52 matches found
Fedora 13 : kernel-2.6.34.8-68.fc13 (2011-2134)
Stable update 2.6.34.8, extra bug fixes, some basic hardware backports for Intel Sandy Bridge upon request. Update to kernel 2.6.34.8: http://www.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.34/ChangeLog -2.6.34.8 Note that Tenable Network Security has extracted the preceding description block...
Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-1080-2)
Thomas Pollet discovered that the RDS network protocol did not check certain iovec buffers. A local attacker could exploit this to crash the system or possibly execute arbitrary code as the root user. CVE-2010-3865 Vasiliy Kulikov discovered that the Linux kernel X.25 implementation did not...
Ubuntu 10.10 : linux vulnerabilities (USN-1081-1)
It was discovered that KVM did not correctly initialize certain CPU registers. A local attacker could exploit this to crash the system, leading to a denial of service. CVE-2010-3698 Thomas Pollet discovered that the RDS network protocol did not check certain iovec buffers. A local attacker could...
Ubuntu 10.04 LTS : linux vulnerabilities (USN-1080-1)
Thomas Pollet discovered that the RDS network protocol did not check certain iovec buffers. A local attacker could exploit this to crash the system or possibly execute arbitrary code as the root user. CVE-2010-3865 Vasiliy Kulikov discovered that the Linux kernel X.25 implementation did not...
CVE-2009-4648
CVE-2009-4648 affects Accellion Secure File Transfer Appliance before 8_0_105. Root cause: access to sensitive commands run with extra sudo privileges is not properly restricted in /usr/local/bin/admin.pl, enabling local administrators to escalate privileges. Vulnerability vectors include (1) arb...
CVE-2009-4648
creationtimestamp| type| source ---|---|--- 2010-02-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33623...
CVE-2008-4648
creationtimestamp| type| source ---|---|--- 2008-10-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32487...
CVE-2007-4648
The CVE-2007-4648 entry describes a local privilege escalation in Norman Virus Control (NVC) 5.82 via the nvcoaft51 driver. The NvcOa device exposes weak permissions (unrestricted write access), enabling exploitation by: (1) triggering a kernel pool buffer overflow through a string argument to io...
CVE-2006-4648
The CVE-2006-4648 entry describes a PHP remote file inclusion vulnerability in BinGo News (BP News) version 3.01 and earlier, affecting bp_ncom.php. An attacker can cause arbitrary PHP code execution by supplying a URL in the bnrep parameter (remote file inclusion via bnrep). The connected record...
CVE-2005-4648
CVE-2005-4648 details a buffer overflow in Illustrate dBpowerAMP Music Converter 11.5 and earlier (MusicConverter.exe, playlist.exe, amp.exe) that can be triggered by a long entry in a .m3u playlist, potentially allowing denial of service or arbitrary code execution. This issue appears related to...
