1140 matches found
Fedora 8 : xen-3.1.2-2.fc8 (2008-2057)
Sat Feb 23 2008 Daniel P. Berrange - 3.1.2-2.fc8 - Fix block device extents check rhbz 433560 - Sat Dec 1 2007 Daniel P. Berrange - 3.1.2-1.fc8 - Upgrade to 3.1.2 bugfix release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...
qemu -- unchecked block read/write vulnerability
Ian Jackson reports on the debian-security mailinglist: When a block device read or write request is made by the guest, nothing checks that the request is within the range supported by the backend, but the code in the backend typically assumes that the request is sensible. Depending on the backen...
Debian Security Advisory DSA 924-1 (nbd)
The remote host is missing an update to nbd announced via advisory DSA 924-1. Kurt Fitzner discovered a buffer overflow in nbd, the network block device client and server that could potentially allow arbitrary cod on the NBD server. For the old stable distribution woody this problem has been fixe...
CVE-2007-5159: Undefined Security Weakness
The ntfs-3g package before 1.913-2.fc7 in Fedora 7, and an ntfs-3g package in Ubuntu 7.10/Gutsy, assign incorrect permissions setuid root to mount.ntfs-3g, which allows local users with fuse group membership to read from and write to arbitrary block devices, possibly involving a file descriptor...
Ubuntu 5.10 : nbd vulnerability (USN-237-1)
Kurt Fitzner discovered that the NBD network block device server did not correctly verify the maximum size of request packets. By sending specially crafted large request packets, a remote attacker who is allowed to access the server could exploit this to execute arbitrary code with root privilege...
USN-237-1: nbd vulnerability
Kurt Fitzner discovered that the NBD network block device server did not correctly verify the maximum size of request packets. By sending specially crafted large request packets, a remote attacker who is allowed to access the server could exploit this to execute arbitrary code with root privilege...
Network Block Device Server Detection
The remote host is running a Network Block Device NBD server, which allows one Linux host to use another as one of its block devices. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid20340; scriptversion"1.12";...
DEBIAN-CVE-2005-3534
Buffer overflow in the Network Block Device nbd server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header...
CVE-2005-3534
Buffer overflow in the Network Block Device nbd server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header...
CVE-2005-3534
Buffer overflow in the Network Block Device nbd server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header...
CVE-2005-3534
Buffer overflow in the Network Block Device nbd server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header...
CVE-2005-3534
Buffer overflow in the Network Block Device nbd server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header...
Network Block Device Server Detection
Binary data 3334.prm...
CVE-2005-3534: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in the Network Block Device nbd server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header...
lk26.txt
Synopsis: Linux kernel pktcdvd and rawdevice ioctl break user space limit vulnerability Product: Linux kernel Version: 2.6 up to and including 2.6.12-rc4 Vendor: http://www.kernel.org/ URL: CVE: CAN-2005-1589 Severity: local7 Date: May 16, 2005 Issue: ====== Two locally exploitable flaws have bee...
CVE-2005-1589
The pktioctl function in the pktcdvd block device ioctl handler pktcdvd.c in Linux kernel 2.6.12-rc4 and earlier calls the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space and allows local users...
CVE-2005-1589
The pktioctl function in the pktcdvd block device ioctl handler pktcdvd.c in Linux kernel 2.6.12-rc4 and earlier calls the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space and allows local users...
CVE-2005-1589: Undefined Security Weakness
The pktioctl function in the pktcdvd block device ioctl handler pktcdvd.c in Linux kernel 2.6.12-rc4 and earlier calls the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space and allows local users...
(RHSA-2003:147) kernel security update
The Linux kernel handles the basic functions of the operating system. Two potential data corruption scenarios have been identified. These scenarios can occur under heavy, complex I/O loads. The first scenario only occurs while performing memory mapped file I/O, where the file is simultaneously...