openSUSE 10 Security Update : kernel (kernel-5920)

The openSUSE 10.3 kernel was updated to fix various security problems and bugs. Following security bugs were fixed : CVE-2008-5702: Buffer underflow in the ibwdtioctl function in drivers/watchdog/ib700wdt.c might allow local users to have an unknown impact via a certain /dev/watchdog...

Linux kernel DoS

Race conditions during socket message input/ouput processing on Unix sockets...

Linux kernel multiple security vulnerabilities

Double listen on the same socket causes creation of unassigned vcc table entry, which causes infinite loop in kernel on attempt to cat vc table. inotify subsystem race conditions allow privilege escalation, socket-related memory exhaustion. chipcommand NULL pointer dereference. HFS file sytem...

USN-700-1: Perl vulnerabilities

Jonathan Smith discovered that the Archive::Tar Perl module did not correctly handle symlinks when extracting archives. If a user or automated system were tricked into opening a specially crafted tar file, a remote attacker could over-write arbitrary files. CVE-2007-4829 Tavis Ormandy and Will...

Debian DSA-1681-1 : linux-2.6.24 - denial of service/privilege escalation

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-3528 Eugene Teo reported a local DoS issue in the ext2 and ext3 filesystem...

Perl symbolic links race conditions

File::Path::rmtree unsecurely changes file permissions, creating race condiotns for symbolic links manipulation...

CVE-2008-5182

The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to race conditions in inotify watch removal and umount...

CVE-2008-5182

The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to race conditions in inotify watch removal and umount...

CVE-2008-5182

The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to race conditions in inotify watch removal and umount...

CVE-2008-5182

The connected Nessus advisory for MiracleLinux 3 (AXSA:2009-22:03) references CVE-2008-5182 in the inotify subsystem of the Linux kernel. Affected product: MiracleLinux 3 running kernel 2.6.18-53.21AXS3. Vulnerability type/root cause: a race condition related to inotify watch removal and unmount,...

VeryPDF PDFView - ActiveX Component Heap Buffer Overflow

VeryPDF PDFView - ActiveX Component Heap Buffer Overflow source: https://www.securityfocus.com/bid/32313/info The VeryPDF PDFView ActiveX control is prone to a heap buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently...

Microsoft Windows UnhookWindowsHookEx() DoS

Race conditions on UnhookWindowsHookEx call during active desktop switichin cause system to hang or crash...

Debian DSA-1660-1 : clamav - NULL pointer dereference, resource exhaustion

Several denial-of-service vulnerabilities have been discovered in the ClamAV anti-virus toolkit : Insufficient checking for out-of-memory conditions results in NULL pointer dereferences CVE-2008-3912 . Incorrect error handling logic leads to memory leaks CVE-2008-3913 and file descriptor leaks...

Linux kernel multiple security vulnerabilities

Многочисленные DoS-условия, повышение привилегий группы через файловую систему и через системные вызовы...

Hummingbird HostExplorer 6.28.0 - ActiveX Control PlainTextPassword() Remote Buffer Overflow

Hummingbird HostExplorer 6.28.0 - ActiveX Control PlainTextPassword Remote Buffer Overflow source: https://www.securityfocus.com/bid/31783/info Hummingbird HostExplorer ActiveX control is prone to a buffer-overflow vulnerability because the application fails to adequately check boundaries on...

Apache Tomcat information leak

Race conditions allow to bypass IP address check...

lighthttpd multiple security vulnerabilities

DoS conditions, information leakage...

Multiple OpenSSH security vulnerabilities

Multiple different DoS conditions...

Mass Downloader - Malformed Executable Denial of Service

Mass Downloader - Malformed Executable Denial of Service // source: https://www.securityfocus.com/bid/31406/info Mass Downloader is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to crash the application and trigger denial-of-service conditions,...

DESlock+ <= 3.2.7 Local Kernel Race Condition Denial of Service PoC

No description provided by source. / deslock-probe-race.c Copyright c 2008 by [email protected] DESlock+ = 3.2.7 local kernel race condition DoS POC by mu-b - Fri 22 Feb 2008 - Tested on: DLMFENC.sys 1.0.0.28 race conditions between calls to ProbeForRead/ProbeForWrite and pointer use. "Note tha...