4268 matches found
kernel: use flag in do_coredump()
The docoredump function in fs/exec.c in the Linux kernel 2.6.19 sets the flag variable to OEXCL but does not use it, which allows context-dependent attackers to modify arbitrary files via a rewrite attack during a core dump...
CVE-2009-4610
Multiple cross-site scripting XSS vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to jsp/dump.jsp in the JSP Dump feature, or the 2 Name or 3 Value parameter to the default URI for the Session Dump Servlet under...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to jsp/dump.jsp in the JSP Dump feature, or the 2 Name or 3 Value parameter to the default URI for the Session Dump Servlet under...
kernel security and bug fix update
2.6.9-89.0.18.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race...
win xp sp2 PEB ISbeingdebugged shellcode
win xp sp2 PEB ISbeingdebugged shellcode. Shellcode exploit for windows platform name: win xp sp2 PEB ISbeingdebugged shellcode Author: Anonymous Date: 14.12.2009. here is the ASM code made using masm32 if program is being run under debugger the shellcode wil start beeping :D...
Design/Logic Flaw
GForge 4.5.14, 4.7 rc2, and 4.8.2 allows local users to overwrite arbitrary files via a symlink attack on authorizedkeys files in users' home directories, related to deb-specific/sshdumpupdate.pl and cronjobs/cvs-cron/sshcreate.php...
Spammer Gets Over 4-Year Sentence
Alan M. Ralsky, the “Godfather of Spam,” was sentenced to 51 months in prison for long term involvement in pump and dump schemes. Read the full article. Washington Post...
Engeman 6.x.x SQL Injection
Engeman is a Brasilian software for maintenance control. Version tested: 6.x.x and prior. Next versions appears vulnerable too. The attacker can inject sql codes in username textbox: SQL dump affter injection: select nome,senha,diasexp,dataltsen,permitetroca from cfgusr where nome='NULL' OR NOME'...
Linux Kernel < 2.6.14.6 procfs Kernel Memory Disclosure Exploit
Exploit for linux platform in category local exploits =============================================================== Linux Kernel include include include include include include include include include...
kernel: do_coredump() vs ptrace_start() deadlock
The ptracestart function in kernel/ptrace.c in the Linux kernel 2.6.18 does not properly handle simultaneous execution of the docoredump function, which allows local users to cause a denial of service deadlock via vectors involving the ptrace system call and a coredumping thread...
Re: Asante FM2008 10/100 Ethernet switch backdoor login
Asante have released v1.07 of this switch's firmware which removes the "superuser" "asante" CLI credentials. After uploading this firmware into my switch, I examined a TFTP dump and could not identify similar credentials. It does not positively rule in or out that the backdoor is gone, but Asante...
The return of image-based spam
After a two year absence, IBM X-Force is reporting iss.net a significant spike in image-based spam. “Since March 20th, we have been witnessing a rebirth of image-based spam. At first, we saw a small trial of image-based spam, reaching 5-10%. Then, in late April, we saw another blast this time a...
Mandriva Update for kernel MDKSA-2007:078 (kernel)
Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDKSA-2007:078 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
Mandriva Update for kernel MDKSA-2007:078 (kernel)
Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDKSA-2007:078 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
RedHat Update for kernel RHSA-2008:0055-01
Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2008:0055-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
RedHat Update for kernel RHSA-2008:0089-01
Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2008:0089-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
RedHat Update for kernel RHSA-2008:0055-01
Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2008:0055-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
CentOS Update for kernel CESA-2008:0055 centos4 i386
Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2008:0055 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
CentOS Update for kernel CESA-2008:0055 centos4 x86_64
Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2008:0055 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
CentOS Update for kernel CESA-2008:0055 centos4 i386
Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2008:0055 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...