Memory corruption

Samba 3.x before 3.3.15, 3.4.x before 3.4.12, and 3.5.x before 3.5.7 does not perform range checks for file descriptors before use of the FDSET macro, which allows remote attackers to cause a denial of service stack memory corruption, and infinite loop or daemon crash by opening a large number of...

Important: Red Hat Security Advisory: samba3x security update

Updated samba3x packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Samba unsafe fd_set usage

Samba 3.x before 3.3.15, 3.4.x before 3.4.12, and 3.5.x before 3.5.7 does not perform range checks for file descriptors before use of the FDSET macro, which allows remote attackers to cause a denial of service stack memory corruption, and infinite loop or daemon crash by opening a large number of...

CVE-2011-0719

Samba 3.x before 3.3.15, 3.4.x before 3.4.12, and 3.5.x before 3.5.7 does not perform range checks for file descriptors before use of the FDSET macro, which allows remote attackers to cause a denial of service stack memory corruption, and infinite loop or daemon crash by opening a large number of...

CVE-2011-0719

Samba 3.x before 3.3.15, 3.4.x before 3.4.12, and 3.5.x before 3.5.7 does not perform range checks for file descriptors before use of the FDSET macro, which allows remote attackers to cause a denial of service stack memory corruption, and infinite loop or daemon crash by opening a large number of...

Important: Red Hat Security Advisory: samba security update

Updated samba packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

USN-1075-1: Samba vulnerability

Volker Lendecke discovered that Samba incorrectly handled certain file descriptors. A remote attacker could send a specially crafted request to the server and cause Samba to crash or hang, resulting in a denial of service...

RHEL 5 : python (RHSA-2011:0027)

Updated python packages that fix multiple security issues, several bugs, and add two enhancements are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which...

Linux Kernel 2.6.37 - Unix Sockets Local Denial of Service

Linux Kernel 2.6.37 - Unix Sockets Local Denial of Service / Simple kernel attack using socketpair. easy, 100% reproductiblle, works under guest. no way to protect : Simple kernel attack using socketpair. easy, 100% reproductiblle, works under guest. no way to protect : See source attached. Proce...

CVE-2010-2226

The xfsswapext function in fs/xfs/xfsdfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file...

Fedora 13 : tar-1.22-16.fc13 (2010-4274)

CVE-2010-0624 tar, cpio: Heap-based buffer overflow by expanding a specially crafted archive 572149 - realloc within checkexclusiontags caused invalid write 570591 - not closing file descriptors for excluded files/dirs with exlude-tag... options could cause descriptor exhaustion 570591 Note that...

cups security update

CentOS Errata and Security Advisory CESA-2010:0129 Updated cups packages that fix one security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides...

Fedora Core 12 FEDORA-2009-11314 (cups)

The remote host is missing an update to cups announced via advisory FEDORA-2009-11314. OpenVAS Vulnerability Test $Id: fcore200911314.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-11314 cups Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

Fedora Core 12 FEDORA-2009-11314 (cups)

The remote host is missing an update to cups announced via advisory FEDORA-2009-11314. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

cups security update

CentOS Errata and Security Advisory CESA-2009:1595 Updated cups packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 12th January 2010 The packages...

proc File - Descriptors Directory Permissions Bypass

Hi! This is forward from lkml, so no, I did not invent this hole. Unfortunately, I do not think lkml sees this as a security hole, so... Jamie Lokier said: a the current permission model under /proc/PID/fd has a security hole which Jamie is worried about I believe its bugtraq time. Being able to...

proc File Descriptors Directory Permissions bypass

No description provided by source. Hi! This is forward from lkml, so no, I did not invent this hole. Unfortunately, I do not think lkml sees this as a security hole, so... Jamie Lokier said: a the current permission model under /proc/PID/fd has a security hole which Jamie is worried about I belie...

CVE-2009-2194

Apple Mac OS X 10.5 before 10.5.8 does not properly share file descriptors over local sockets, which allows local users to cause a denial of service system crash by placing file descriptors in messages sent to a socket that has no receiver, related to a "synchronization issue."...

Design/Logic Flaw

Apple Mac OS X 10.5 before 10.5.8 does not properly share file descriptors over local sockets, which allows local users to cause a denial of service system crash by placing file descriptors in messages sent to a socket that has no receiver, related to a "synchronization issue."...

CVE-2009-2194

CVE-2009-2194 affects Mac OS X v10.5 prior to 10.5.8. A synchronization issue in how local sockets share file descriptors allows a local user to trigger a denial of service (system crash) by placing file descriptors in messages sent to a socket with no receiver. The issue is addressed in Security...