Fedora Update for hardlink FEDORA-2011-14753

Check for the Version of hardlink OpenVAS Vulnerability Test Fedora Update for hardlink FEDORA-2011-14753 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for hardlink FEDORA-2011-14753

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] Fedora 15 Update: hardlink-1.0-12.fc15

hardlink is used to create a tree of hard links. It's used by kernel installation to dramatically reduce the amount of diskspace used by each kernel package installed...

Linux Kernel hardlink工具符号链接攻击本地权限提升漏洞

BUGTRAQ ID: 50809 CVE ID: CVE-2011-3632 Linux是自由电脑操作系统内核。 Linux Kernel的hardlink工具在通过完整文件系统对象路径名称合并重复文件时存在本地权限提升漏洞，本地攻击者可利用此漏洞通过符号链接使用目标目录树之外的目录/文件上的hardlink，从而提升权限。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

Linux Kernel hardlink工具多个远程栈缓冲区溢出漏洞

BUGTRAQ ID: 50805 CVE ID: CVE-2011-3630 Linux是自由电脑操作系统内核。 Linux Kernel的hardlink工具在深度嵌套目录的树中运行时存在多个栈缓冲区溢出漏洞，远程攻击者可利用这些漏洞通过诱使用户处理恶意构造的目录树时在受影响应用中执行任意代码，造成拒绝服务。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

[SECURITY] Fedora 16 Update: hardlink-1.0-12.fc16

hardlink is used to create a tree of hard links. It's used by kernel installation to dramatically reduce the amount of diskspace used by each kernel package installed...

Mandriva Update for vixie-cron MDKSA-2007:234 (vixie-cron)

Check for the Version of vixie-cron OpenVAS Vulnerability Test Mandriva Update for vixie-cron MDKSA-2007:234 vixie-cron Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

CVE-2009-0876

Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attack, which preserves setuid/setgid bits on Linux, related to DTRPATH:$ORIGIN...

Design/Logic Flaw

Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attack, which preserves setuid/setgid bits on Linux, related to DTRPATH:$ORIGIN...

CVE-2009-0876

Sun xVM VirtualBox for Linux (versions 2.0.0 – 2.1.4r42893) is affected by a local privilege-escalation flaw via a hardlink attack that preserves setuid/setgid bits, related to DT_RPATH:$ORIGIN. The issue, described across multiple sources, centers on filesystem manipulation allowing a non-privil...

CVE-2009-0876

Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attack, which preserves setuid/setgid bits on Linux, related to DTRPATH:$ORIGIN...

CVE-2009-0876: Improper Link Resolution Before File Access

Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attack, which preserves setuid/setgid bits on Linux, related to DTRPATH:$ORIGIN...

NTFS's HARDLINK attack-vulnerability warning-the black bar safety net

Author: MJ0011 Explosion of the old technology. explosion old art NTFS supports a HARDLINK technique, the two files“hard-wired”together, in fact, very simple principle, the two files share the same fie record, the operation of a file quite with the operation of another file, including the relevan...

Postfix <= 2.6-20080814 (symlink) Local Privilege Escalation Exploit

No description provided by source. !/bin/sh "rspocfix.sh" PoC for Postfix local root vulnerability: CVE-2008-2936 by Roman Medina-Heigl Hernandez a.k.a. RoMaNSoFt [email protected] Tested: Ubuntu / Debian Madrid, 30.Aug.2008 Config writabledir=/tmp spooldir=/var/mail Use "postconf...

Postfix 2.6-20080814 - symlink Local Privilege Escalation

Postfix 2.6-20080814 - symlink Local Privilege Escalation !/bin/sh "rspocfix.sh" PoC for Postfix local root vulnerability: CVE-2008-2936 by Roman Medina-Heigl Hernandez a.k.a. RoMaNSoFt Tested: Ubuntu / Debian Madrid, 30.Aug.2008 Config writabledir=/tmp spooldir=/var/mail Use "postconf...

rs_pocfix.txt

!/bin/sh "rspocfix.sh" PoC for Postfix local root vulnerability: CVE-2008-2936 by Roman Medina-Heigl Hernandez a.k.a. RoMaNSoFt Tested: Ubuntu / Debian Madrid, 30.Aug.2008 Config writabledir=/tmp spooldir=/var/mail Use "postconf mailspooldirectory" to obtain this user=root target=/etc/passwd...

GLSA-200808-12 : Postfix: Local privilege escalation vulnerability

The remote host is affected by the vulnerability described in GLSA-200808-12 Postfix: Local privilege escalation vulnerability Sebastian Krahmer of SuSE has found that Postfix allows to deliver mail to root-owned symlinks in an insecure manner under certain conditions. Normally, Postfix does not...

Mandrake Linux Security Advisory : vixie-cron (MDKSA-2007:234)

Raphael Marichez discovered a denial of service bug in how vixie-cron verifies crontab file integrity. A local user with the ability to create a hardlink to /etc/crontab could prevent vixie-cron from executing certain system cron jobs. The updated packages have been patched to correct this issue...

vixie security update

CentOS Errata and Security Advisory CESA-2007:0345 Updated vixie-cron packages that fix a denial of service issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The vixie-cron package contains the Vixie version of cron. Cron...

CVE-2005-3321

Affected software: SuSE Linux 9.0–10.0. Vulnerable component: chkstat. Local users can cause weaker file permissions by creating a hardlink to a file from a world-writable directory, which reduces the link count to 1 when the original file is deleted or replaced, after which chkstat updates permi...