VMSA-2010-0009 : ESXi ntp and ESX Service Console third-party updates

a. Service Console update for COS kernel Updated COS package 'kernel' addresses the security issues that are fixed through versions 2.6.18-164.11.1. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2009-2695, CVE-2009-2908, CVE-2009-3228, CVE-2009-3286,...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix three security issues and multiple bugs are now available for Red Hat Enterprise Linux 5.3 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...

Fedora Update for kernel FEDORA-2010-1500

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for kernel FEDORA-2010-1804

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS 5 : kernel (CESA-2010:0046)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

CVE-2009-4141

CVE-2009-4141 is a local-privilege escalation in the Linux kernel (fs/fcntl.c: fasync_helper) where enabling O_ASYNC on a locked file and closing it can grant privileges. Affected: Linux kernel before 2.6.33-rc4-git1. Root cause: use-after-free in fasync_helper. Mitigation: apply the upstream pat...

Linux Kernel 'fasync_helper()'本地特权提升漏洞

Bugraq ID: 37806 CVE ID：CVE-2009-4141 Linux是一款开放源代码的操作系统。 Linux内核处理锁定fasync文件描述符存在安全漏洞，允许攻击者以内核特权执行任意代码或使系统崩溃。 根据Linus分析，“问题是相同文件描述符可在多个fasync列表上，它可以在特定fasync列表上存在一次，但是文件锁定比较特殊，会使用 'fl-flfasync'列表无视在什么底层设备驱动或其他的情况下增加任意文件到它所属的fasync列表中。" 这个问题是因为它不正确假定某个文件只能在一个fasync列表中，所以fasynchelper会清除FASYNC标记。...

CVE-2009-4141

creationtimestamp| type| source ---|---|--- 2009-12-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33523...

CVE-2008-4141

CVE-2008-4141 affects the x10Media x10 Automatic MP3 Script 1.5.5. The vulnerability is a remote file inclusion that allows an attacker to supply a URL in the web_root parameter to (1) includes/function_core.php and (2) templates/layout_lyrics.php, enabling arbitrary PHP code execution on the ser...

CVE-2008-4141

creationtimestamp| type| source ---|---|--- 2008-09-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6480...

CVE-2007-4141

OpenRat CMS 0.8-beta1 and earlier is affected by an information-disclosure vulnerability in index.php via an XSS sequence in the action parameter, causing an error message that reveals the path. Affected component: index.php handling the action parameter. Root cause: unescaped input in the XSS ve...

CVE-2006-4141

CVE-2006-4141 affects Virtual War (VWar) prior to 1.5.0, specifically the news.php module. It exposes a SQL injection vulnerability exploitable via the sortby and sortorder parameters, allowing remote attackers to execute arbitrary SQL commands. The CVE entry notes a base score of 7.5 (HIGH) with...

CVE-2005-4141

CVE-2005-4141 is an SQL injection in ASPMForum. The vulnerability allows remote attackers to execute arbitrary SQL via the parameters harf in include/listing (kullaniciListesi.asp) and baslik in forum.asp. Connected sources confirm these vectors and note a high-severity impact (base score 7.5) wi...