Testtrack For Linux Race Condition

Software: Testtrack for Linux Vulnerability : Symlink Problem type : local Debian-specific: dono CVE IDs : CVE-2012-1201 Date : Mar 20, 2012 Affected : min Feb 20, 2012 Problem Description: Racecondition in Testtrack for Linux References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-120...

[SECURITY] Fedora 16 Update: systemd-37-15.fc16

systemd is a system and service manager for Linux, compatible with SysV and LSB init scripts. systemd provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux cgroups,...

Выполнение подзапросов и команд ОС в инъекциях SELECT под MySQL

We would like to open our blog notes on the practical implementation of the SQL-injections. And also we try to focus more attention on the practical aspects of web application security in the future. SQL injections are the most common server-side Web application vulnerabilities and meet almost...

Debian ‘x11-common’ Init script insecure temporary file creation vulnerability-vulnerability warning-the black bar safety net

Vulnerability causes Design errors The level of danger Low The impact of the system Debian x11-common 1:7.5+8 Not affected system Hazards A local attacker could exploit the vulnerability could elevate privileges or destruction of the system. Attack required conditions The attacker must have acces...

Debian 'x11-common' Init脚本不安全临时文件创建漏洞

Debian是一款基于linux内核的操作系统 init脚本"x11-common"不安全方式创建"/tmp/.X11-unix"和"/tmp/.ICE-unix"，攻击者可以通过符号链接进行攻击，可能获得root特权 0 Debian x11-common 1:7.5+8 厂商解决方案 Debian ----- 目前没有详细解决方案提供： http://packages.debian.org/sid/x11-common...

Low: Red Hat Security Advisory: nfs-utils security, bug fix, and enhancement update

An updated nfs-utils package that fixes one security issue, various bugs, and adds one enhancement is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which...

Code injection

net/sctp/smmakechunk.c in the Linux kernel before 2.6.34, when addipenable and authenable are used, does not consider the amount of zero padding during calculation of chunk lengths for 1 INIT and 2 INIT ACK chunks, which allows remote attackers to cause a denial of service OOPS via crafted packet...

PHP Hashtables Denial of Service

Exploit for php platform in category dos / poc 0day.today 2018-02-06...

Low: Red Hat Security Advisory: cups security and bug fix update

Updated cups packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

Trojan Makes Child-Porn Accusation, Locks Computer, Requests $17

A new ransomware scam locks down its victims’ computers, attempting to convince them that child pornography has been found therein, and informs users that their machine will be unlocked only after paying a $17 500 ruble fine, according to a BitDefender analysis reported by MalwareCity. The trojan...

Low: Red Hat Security Advisory: rgmanager security, bug fix, and enhancement update

An updated rgmanager package that fixes one security issue, several bugs, and adds multiple enhancements is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score,...

kernel: sctp: fix to calc the INIT/INIT-ACK chunk length correctly to set

net/sctp/smmakechunk.c in the Linux kernel before 2.6.34, when addipenable and authenable are used, does not consider the amount of zero padding during calculation of chunk lengths for 1 INIT and 2 INIT ACK chunks, which allows remote attackers to cause a denial of service OOPS via crafted packet...

Moderate: Red Hat Security Advisory: tomcat6 security and bug fix update

Updated tomcat6 packages that fix three security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...

kernel: sctp: fix to calc the INIT/INIT-ACK chunk length correctly to set

net/sctp/smmakechunk.c in the Linux kernel before 2.6.34, when addipenable and authenable are used, does not consider the amount of zero padding during calculation of chunk lengths for 1 INIT and 2 INIT ACK chunks, which allows remote attackers to cause a denial of service OOPS via crafted packet...

PT-2012-1529 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.34 Description: The issue is related to the calculation of chunk lengths for INIT and INIT ACK chunks in the Linux kernel. When addip enable and auth enable are used, the amount of zero padding is not...

Linux Kernel SCTP INIT/INIT-ACK块长度远程拒绝服务漏洞

Bugtraq ID: 47308 Linux是一款开放源代码的操作系统。 在计算INIT/INIT-ACK块长度时，代码只计算了参数长度，而没有计算参数的零填充长度，如AUTH HMACS参数和CHUNKS参数。没有计算零填充长度参数可导致内核触发oops。 Linux kernel 2.6.38 Linux kernel 2.6.37 Linux kernel 2.6.37 Linux kernel 2.6.36 Linux kernel 2.6.35 Linux kernel 2.6.35 Linux kernel 2.6.35 Linux kernel 2.6.34 Linux...

CVE-2011-1660

Multiple cross-site scripting XSS vulnerabilities in the DataDynamics.Reports.Web class library in GrapeCity Data Dynamics Reports before 1.6.2084.14 allow remote attackers to inject arbitrary web script or HTML via 1 the reportName or 2 uniqueId parameter to CoreViewerInit.js, or the 3 uniqueId ...

DEBIAN-CVE-2011-0284

Double free vulnerability in the prepareerroras function in doasreq.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.7 through 1.9, when the PKINIT feature is enabled, allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via an edat...

mysql security update

5.1.52-1.1 - Update to MySQL 5.1.52, for various fixes described at http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html including numerous small security issues Resolves: 652553 - Sync with current Fedora package; this includes: - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded...

Low: Red Hat Enhancement Advisory: subversion enhancement update

Updated subversion packages that upgrade Subversion to upstream version 1.6.11 and provide two enhancements are now available for Red Hat Enterprise Linux 5. Subversion SVN is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a...