[USN-1133-1] Linux kernel vulnerabilities

========================================================================== Ubuntu Security Notice USN-1133-1 May 24, 2011 linux vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubunt...

USN-1133-1: Linux kernel vulnerabilities

Nelson Elhage discovered that Econet did not correctly handle AUN packets over UDP. A local attacker could send specially crafted traffic to crash the system, leading to a denial of service. CVE-2010-4342 Dan Rosenberg discovered that the OSS subsystem did not handle name termination correctly. A...

Ubuntu: Security Advisory (USN-1111-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2153-1 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 2153-1. OpenVAS Vulnerability Test $Id: deb21531.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2153-1 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-1080-2)

Thomas Pollet discovered that the RDS network protocol did not check certain iovec buffers. A local attacker could exploit this to crash the system or possibly execute arbitrary code as the root user. CVE-2010-3865 Vasiliy Kulikov discovered that the Linux kernel X.25 implementation did not...

Ubuntu 10.10 : linux vulnerabilities (USN-1081-1)

It was discovered that KVM did not correctly initialize certain CPU registers. A local attacker could exploit this to crash the system, leading to a denial of service. CVE-2010-3698 Thomas Pollet discovered that the RDS network protocol did not check certain iovec buffers. A local attacker could...

Ubuntu 10.04 LTS : linux vulnerabilities (USN-1080-1)

Thomas Pollet discovered that the RDS network protocol did not check certain iovec buffers. A local attacker could exploit this to crash the system or possibly execute arbitrary code as the root user. CVE-2010-3865 Vasiliy Kulikov discovered that the Linux kernel X.25 implementation did not...

RedHat Update for Red Hat Enterprise Linux 4.9 kernel RHSA-2011:0263-01

Check for the Version of Red Hat Enterprise Linux 4.9 kernel OpenVAS Vulnerability Test RedHat Update for Red Hat Enterprise Linux 4.9 kernel RHSA-2011:0263-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

RedHat Update for Red Hat Enterprise Linux 4.9 kernel RHSA-2011:0263-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RHEL 4 : Red Hat Enterprise Linux 4.9 kernel (RHSA-2011:0263)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0263 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A...

SuSE Update for kernel SUSE-SA:2011:008

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2153-1 : linux-2.6 - privilege escalation/denial of service/information leak

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leak. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-0435 Gleb Napatov reported an issue in the KVM subsystem...

CVE-2010-4527

The CVE-2010-4527 entry concerns the Linux kernel OSS sound driver (load_mixer_volumes in sound/oss/soundcard.c). It arises because a name field is not guaranteed to end with a NUL, enabling a local user to trigger a buffer overflow via SOUND_MIXER_SETLEVELS, with potential to escalate privileges...

CVE-2009-4527

CVE-2009-4527 concerns the Drupal Shibboleth authentication module. The affected components are Shibboleth module versions 5.x before 5.x-3.4 and 6.x before 6.x-3.2. The root cause is that statically granted privileges are not properly removed after a logout or session change, allowing physically...

CVE-2008-4527

SQL injection vulnerability in recept.php in the Recepies Recept module 1.1 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the katid parameter in a kategorier action. NOTE: some of these details are obtained from third party information...

CVE-2008-4527

The CVE-2008-4527 issue affects the Recepies (Recept) module for PHP-Fusion, specifically recept.php in version 1.1. The vulnerability stems from an SQL injection via the kat_id parameter in the kategorier action, allowing remote attackers to execute arbitrary SQL commands. CVSS2 base score is 7....

CVE-2008-4527

SQL injection vulnerability in recept.php in the Recepies Recept module 1.1 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the katid parameter in a kategorier action. NOTE: some of these details are obtained from third party information...

CVE-2008-4527

creationtimestamp| type| source ---|---|--- 2008-10-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6683...

CVE-2007-4527

CVE-2007-4527 affects phphq.Net phUploader 1.2. Unrestricted file upload vulnerability in phUploader.php could allow remote attackers to upload and execute arbitrary code via unspecified vectors. The NVD entry notes limited provenance and relies on third-party information; no exploits or in-the-w...

CVE-2006-4527

CVE-2006-4527 affects CubeCart 3.0.12 and earlier, where includes/content/gateway.inc.php validates the gateway parameter with an insufficiently restrictive regex when magic_quotes_gpc is disabled, enabling remote PHP remote file inclusion. Connected sources confirm the issue and reference CubeCart