.2.el5 - rds fix access issue with rds Chris Mason CVE-2010-3904 orabug 10226701...
Oracle Linux 5 Unbreakable Enterprise kernel security fix update
Following security bugs are fixed in this errata CVE-2010-3904 When copying data to userspace, the RDS protocol failed to verify that the user-provided address was a valid userspace address. A local unprivileged user could issue specially crafted socket calls to write arbitrary values into kernel...
Security fix for the ALT Linux 6 package kernel-image-hpc-skif version 2.6.32-alt24
Oct. 20, 2010 Sergey Bolshakov 2.6.32-alt24 - 2.6.32.24 - CVE-2010-3904 fixed...
Reliable Datagram Sockets (RDS) rds_page_copy_user Privilege Escalation
This module exploits a vulnerability in the rdspagecopyuser function in net/rds/page.c RDS in Linux kernel versions 2.6.30 to 2.6.36-rc8 to execute code as root CVE-2010-3904. This module has been tested successfully on: Fedora 13 i686 kernel version 2.6.33.3-85.fc13.i686.PAE; and Ubuntu 10.04...
Linux RDS Protocol Local Privilege Escalation
Exploit for linux platform in category local exploits ============================================= Linux RDS Protocol Local Privilege Escalation ============================================= / Linux Kernel Copyright 2010 Virtual Security Research, LLC The handling functions for sending and...
CVE-2010-3904
creationtimestamp| type| source ---|---|--- 2010-10-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15285 2018-05-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44677 2019-12-22 15:30:53+00:00| seen|...
Linux Kernel 2.6.36-rc8 - 'RDS Protocol' Local Privilege Escalation
// source: http://www.vsecurity.com/resources/advisory/20101019-1/ / Linux Kernel Copyright 2010 Virtual Security Research, LLC The handling functions for sending and receiving RDS messages use unchecked copyuserinatomic functions without any access checks on user-provided pointers. As a result, ...
Linux Kernel 2.6.36-rc8 - RDS Protocol Local Privilege Escalation
Linux Kernel 2.6.36-rc8 - RDS Protocol Local Privilege Escalation // source: http://www.vsecurity.com/resources/advisory/20101019-1/ / Linux Kernel Copyright 2010 Virtual Security Research, LLC The handling functions for sending and receiving RDS messages use unchecked copyuserinatomic functions...
Debian DSA-1941-1 : poppler - several vulnerabilities
Several integer overflows, buffer overflows and memory allocation errors were discovered in the Poppler PDF rendering library, which may lead to denial of service or the execution of arbitrary code if a user is tricked into opening a malformed PDF document. An update for the old stable distributi...
Debian Security Advisory DSA 1941-1 (poppler)
The remote host is missing an update to poppler announced via advisory DSA 1941-1. OpenVAS Vulnerability Test $Id: deb19411.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1941-1 poppler Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
[SECURITY] [DSA 1941-1] New poppler packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1941-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 25, 2009 http://www.debian.org/security/faq -...
CVE-2009-3904
CVE-2009-3904 affects CubeCart 4.3.4 where session management does not properly restrict administrative access, allowing a remote attacker to bypass admin permissions and gain administrative access via a crafted HTTP request containing an empty sessID cookie, an empty X_CLUSTER_CLIENT_IP header, ...
CVE-2009-3904
creationtimestamp| type| source ---|---|--- 2009-10-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9875...
CVE-2008-3904
src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment LXDE allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename...
CVE-2008-3904
CVE-2008-3904 affects GPicView 0.1.9 within LXDE. The flaw is in src/main-win.c where shell metacharacters in a filename can allow context-dependent attackers to execute arbitrary commands. Documented impact is arbitrary command execution with the filename as the trigger; exploitation details are...
CVE-2006-3904
SQL injection vulnerability in manager/index.php in Etomite CMS 0.6.1 and earlier, with magicquotesgpc disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...