Design/Logic Flaw

The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API...

Design/Logic Flaw

The CBBBRInvite method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution...

CVE-2015-6716

Technical details about CVE-2015-6716 are not publicly provided in the connected documents. Monitor for updates from the provided references.

CVE-2014-6716

The CVE-2014-6716 entry concerns the Android app fastin (1.0, also known as moda.azyae.fastin.net). The underlying issue is that the app does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information via a...

SLES10: Security update for Linux kernel

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kernel-bigsmp kernel-debug kernel-default kernel-kdump kernel-smp kernel-source kernel-syms kernel-vmi kernel-vmipae kernel-xen kernel-xenpae More details ma...

CVE-2008-6716

CVE-2008-6716 affects the Pre ADS Portal up to version 2.0. The vulnerability is that homeadmin/adminhome.php does not require administrative authentication, allowing remote attackers to cause an unspecified impact via a direct request. The NVD records a high impact (CVSS v2.0 base score 7.5) wit...

SuSE Update for kernel SUSE-SA:2008:051

Check for the Version of kernel OpenVAS Vulnerability Test $Id: gbsuse2008051.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for kernel SUSE-SA:2008:051 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...

SuSE Update for kernel SUSE-SA:2008:047

Check for the Version of kernel OpenVAS Vulnerability Test $Id: gbsuse2008047.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for kernel SUSE-SA:2008:047 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...

SuSE Update for kernel SUSE-SA:2008:052

Check for the Version of kernel OpenVAS Vulnerability Test $Id: gbsuse2008052.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for kernel SUSE-SA:2008:052 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...

Debian Security Advisory DSA 1653-1 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 1653-1. OpenVAS Vulnerability Test $Id: deb16531.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1653-1 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1653-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-659-1: Linux kernel vulnerabilities

It was discovered that the direct-IO subsystem did not correctly validate certain structures. A local attacker could exploit this to cause a system crash, leading to a denial of service. CVE-2007-6716 It was discovered that the disabling of the ZEROPAGE optimization could lead to large memory...

openSUSE 10 Security Update : kernel (kernel-5700)

The openSUSE 10.3 kernel was update to 2.6.22.19. This includes bugs and security fixes. CVE-2008-4576: Fixed a crash in SCTP INIT-ACK, on mismatch between SCTP AUTH availability. This might be exploited remotely for a denial of service crash attack. CVE-2008-3528: The ext234 filesystem code fail...

Debian DSA-1653-1 : linux-2.6 - denial of service/privilege escalation

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-6716 Joe Jin reported a local denial of service vulnerability that allows...

[SECURITY] [DSA 1653-1] New Linux 2.6.18 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1653-1 [email protected] http://www.debian.org/security/ dann frazier Oct 13, 2008 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

Linux kernel 'fs/direct-io.c'本地拒绝服务漏洞

BUGTRAQ ID:31515 CVE ID：CVE-2007-6716 CNCVE ID：CNCVE-20086716 Linux是一款开放源代码的操作系统。 Linux内核Direct-IO实现存在一个缺陷，本地攻击者可以利用漏洞进行拒绝服务攻击。 dio-mapbh.bbdev没有通过directioworker初始化，在dodirectIO处理中，diogetpage会返回EFAULT，引起之后的代码不能初始化dio-mapbh，并直接返回错误。但是在directioworker中没有处理这个错误。 S.u.S.E. SLE SDK 9 S.u.S.E...

kernel security update

CentOS Errata and Security Advisory CESA-2008:0885 Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

BELL-CVE-2007-6716 CVE-2007-6716 does not affect BellSoft software

Bulletin has no description...

CVE-2007-6716

CVE-2007-6716 affects the Linux kernel before 2.6.23, where in the dio subsystem the file system’s direct-io path (fs/direct-io.c) may fail to zero out the dio struct. This can allow a local user to cause a denial of service (OOPS), as demonstrated by a fio test. The connected documents confirm t...