[slackware-security] 64-bit kernel

New kernel packages are available for Slackware x8664 13.1, and -current to fix security issues. Here are the details from the Slackware64 13.1 ChangeLog: patches/packages/linux-2.6.33.4-2/kernel-firmware-2.6.33.4-noarch-2.txz: Rebuilt...

kernel: 64-bit Compatibility Mode Stack Pointer Underflow

The compatallocuserspace functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly allocate the userspace memory required for the 32-bit compatibility layer, which allows local users to gain privileges by leveraging the ability of the...

CVE-2010-3081

The compatallocuserspace functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly allocate the userspace memory required for the 32-bit compatibility layer, which allows local users to gain privileges by leveraging the ability of the...

Microsoft Windows RPC Memory Allocation Remote Code Execution Vulnerability

Description Microsoft Windows RPC is prone to a remote code-execution vulnerability. An attacker can exploit this issue by sending a specially crafted RPC request to an affected computer. Successfully exploiting this issue will allow the attacker to execute arbitrary code with full system rights,...

Rootkit Variant Now Targets 64-Bit Windows

Alureon rootkit is back, and has acquired the ability to hijack computers running 64-bit versions of Microsoft Windows, proclaimed security researcher Marco Giuliani. Read the full article. Help Net Security...

gdm security update

CentOS Errata and Security Advisory CESA-2010:0657 An updated gdm package that fixes one security issue and one bug is now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS...

MDVA-2009:064 : openoffice.org-voikko

x8664 version of openoffice.org-voikko was missing from 2009.1. This prevented the installation of Openoffice.org Finnish language support on 64-bit systems. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

CVE-2010-2233

tifgetimage.c in LibTIFF 3.9.0 and 3.9.2 on 64-bit platforms, as used in ImageMagick, does not properly perform vertical flips, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted TIFF image, related to "downsampled OJPEG...

DEBIAN-CVE-2010-2233

tifgetimage.c in LibTIFF 3.9.0 and 3.9.2 on 64-bit platforms, as used in ImageMagick, does not properly perform vertical flips, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted TIFF image, related to "downsampled OJPEG...

Input validation

tifgetimage.c in LibTIFF 3.9.0 and 3.9.2 on 64-bit platforms, as used in ImageMagick, does not properly perform vertical flips, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted TIFF image, related to "downsampled OJPEG...

CVE-2010-2233

tifgetimage.c in LibTIFF 3.9.0 and 3.9.2 on 64-bit platforms, as used in ImageMagick, does not properly perform vertical flips, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted TIFF image, related to "downsampled OJPEG...

CVE-2010-2233

CVE-2010-2233 affects LibTIFF 3.9.0/3.9.2 (used by ImageMagick) on 64‑bit platforms. The tif_getimage.c vertical-flip handling is incorrect, allowing a crafted TIFF to cause a crash or potentially execute arbitrary code, via the downsampled OJPEG path. Remote exploitation could lead to denial of ...

CVE-2010-2233

tifgetimage.c in LibTIFF 3.9.0 and 3.9.2 on 64-bit platforms, as used in ImageMagick, does not properly perform vertical flips, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted TIFF image, related to "downsampled OJPEG...

CVE-2010-2233

tifgetimage.c in LibTIFF 3.9.0 and 3.9.2 on 64-bit platforms, as used in ImageMagick, does not properly perform vertical flips, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted TIFF image, related to "downsampled OJPEG...

kernel security and bug fix update

2.6.9-89.0.26.0.1.EL - XEN fix cpu hotplug crash Joe Jin orabug 7521308 - XEN Bring up vcpus before khelper init Joe Jin orabug 7521308 - XEN flush the tlb cache immediately Dave McCracken, Scott Shi orabug 9138767 - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug...

Ubuntu Update for linux regression USN-947-2

Ubuntu Update for Linux kernel vulnerabilities USN-947-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN9472.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for linux regression USN-947-2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.ne...

Windows 7 Pro SP1 64 Fr Beep Shellcode 39 Bytes

Windows Seven Pro SP1 64 Fr Beep Shellcode 39 Bytes. Shellcode exploit for win64 platform include char shellcode = "\x31\xC9" //xor ecx, ecx "\x64\x8B\x71\x30" //mov esi, fs:ecx+0x30 "\x8B\x76\x0C" //mov esi, esi+0x0C "\x8B\x76\x1C" //mov esi, esi+0x1c "\x8B\x06" //mov eax, esi "\x8B\x68\x08" //m...

linux/x86-64 execve("/bin/sh"); 30 bytes shellcode

Exploit for linux/x86-64 platform in category shellcode ================================================== linux/x86-64 execve"/bin/sh"; 30 bytes shellcode ================================================== Linux/x8664 execve"/bin/sh"; 30 bytes shellcode Date: 2010-04-26 Author: zbt Tested on:...

PHP 4.x < 4.4.5, 5.x < 5.2.1 Multiple Format String Vulnerabilities

PHP is prone to multiple format-string vulnerabilities due to a design error when casting 64-bit variables to 32 bits. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft Windows Kernel Registry Key Symbolic Link Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Fail...