USN-1281-1 : linux-ti-omap4 vulnerabilities

Andrea Righi discovered a race condition in the KSM memory merging support. If KSM was being used, a local attacker could exploit this to crash the system, leading to a denial of service. CVE-2011-2183 It was discovered that an mmap call with the MAPPRIVATE flag on '/dev/zero' was incorrectly...

OpenTTD DoS

Multiple DoS conditions...

Apache mod_suexec Multiple Privilege Escalation Vulnerabilities

The remote host appears to be running Apache and is potentially affected by the following vulnerabilities: - Multiple race conditions exist in suexec between the validation and usage of directories and files. Under certain conditions local users are able to escalate privileges and execute arbitra...

No Fix for Duqu Bug in November Microsoft Patches?

Microsoft plans on shipping four bulletins, of which only one is rated critical, in the November edition of Patch Tuesday. But it looks doubtful that the company will issue a fix for the vulnerability discovered this week being used by the Duqu installer. The patch is set for release on Tuesday,...

CVE-2011-3585

Multiple race conditions in the 1 mount.cifs and 2 umount.cifs programs in Samba 3.6 allow local users to cause a denial of service mounting outage via a SIGKILL signal during a time window when the /etc/mtab file exists...

Sunway ForceControl multiple security vulnerabilities

Multiple buffer overflows, DoS conditions, directory traversal, ActiveX code execution...

Session Race Conditions and Session Puzzling – Now Simplified

Session Race Conditions and Session Puzzling – Now Simplified A few months ago Shay Chen , Senior Manager at Hacktics Advanced Security Center HASC published a paper about Session Puzzling , a new application level attack vector of critical severity and numerous uses, but for some bizarre reasons...

Session Race Conditions and Session Puzzling – Now Simplified

Session Race Conditions and Session Puzzling – Now Simplified A few months ago Shay Chen, Senior Manager at Hacktics Advanced Security Center HASC published a paper about Session Puzzling, a new application level attack vector of critical severity and numerous uses, but for some bizarre reasons,...

Microsoft Windows WINS server memory corruption

Memory corruption on send exceptional conditions handling...

GlobalSign Set to Resume CA Operations

GlobalSign is still in the process of completing the investigation into whether its certificate authority infrastructure was compromised, but the company on Tuesday was ready to resume some of its operations under “high-threat” conditions. The company said that it has found evidence that its main...

openvas race conditions

Race conditions for symbolic link attack...

Fedora 16 : ecryptfs-utils-90-1.fc16 (2011-10671)

privilege escalation via mountpoint race conditions CVE-2011-1831, CVE-2011-1832 - race condition when checking source during mount CVE-2011-1833 - mtab corruption via improper handling CVE-2011-1834 - key poisoning via insecure temp directory handling CVE-2011-1835 - information disclosure via...

Progea Movicon 'TCPUploadServer.exe' Multiple Vulnerabilities

Progea Movicon is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 11.1 Security Update : ecryptfs-utils (SAT Patch Number 4956)

This update of ecryptfs-utils fixes several security problems : - Race condition when checking mountpoint during mount. CVE-2011-1831 - Race condition when checking mountpoint during unmount. CVE-2011-1832 - Race condition when checking source during mount. CVE-2011-1833 - Improper mtab handling...

Microsoft Internet Explorer Window Open Race Condition Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks may cause denial-of-service conditions. Technologies Affected Avaya Aura...

Accused LulzSec hacker Topiary released on bail

Accused LulzSec hacker Topiary released on bail Jake Davis, an 18-year-old from the Shetland Islands, was released on bail after being charged with five offences relating to computer attacks and break-ins by the LulzSec and Anonymous hacking groups. Davis was granted bail to stay with his mother ...

VLC Media Player '.RM' File BOF Vulnerability (Windows)

The host is installed with VLC Media Player and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodvlcmediaplayerrmbofvulnwin.nasl 8174 2017-12-19 12:23:25Z cfischer $ VLC Media Player '.RM' File BOF Vulnerability Windows Authors: Madhuri D Copyright: Copyright c 201...

logrotate multiple security vulnerabilities

Race conditions, unfiltered shell characters vulnerability, DoS...

Apple Mac OS X multiple security vulnerabilities

DoS conditions, buffer overflows, information leaks, code execution in different subsystems...

KMPlayer '.mp3' File Remote Buffer Overflow Vulnerability

This host is installed with KMPlayer and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbkmplayermp3filebofvuln.nasl 5367 2017-02-20 14:16:52Z cfi $ KMPlayer '.mp3' File Remote Buffer Overflow Vulnerability Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone...