IBM AIX和Virtual I/O Server 'dupmsg'系统呼叫本地拒绝服务漏洞

BUGTRAQ ID: 54706 CVE ID: CVE-2012-0723 AIX是一个基于开放标准的UNIX操作系统，为用户提供企业信息技术基础架构。Virtual I/O Server 提供了命令行的管理方式，通过命令行可以管理VIOS。 IBM AIX和Virtual I/O Server在导出"dupmsg"内核扩展调用到用户空间时存在错误，在实现上存在本地拒绝服务漏洞，攻击者可利用此漏洞使受影响计算机崩溃。 0 IBM AIX 7.x IBM AIX 6.x IBM AIX 5.x IBM Virtual I/O Server VIOS 2.x 厂商补丁： IBM ---...

Design/Logic Flaw

The webdavmount function in webdavvfsops.c in the WebDAV kernel extension aka webdavfs.kext for Mac OS X 10.6 allows local users to cause a denial of service panic via a mount request with a large integer in the pasocketnamelen field...

CVE-2010-1794

The webdavmount function in webdavvfsops.c in the WebDAV kernel extension aka webdavfs.kext for Mac OS X 10.6 allows local users to cause a denial of service panic via a mount request with a large integer in the pasocketnamelen field...

CVE-2010-1794

CVE-2010-1794 affects Mac OS X WebDAV kernel extension (webdav_fs.kext) prior to or in 10.6.x. The vulnerability resides in webdav_mount() where user-supplied pa_socket_namelen is copied into MALLOC without bounds checking, allowing a local unprivileged user to trigger a kernel panic by issuing a...

Mac OS X WebDAV kernel extension local denial-of-service

=================================================================== Mac OS X WebDAV kernel extension local denial-of-service July 26, 2010 CVE-2010-1794 =================================================================== ==Description== "Web-based Distributed Authoring and Versioning, or WebDAV,...

CVE-2009-3282

Integer overflow in the vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 allows host OS users to cause a denial of service to the host OS via unspecified vectors...

CVE-2009-3281

The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allows host OS users to gain privileges on the host OS via unspecified vectors...

Integer overflow

Integer overflow in the vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 allows host OS users to cause a denial of service to the host OS via unspecified vectors...

CVE-2009-3281

The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allows host OS users to gain privileges on the host OS via unspecified vectors...

Code injection

The perfstat kernel extension in bos.perf.perfstat in AIX 5.3 does not verify privileges when processing a SET call, which allows local users to cause a denial of service system hang or crash via unspecified SET operations...

CVE-2007-4799

The perfstat kernel extension in bos.perf.perfstat in AIX 5.3 does not verify privileges when processing a SET call, which allows local users to cause a denial of service system hang or crash via unspecified SET operations...

CVE-2007-4799

CVE-2007-4799 affects the AIX 5.3 perfstat kernel extension (bos.perf.perfstat). The flaw: the SET operation path does not verify privileges, enabling local users to cause a denial of service (system hang or crash) via unspecified SET operations. Documented by multiple sources (NVD/CVE record) wi...

CVE-2007-4799

The perfstat kernel extension in bos.perf.perfstat in AIX 5.3 does not verify privileges when processing a SET call, which allows local users to cause a denial of service system hang or crash via unspecified SET operations...