2714 matches found
Fedora 11 : tar-1.22-5.fc11 (2010-4306)
CVE-2010-0624 tar, cpio: Heap-based buffer overflow by expanding a specially crafted archive 572149 - realloc within checkexclusiontags caused invalid write 570591 - not closing file descriptors for excluded files/dirs with exlude-tag... options could cause descriptor exhaustion 570591 - do not...
Fedora 12 : tar-1.22-12.fc12 (2010-4309)
CVE-2010-0624 tar, cpio: Heap-based buffer overflow by expanding a specially crafted archive 572149 - realloc within checkexclusiontags caused invalid write 570591 - not closing file descriptors for excluded files/dirs with exlude-tag... options could cause descriptor exhaustion 570591 - do not...
CVE-2010-1636
The btrfsioctlclone function in fs/btrfs/ioctl.c in the btrfs functionality in the Linux kernel 2.6.29 through 2.6.32, and possibly other versions, does not ensure that a cloned file descriptor has been opened for reading, which allows local users to read sensitive information from a write-only...
Design/Logic Flaw
The btrfsioctlclone function in fs/btrfs/ioctl.c in the btrfs functionality in the Linux kernel 2.6.29 through 2.6.32, and possibly other versions, does not ensure that a cloned file descriptor has been opened for reading, which allows local users to read sensitive information from a write-only...
CVE-2010-1636
The CVE-2010-1636 issue affects the Linux kernel’s btrfs_ioctl_clone path (fs/btrfs/ioctl.c) where cloned file descriptors are not guaranteed to be opened for reading, allowing local users to read from a write-only descriptor. Affected: 2.6.29–2.6.32 (and possibly other versions). Impact: potenti...
CVE-2010-1636
The btrfsioctlclone function in fs/btrfs/ioctl.c in the btrfs functionality in the Linux kernel 2.6.29 through 2.6.32, and possibly other versions, does not ensure that a cloned file descriptor has been opened for reading, which allows local users to read sensitive information from a write-only...
mDNSResponder -- corrupted stack crash when parsing bad resolv.conf
Juli Mallett reports: mdnsd will crash on some systems with a corrupt stack and once that's fixed it will still leak a file descriptor when parsing resolv.conf. The crash is because scanf is used with %10s for a buffer that is only 10 chars long. The buffer size needs increased to 11 chars to hol...
OpenTTD Multiple Security bypass vulnerabilities
This host is installed with OpenTTD and is prone to multiple security bypass vulnerabilities. OpenVAS Vulnerability Test $Id: gbopenttdmultsecbypassvuln.nasl 5368 2017-02-20 14:34:16Z cfi $ OpenTTD Multiple Security bypass vulnerabilities Authors: Sooraj KS Copyright: Copyright c 2010 Greenbone...
OpenTTD Multiple Security bypass vulnerabilities
OpenTTD is prone to multiple security bypass vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-0406
OpenTTD before 1.0.1 allows remote attackers to cause a denial of service file-descriptor exhaustion and daemon crash by performing incomplete downloads of the map...
CVE-2010-0406
OpenTTD before 1.0.1 allows remote attackers to cause a denial of service file-descriptor exhaustion and daemon crash by performing incomplete downloads of the map...
CVE-2010-0406
OpenTTD before 1.0.1 allows remote attackers to cause a denial of service file-descriptor exhaustion and daemon crash by performing incomplete downloads of the map...
Design/Logic Flaw
OpenTTD before 1.0.1 allows remote attackers to cause a denial of service file-descriptor exhaustion and daemon crash by performing incomplete downloads of the map...
CVE-2010-0406
OpenTTD before 1.0.1 allows remote attackers to cause a denial of service file-descriptor exhaustion and daemon crash by performing incomplete downloads of the map...
Design/Logic Flaw
Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS before 1.4.4, when kqueue or epoll is used, allows remote attackers to cause a denial of service daemon crash or hang via a client...
CVE-2010-0302
CVE-2010-0302 affects CUPS before 1.4.4, with the use-after-free vulnerability in cupsdDoSelect within scheduler/select.c when using kqueue or epoll. The issue stems from improper reference-count handling of the abstract file-descriptor interface, allowing a remote attacker to trigger a denial of...
OpenJDK JAX-WS service endpoint remote Denial-of-Service (6630639)
Unspecified vulnerability in the lightweight HTTP server implementation in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12 and earlier allows remote attackers to cause a denial of service probably resource consumption for a JAX-WS service endpoint via a connection without...
linux/x86 if(read(fd buf 512)<=2) _exit(1) else buf()
No description provided by source. / h3ll-core.c by Charles Stevenson [email protected] I made this as a chunk you can paste in to make modular remote exploits. I use it as a first stage payload when I desire to follow up with a real large payload of goodness. This actually is a bit larger than...
Linux Kernel 2.6.28 - fasync_helper() Local Privilege Escalation
Linux Kernel 2.6.28 - fasynchelper Local Privilege Escalation / source: https://www.securityfocus.com/bid/37806/info Linux kernel is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with kernel-level privileges. Successful...
Fedora Core 10 FEDORA-2009-12652 (cups)
The remote host is missing an update to cups announced via advisory FEDORA-2009-12652. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...