Debian: Security Advisory (DSA-1614-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Afuse afuse.c文件Shell命令注入漏洞

BUGTRAQ ID: 30245 CVECAN ID: CVE-2008-2232 Afuse是使用FUSE在用户域实现的自动加载文件系统。 Afuse没有正确地过滤文件名便将其用在了system调用中。如果能够读访问afuse文件系统的攻击者使用了类似于以下的路径的话： /path/";arbitrary command;" /path/arbitrary command 则从注册为Afuse加载的目录请求上述特制文件就会导致以提升的权限执行任意命令。 Jacob Bower Afuse 0.2 Debian ------...

Linux Kernel PPC64/IA64 (AIO) Local Denial of Service Exploit

No description provided by source. // // Proof of Concept by Daniel McNeil // compile using cc -o aiodioread aiodioread.c -laio // define XOPENSOURCE 600 define GNUSOURCE include unistd.h include stdlib.h include stdio.h include string.h include errno.h include sys/fcntl.h include sys/mman.h...

[SECURITY] [DSA 1598-1] New libtk-img packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1598-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 19, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1587-1] New mtr packages fix execution of arbitrary code

------------------------------------------------------------------------ Debian Security Advisory DSA-1587-1 [email protected] http://www.debian.org/security/ Steve Kemp May 26, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

kernel security and bug fix update

2.6.18-53.1.19.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki ORA 6045759 - NET Fix msi issue with kexec/kdump Michael Chan ORA 6219364 - MM Fix allocpagesnode static nid' race made kernel crash Joe Jin ORA 6187457 - splice Fix bad unlockpage in error case Jens Axboe ORA 6263574...

[xen-ia64] Dom0 panic while we run ftp test tool between HVM and Dom0.

The ssmi emulation in Xen 5.1 on IA64 architectures allows attackers to cause a denial of service dom0 panic via certain traffic, as demonstrated using an FTP stress test tool...

MPlayer sdpplin_parse()函数RTSP整数溢出漏洞

BUGTRAQ ID: 28851 CVECAN ID: CVE-2008-1558 MPlayer是一款基于Linux的媒体播放程序，支持多种媒体格式。 MPlayer的stream/realrtsp/sdpplin.c文件中的sdpplinparse函数存在整数溢出漏洞： sdpplinparsestream desc-streamid=atoibuf; spplinparse desc-streamstream-streamid=stream; 如果用户所打开的媒体文件中包含有超长的StreamCount SDP参数的话，就可以触发这个溢出，导致执行任意指令。 MPlayer 1....

CVE-2008-1619

The ssmi emulation in Xen 5.1 on IA64 architectures allows attackers to cause a denial of service dom0 panic via certain traffic, as demonstrated using an FTP stress test tool...

Code injection

The ssmi emulation in Xen 5.1 on IA64 architectures allows attackers to cause a denial of service dom0 panic via certain traffic, as demonstrated using an FTP stress test tool...

CVE-2008-1619

The CVE-2008-1619 issue affects Xen ssm_i emulation on IA64 in Xen 5.1, where crafted traffic can trigger a denial of service (dom0 panic). Connected advisories/Fixes referenced indicate the vulnerability lies in the Xen/IA64 barrier handling during FTP stress-test-like traffic, potentially leadi...

CVE-2008-1619

The ssmi emulation in Xen 5.1 on IA64 architectures allows attackers to cause a denial of service dom0 panic via certain traffic, as demonstrated using an FTP stress test tool...

[SECURITY] [DSA 1470-1] New horde3 packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1470-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 20, 2008 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 481-1 (kernel-image-2.4.17-ia64)

The remote host is missing an update to kernel-image-2.4.17-ia64 announced via advisory DSA 481-1. OpenVAS Vulnerability Test $Id: deb4811.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 481-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 423-1 (kernel-image-2.4.17-ia64)

The remote host is missing an update to kernel-image-2.4.17-ia64 announced via advisory DSA 423-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Debian: Security Advisory (DSA-481)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 444-1 (kernel-image-2.4.17-ia64)

The remote host is missing an update to kernel-image-2.4.17-ia64 announced via advisory DSA 444-1. OpenVAS Vulnerability Test $Id: deb4441.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 444-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

[SECURITY] [DSA 1448-1] New eggdrop packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1448-1 [email protected] http://www.debian.org/security/ Steve Kemp January 05, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1443-1] New tcpreen packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1443-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 03, 2008 http://www.debian.org/security/faq -...

Xen copy_to_user()函数本地绕过安全限制漏洞

BUGTRAQ ID: 26954 CVECAN ID: CVE-2007-6416 Xen是可用于Linux内核的一种虚拟化技术，允许同时运行多个操作系统。 Xen的实现上存在漏洞，本地攻击者可能利用此漏洞控制提升权限。 当运行在ia64系统上的时候，Xen的PAL模拟功能中的copytouser函数允许HVM guest用户通过触发某些映射操作访问任意物理内存。 XenSource Xen 3.1.2 XenSource --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://xen.xensource.com...