kernel security update

2.6.18-194.17.1.0.2.el5 - rds fix access issue with rds Chris Mason CVE-2010-3904 orabug 10226701...

Oracle Linux 5 Unbreakable Enterprise kernel security fix update

Following security bugs are fixed in this errata CVE-2010-3904 When copying data to userspace, the RDS protocol failed to verify that the user-provided address was a valid userspace address. A local unprivileged user could issue specially crafted socket calls to write arbitrary values into kernel...

Security fix for the ALT Linux 6 package kernel-image-hpc-skif version 2.6.32-alt24

Oct. 20, 2010 Sergey Bolshakov 2.6.32-alt24 - 2.6.32.24 - CVE-2010-3904 fixed...

Linux RDS Protocol Local Privilege Escalation

Exploit for linux platform in category local exploits ============================================= Linux RDS Protocol Local Privilege Escalation ============================================= / Linux Kernel Copyright 2010 Virtual Security Research, LLC The handling functions for sending and...

Reliable Datagram Sockets (RDS) rds_page_copy_user Privilege Escalation

This module exploits a vulnerability in the rdspagecopyuser function in net/rds/page.c RDS in Linux kernel versions 2.6.30 to 2.6.36-rc8 to execute code as root CVE-2010-3904. This module has been tested successfully on: Fedora 13 i686 kernel version 2.6.33.3-85.fc13.i686.PAE; and Ubuntu 10.04...

Linux Kernel 2.6.36-rc8 - RDS Protocol Local Privilege Escalation

Linux Kernel 2.6.36-rc8 - RDS Protocol Local Privilege Escalation // source: http://www.vsecurity.com/resources/advisory/20101019-1/ / Linux Kernel Copyright 2010 Virtual Security Research, LLC The handling functions for sending and receiving RDS messages use unchecked copyuserinatomic functions...

Linux Kernel 2.6.36-rc8 - 'RDS Protocol' Local Privilege Escalation

// source: http://www.vsecurity.com/resources/advisory/20101019-1/ / Linux Kernel Copyright 2010 Virtual Security Research, LLC The handling functions for sending and receiving RDS messages use unchecked copyuserinatomic functions without any access checks on user-provided pointers. As a result, ...

CVE-2010-3904

creationtimestamp| type| source ---|---|--- 2010-10-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15285 2018-05-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44677 2019-12-22 15:30:53+00:00| seen|...

Debian DSA-1941-1 : poppler - several vulnerabilities

Several integer overflows, buffer overflows and memory allocation errors were discovered in the Poppler PDF rendering library, which may lead to denial of service or the execution of arbitrary code if a user is tricked into opening a malformed PDF document. An update for the old stable distributi...

Debian Security Advisory DSA 1941-1 (poppler)

The remote host is missing an update to poppler announced via advisory DSA 1941-1. OpenVAS Vulnerability Test $Id: deb19411.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1941-1 poppler Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

[SECURITY] [DSA 1941-1] New poppler packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1941-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 25, 2009 http://www.debian.org/security/faq -...

CVE-2009-3904

CVE-2009-3904 affects CubeCart 4.3.4 where session management does not properly restrict administrative access, allowing a remote attacker to bypass admin permissions and gain administrative access via a crafted HTTP request containing an empty sessID cookie, an empty X_CLUSTER_CLIENT_IP header, ...

CVE-2009-3904

creationtimestamp| type| source ---|---|--- 2009-10-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9875...

CVE-2008-3904

src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment LXDE allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename...

CVE-2008-3904

CVE-2008-3904 affects GPicView 0.1.9 within LXDE. The flaw is in src/main-win.c where shell metacharacters in a filename can allow context-dependent attackers to execute arbitrary commands. Documented impact is arbitrary command execution with the filename as the trigger; exploitation details are...

CVE-2006-3904

Etomite CMS

CVE-2006-3904

SQL injection vulnerability in manager/index.php in Etomite CMS 0.6.1 and earlier, with magicquotesgpc disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2005-3904

CVE-2005-3904 affects Java JMX in Java JDK/JRE 5.0 Update 3 and later (including 1.4.2+/1.3.1+); a remote attacker could escape the Java sandbox to access files or run arbitrary code. Mitigation from connected sources: upgrade to JDK/JRE 5.0 Update 4, and follow guidance to avoid untrusted applet...