Oracle Linux 4 : kernel (ELSA-2009-0459)

From Red Hat Security Advisory 2009:0459 : Updated kernel packages that fix several security issues and various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain...

SINIT Authenticated Code Module Privilege Escalation

Summary: Intel® Trusted Execution Technology SINIT modules for 3rd Generation Intel® i5 and i7 vPro and Intel® Xeon® E3-1200 and E3-1200V2 Series Processors are susceptible to a privilege escalation issue. This issue also affects Intel 2nd Generation vPro Core i5 and i7 SNB based product family...

Windows 7 SP1 Local Access SYSTEM Compromise

No description provided by source. Discovered by: Anastasios Monachos secuid0 - anastasiosmatgmaildotcom Vendor: Microsoft Affected Software: Windows 7 SP1 and probably other Title: Owning Windows 7 - From Recovery to "nt authority\system" - Physical Access Required See also:...

Windows 7 SP1 Local Access SYSTEM Compromise

Discovered by: Anastasios Monachos secuid0 - anastasiosmatgmaildotcom Vendor: Microsoft Affected Software: Windows 7 SP1 and probably other Title: Owning Windows 7 - From Recovery to "nt authority\system" - Physical Access Required See also:...

[security bulletin] HPSBHF02865 SSRT101158 rev.1 - HP ElitePad 900, Secure Boot Configuration Inconsistency

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03727435 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03727435 Version: 1 HPSBHF02865...

CVE-2012-5218

HP ElitePad 900 PCs with BIOS F.0x before F.01 Update 1.0.0.8 do not enable the Secure Boot feature, which allows local users to bypass intended BIOS restrictions and boot unintended operating systems via unspecified vectors...

Design/Logic Flaw

HP ElitePad 900 PCs with BIOS F.0x before F.01 Update 1.0.0.8 do not enable the Secure Boot feature, which allows local users to bypass intended BIOS restrictions and boot unintended operating systems via unspecified vectors...

CVE-2012-5218

HP ElitePad 900 PCs with BIOS F.0x before F.01 Update 1.0.0.8 do not enable the Secure Boot feature, which allows local users to bypass intended BIOS restrictions and boot unintended operating systems via unspecified vectors...

CVE-2012-5218

HP ElitePad 900 PCs with BIOS F.0x before F.01 Update 1.0.0.8 do not enable the Secure Boot feature, which allows local users to bypass intended BIOS restrictions and boot unintended operating systems via unspecified vectors...

CVE-2012-5218

The CVE-2012-5218 case involves HP ElitePad 900 laptops/tablets with BIOS F.0x prior to F.01 Update 1.0.0.8. The root cause is that Secure Boot was not enabled, allowing local attackers to bypass BIOS restrictions and boot unauthorized operating systems via unspecified vectors. Documented impact ...

HPSBHF02865 SSRT101158 rev.2 - HP ElitePad 900, Secure Boot Configuration Inconsistency

Potential Security Impact Secure Boot configuration inconsistency VULNERABILITY SUMMARY A potential vulnerability has been identified with certain HP ElitePad tablet PCs. The secure boot feature of the BIOS may not be enabled, allowing alternate operating systems to be booted in contradiction wit...

NIST Offers Guidelines for Securing BIOS

As security defenses have advanced and become more adaptive in the last decade, malware authors and attackers have had to respond, looking for new ways to get their malicious software onto PCs or exploit previously unknown vulnerabilities. One target is the system BIOS, the low-level instruction...

Researcher demonstrate hardware based backdoor called Rakshasa

Security researcher Jonathan Brossard created a proof-of-concept hardware backdoor called Rakshasa that replaces a computer's BIOS Basic Input Output System and can compromise the operating system at boot time without leaving traces on the hard drive. In short, firmware is software that is stored...

Scientific Linux Security Update : kvm on SL5.x x86_64

It was found that some structure padding and reserved fields in certain data structures in QEMU-KVM were not initialized properly before being copied to user-space. A privileged host user with access to '/dev/kvm' could use this flaw to leak kernel stack memory to user-space. CVE-2010-3881 This...

Scientific Linux Security Update : kernel on SL4.x i386/x86_64

This update addresses the following security issues : - a buffer overflow was found in the Linux kernel Partial Reliable Stream Control Transmission Protocol PR-SCTP implementation. This could, potentially, lead to a denial of service if a Forward-TSN chunk is received with a large stream ID...

Scientific Linux Security Update : kernel on SL 5.0-5.4 i386/x86_64

This kernel is already in SL 5.5 This updated contains all the security and bug fixes from the 2.6.18-194.el5 kernel. In additions this update fixes the following security issues : - a flaw was found in the Unidirectional Lightweight Encapsulation ULE implementation. A remote attacker could send ...

Scientific Linux Security Update : kernel on SL4.x i386/x86_64

Security fixes : - a logic error was found in the dosetlk function of the Linux kernel Network File System NFS implementation. If a signal interrupted a lock request, the local POSIX lock was incorrectly created. This could cause a denial of service on the NFS server if a file descriptor was clos...

Под колпаком: обнаружение виртуальных машин / гипервизоров в *NIX

Часто бывает полезно определить, где мы находимся - в гостевой ОС или нет. Способов это узнать больше десятка, однако все они делятся на 2 типа: - поиск различий между поведением эмулятора и реального железа; - чтение данных эмулируемых железок чтение MAC, адреса шины, названия устройства; По...

ATA interface software may not properly handle ATA security features

Overview ATA interface software, including multiple system board BIOS implementations do not adequately manage the ATA hard drive security mode. An attacker may be able to manipulate this situation to completely lock a hard drive resulting in an almost unrecoverable denial-of-service condition...

Microsoft Windows Kernel Privilege Elevation Vulnerabilities (2711167)

This host is missing an important security update according to Microsoft Bulletin MS12-042. OpenVAS Vulnerability Test $Id: secpodms12-042.nasl 5341 2017-02-18 16:59:12Z cfi $ Microsoft Windows Kernel Privilege Elevation Vulnerabilities 2711167 Authors: Antu Sanadi Copyright: Copyright c 2012...