Updated kernel-4.4.32 packages fixes security vulnerabilities

This update is based on upstream 4.4.32 and fixes at least the following security issues: The prockeysshow function in security/keys/proc.c in the Linux kernel through 4.8.2, when the GNU Compiler Collection gcc stack protector is enabled, uses an incorrect buffer size for certain timeout data,...

CVE-2016-8633

A buffer overflow vulnerability due to a lack of input filtering of incoming fragmented datagrams was found in the IP-over-1394 driver firewire-net in a fragment handling code in the Linux kernel. The vulnerability exists since firewire supported IPv4, i.e. since version 2.6.31 year 2009 till...

The vulnerability of the Mac OS X operating system, which allows a hacker to trigger a service failure

The vulnerability of the IOFireWireFamily component in the Mac OS X operating system is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to trigger a service failure pointer assignment to zero...

Oracle: Security Advisory (ELSA-2010-0046)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Mac OS X operating system, which allows a perpetrator to increase their privileges or cause service failures

The vulnerability of the IOFireWireFamily component in the Mac OS X operating system is caused by a buffer overflow. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service interruptions...

The vulnerability of the Mac OS X operating system, which allows a perpetrator to increase their privileges or cause service failures

The vulnerability of the IOFireWireFamily component in the Mac OS X operating system is caused by a buffer overflow. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service interruptions...

The vulnerability of the Mac OS X operating system, which allows a perpetrator to increase their privileges or cause service failures

The vulnerability of the IOFireWireFamily component in the Mac OS X operating system is caused by a buffer overflow. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service interruptions...

Apple OS X IOFireWireFamily memory corruption vulnerability (CNVD-2015-05547)

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability exists in Apple OS X IOFireWireFamily, which could be exploited by a local user to execute arbitrary code with system privileges...

CVE-2015-3707

The FireWire driver in IOFireWireFamily in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service NULL pointer dereference via a crafted app...

CVE-2015-3707

The CVE concerns the FireWire driver IOFireWireFamily in Apple OS X, with affected range OS X Yosemite up to 10.10.3. Description: IOFireWireFamily contains multiple null pointer dereference issues that can allow a crafted app to execute arbitrary code in a privileged context or cause a denial of...

PT-2015-6305

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.4 Description The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service via a crafted app, specifically due to a problem in the FireWire driver in...

CVE-2015-3707: Undefined Security Weakness

The FireWire driver in IOFireWireFamily in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service NULL pointer dereference via a crafted app...

Apple MAC OS X FireWire Driver Null Pointer Reference Vulnerability

Apple Mac OS X is a commercial operating system. Apple Mac OS X handles a null pointer reference vulnerability in the FireWire driver, which allows attackers to exploit the vulnerability to run malicious applications and execute arbitrary code...

Xataface Admin Auth Bypass Vulnerability

No description provided by source. ======================================================= Xataface Admin Auth Bypass Vulnerability ======================================================= + Discovered by : Xinapse + Site : firewire-security.com + Email : [email protected]...

[Pac4Mac] Forensics Framework for Mac OS X

Pac4Mac Plug And Check for Mac OS X is a portable Forensics framework to launch from USB storage allowing extraction and analysis session informations in highlighting the real risks in term of information leak history, passwords, technical secrets, business secrets, .... Pac4Mac can be used to...

[Lynis v1.3.8] The Unix/Linux Hardening tool

Lynis is a security tool to audit and harden Unix and Linux based systems. It scans the system by performing many security control checks, looks for installed software and determines compliance to standards. Also will it detects security issues and errors in configuration. At the end of the scan ...

Oracle Linux 5 : kernel (ELSA-2010-0046)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0046 advisory. - firewire ohci: handle receive packets with zero data Jay Fenlason 547241 547242 CVE-2009-4138 - fs respect flag in docoredump Danny Feng 544188 54418...

Apple Mac OS X FileVault纯文本密码本地安全限制绕过漏洞

BUGTRAQ ID: 53402 Mac OS是一套运行于苹果的Macintosh系列电脑上的操作系统。 在使用"Legacy FileVault"时，FileVault中启用了调试开关，可导致将用户密码保存在纯文本的DEBUGLOG中，通过FireWire目标磁盘模式即可读取密码。成功利用需要OS X从较旧的版本升级并使用"Legacy FileVault"功能。 0 Apple MacOS X 10.7.3 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.apple.com/...

CVE-2011-3215

The kernel in Apple Mac OS X before 10.7.2 does not properly prevent FireWire DMA in the absence of a login, which allows physically proximate attackers to bypass intended access restrictions and discover a password by making a DMA request in the 1 loginwindow, 2 boot, or 3 shutdown state...

Default credentials

The kernel in Apple Mac OS X before 10.7.2 does not properly prevent FireWire DMA in the absence of a login, which allows physically proximate attackers to bypass intended access restrictions and discover a password by making a DMA request in the 1 loginwindow, 2 boot, or 3 shutdown state...