RHEL 5 : kernel (RHSA-2008:0089)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0089 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. These new kernel packages fix the following security...

kernel security update

CentOS Errata and Security Advisory CESA-2008:0089 Updated kernel packages that fix several security issues and several bugs in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel...

Important: kernel security and bug fix update

2.6.18-53.1.6.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki ORA 6045759 - NET Fix msi issue with kexec/kdump Michael Chan ORA 6219364 - MM Fix allocpagesnode static nid' race made kernel crash Joe Jin ORA 6187457 - splice Fix bad unlockpage in error case Jens Axboe ORA 6263574 ...

Issue with core dump owner

The docoredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive informatio...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix several security issues and several bugs in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any...

Hot or Not Clone by Jnshosts.com Database Backup Dump Vulnerability

No description provided by source. Name : Hot or Not Clone by Jnshosts.com Dump backup And See Password Admin Download From : http://www.jnshosts.com/downloads/hot-or-not-clone-script/index.php Found By : RoMaNcYxHaCkEr Home Page : Not Yet : Google Dork : Copyright @ 2007 Powered By Hot or Not...

SkyFex Client 1.0 ActiveX Start() Method Remote Stack Overflow

Exploit for unknown platform in category dos / poc ============================================================== SkyFex Client 1.0 ActiveX Start Method Remote Stack Overflow ==============================================================...

+ Trivantis CourseMill Enterprise Learning Management System - SQL Injection - CVE-2007-6338

+==================================================================================================+ + Trivantis CourseMill Enterprise Learning Management System - SQL Injection - CVE-2007-6338 + +==================================================================================================+...

SuSE 10 Security Update : Linux kernel (i386) (ZYPP Patch Number 2097)

This kernel update fixes the following security problems : - A double userspace copy in a SCTP ioctl allows local attackers to overflow a buffer in the kernel, potentially allowing code execution and privilege escalation. 199441. CVE-2006-3745 - Local attackers were able to crash PowerPC systems...

trivantis-sql.txt

+==================================================================================================+ + Trivantis CourseMill Enterprise Learning Management System - SQL Injection - CVE-2007-6338 + +==================================================================================================+...

Linux Kernel DO_COREDUMP函数本地信息泄露漏洞

BUGTRAQ ID: 26701 CVECAN ID: CVE-2007-6206 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel实现core dump时存在漏洞，本地攻击者可能利用此漏洞获取敏感信息。 Linux Kernel的fs/exec.c文件中的docoredump函数在将core转储到已有文件时没有正确地验证core dump文件的用户ID，如果本地攻击者能够诱骗其他用户ID的应用程序将core转储到已有文件的话，就可能访问敏感信息。 Linux kernel 2.6.24-rc4...

Cross site scripting

Cross-site scripting XSS vulnerability in Dump Servlet in Mortbay Jetty before 6.1.6rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters and cookies...

Mort Bay Jetty Dump Servlet (webapps/test/jsp/dump.jsp) XSS

The remote instance of Mort Bay Jetty includes a test servlet, 'webapps/test/jsp/dump.jsp', that fails to sanitize user-supplied input before using it to generate dynamic content. An unauthenticated, remote attacker may be able to leverage this issue to inject arbitrary HTML or script code into a...

CVE-2007-6206

The docoredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive informatio...

CVE-2007-6206

CVE-2007-6206 affects the Linux kernel (2.4.x and 2.6.x up to 2.6.24-rc3). The issue lies in the do_coredump function in fs/exec.c, where the core dump file’s UID is not changed if a core dump already exists in the same location when a root-owned process dumps a core. This behavior could allow a ...

Viewpoint Media Player for IE 3.2 Remote Stack Overflow PoC

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------- bViewpoint Media Player for IE 3.2 AxMetaStream.dll Remote Stack Overflow/b...

GIMP multiple image loader integer overflows

Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in 1 DICOM, 2 PNM, 3 PSD, 4 PSP, 5 Sun RAS, 6 XBM, and 7 XWD files...

joblister-sql.txt

JobLister3 by SkilMatch Staffing Systems, Inc. Multiple SQL injection vulnerabilities http://www.dubdubdub.com/ http://www.skilmatch.com/ The search form filed doesnt strip special characters that have special meanings. A single quote makes the application spit out a number of errors. This is not...

CentOS 4 : kernel (CESA-2007:0488)

Updated kernel packages that fix several security issues and bugs in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the...

core-dumping unreadable binaries via PT_INTERP

Linux kernel 2.6.x before 2.6.20 allows local users to read unreadable binaries by using the interpreter PTINTERP functionality and triggering a core dump, a variant of CVE-2004-1073...