Diskeeper 9 - Remote Memory Disclosure

/ Diskeeper Remote Memory Disclosure Credit: Pravus pravus -a-t- hush -d-o-t- com Greetz: Scientology for making a remotely accessible disk defragmenter. Felix, Jenna, and Isaac. Vulnerability Description: This vulnerability involves a memory comparison function that is remotely, anonymously...

Cisco routers IOS IPv6 information leakage

IPv6 header contains 16 bytes of non-initialized memory from router's address space...

Moderate: Red Hat Security Advisory: libgtop2 security update

An updated libgtop2 package that fixes a security issue and a functionality bug is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libgtop2 package contains a library for obtaining information...

Symantec products fail to properly limit device driver access to kernel memory

Overview Certain device drivers included with Symantec products fail to properly verify address space within the "IOCTL" handlers. Description Symantec provides Anti-Virus and Internet Security products that are designed to protect users. According to Symantec Security Response SYM06-020:A...

CVE-2006-4392

The Mach kernel, as used in operating systems including 1 Mac OS X 10.4 through 10.4.7 and 2 OpenStep before 4.2, allows local users to gain privileges via a parent process that forces an exception in a setuid child and uses Mach exception ports to modify the child's thread context and task addre...

CVE-2006-3634

The 1 futexatomicop and 2 futexatomiccmpxchginatomic functions in Linux kernel 2.6.17-rc4 to 2.6.18-rc2 perform the atomic futex operation in the kernel address space instead of the user address space, which allows local users to cause a denial of service crash...

CVE-2006-3634

The CVE-2006-3634 entry describes a vulnerability in Linux kernel 2.6.17-rc4 through 2.6.18-rc2 where two futex helper functions, __futex_atomic_op and futex_atomic_cmpxchg_inatomic, perform the atomic futex operation in kernel address space instead of user space. This misplacement can allow a lo...

CVE-2002-2016

User-mode Linux UML 2.4.17-8 does not restrict access to kernel address space, which allows local users to execute arbitrary code...

CVE-2002-2016

CVE-2002-2016 affects User-mode Linux (UML) 2.4.17-8, where the kernel address space is not restricted, enabling local users to execute arbitrary code. The connected documents confirm a local privilege escalation potential but do not provide any vendor-specific remediation or patch version. Explo...

CVE-2005-1264

Raw character devices raw.c in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589...

PaX 2.6 Kernel Patch - Denial of Service

PaX 2.6 Kernel Patch - Denial of Service / source: https://www.securityfocus.com/bid/10264/info PaX for 2.6 series Linux kernels has been reported prone to a local denial of service vulnerability. The issue is reported to present itself when PaX Address Space Layout Randomization Layout ASLR is...

CVE-2004-1983

The archgetunmappedarea function in mmap.c in the PaX patches for Linux kernel 2.6, when Address Space Layout Randomization ASLR is enabled, allows local users to cause a denial of service infinite loop via unknown attack vectors...

Important: Red Hat Bug Fix Advisory: Updated kernel resolves 32-bit address space issue on AMD64

Updated kernel packages are now available that allow 32-bit compatibility-mode applications to utilize a larger address space on the AMD64 architecture. Updated 01 Dec 2003 Note: This errata also fixed a bug in the dobrk function, which has now been found to have security consequences: allowing a...

PT-2003-1958 · Sco · Open Unix +1

Name of the Vulnerable Software and Affected Versions: SCO UnixWare versions 7.1.1, 7.1.3 Open UNIX version 8.0.0 Description: The issue allows local users to bypass protections for the address space file for a process ID by obtaining a procfs file descriptor for the file and calling execve on a...

DEBIAN-CVE-2002-2016

User-mode Linux UML 2.4.17-8 does not restrict access to kernel address space, which allows local users to execute arbitrary code...

CVE-2002-2016

User-mode Linux UML 2.4.17-8 does not restrict access to kernel address space, which allows local users to execute arbitrary code...

PT-2008-6954 · Opensuse +3 · Opensuse +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.31-rc3 SUSE Linux Enterprise kernel-default-base affected versions not specified SUSE Linux Enterprise kernel-pae affected versions not specified openSUSE kernel-pseries64 affected versions not specified...