Debian Security Advisory DSA 1271-1 (openafs)

The remote host is missing an update to openafs announced via advisory DSA 1271-1. A design error has been identified in the OpenAFS, a cross-platform distributed filesystem included with Debian. OpenAFS historically has enabled setuid filesystem support for the local cell. However, with its...

Debian Security Advisory DSA 270-1 (kernel-patch-2.4.17-mips, kernel-patch-2.4.19-mips)

The remote host is missing an update to kernel-patch-2.4.17-mips, kernel-patch-2.4.19-mips announced via advisory DSA 270-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2007-6180

Race condition in the Remote Procedure Call kernel module rpcmod in Sun Solaris 8 through 10 allows local users to cause a denial of service NULL dereference and panic via unspecified vectors...

CVE-2007-6180

CVE-2007-6180: Solaris rpcmod race condition in the Remote Procedure Call kernel module affects SunOS/Solaris 8–10. The vulnerability allows local users to trigger a denial of service via a NULL dereference/panic, with the exact vectors not detailed in the provided sources. Publicly documented fi...

Microsoft DebugView Dbgv.sys内核模块本地权限升漏洞

BUGTRAQ ID: 26359 CVECAN ID: CVE-2007-4223 DebugView允许用户监控本地系统或可通过TCP/IP访问的网络中计算机上的调试输出。 DebugView所加载的Dbgv.sys内核模块中的功能可能允许将用户提供的数据拷贝到内核中可控的地址，这样恶意用户就可以向运行的内核中注入任意代码。 如果要利用这个漏洞，管理员必须加载DebugView，这样才会将Dbgv.sys驱动加载到内核，然后所有用户在系统重启之前都可以访问有漏洞的内核模块。 Microsoft DebugView 4.64...

Bypassing Anti-Rookit kernel modules scanning techniques-vulnerability warning-the black bar safety net

This article describes some of the methods, you can bypass the current mainstream of the modernAnti-rootkittools, including, but not limited to:Icesword latest version, Gmer latest version, Rootkit unhooker latest version, DarkSpy latest edition and AVG Anti-rootkit latest version, etc. The curre...

openSUSE 10 Security Update : dazuko (dazuko-2404)

This patch updates the Dazuko kernel module to version 2.3.2. Several memory leaks and stability issues have been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dazuko-2404. The text...

openSUSE 10 Security Update : hbedv-dazuko-kmp-bigsmp (hbedv-dazuko-kmp-bigsmp-2410)

This patch updates the Dazuko kernel module to version 2.3.2. Several memory leaks and stability issues have been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

CVE-2004-2686

Directory traversal vulnerability in the vfsgetvfssw function in Solaris 2.6, 7, 8, and 9 allows local users to load arbitrary kernel modules via crafted 1 mount or 2 sysfs system calls. NOTE: this might be the same issue as CVE-2004-1767, but there are insufficient details to be sure...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the KSSL kernel module in Sun Solaris 10, when configured with the KSSL proxy, allow remote attackers to cause a denial of service kernel panic via unspecified vectors related to "memory buffers" of Secure Socket Layer SSL records...

CVE-2007-3470

Multiple unspecified vulnerabilities in the KSSL kernel module in Sun Solaris 10, when configured with the KSSL proxy, allow remote attackers to cause a denial of service kernel panic via unspecified vectors related to "memory buffers" of Secure Socket Layer SSL records...

CVE-2007-3470

CVE-2007-3470 affects the Sun Solaris 10 KSSL kernel module when configured with the KSSL proxy. The report describes multiple unspecified vulnerabilities that can be triggered remotely to cause a denial of service (kernel panic) via unspecified vectors related to SSL record memory buffers. The p...

Solaris loadable kernel module directory traversal

Added: 06/22/2007 CVE: CVE-2004-1767 BID: 9477 OSVDB: 15128 Background Loadable kernel modules are programs which can be dynamically loaded into the kernel. Problem A directory traversal vulnerability in the vfsgetvfssw function in the Solaris kernel allows unprivileged users to load their own...

Solaris loadable kernel module directory traversal

Added: 06/22/2007 CVE: CVE-2004-1767 BID: 9477 OSVDB: 15128 Background Loadable kernel modules are programs which can be dynamically loaded into the kernel. Problem A directory traversal vulnerability in the vfsgetvfssw function in the Solaris kernel allows unprivileged users to load their own...

Solaris loadable kernel module directory traversal

Added: 06/22/2007 CVE: CVE-2004-1767 BID: 9477 OSVDB: 15128 Background Loadable kernel modules are programs which can be dynamically loaded into the kernel. Problem A directory traversal vulnerability in the vfsgetvfssw function in the Solaris kernel allows unprivileged users to load their own...

Hack advanced skills Linux back door technology and practice-vulnerability warning-the black bar safety net

The back door introduction The intruder complete control of the system, to facilitate the next time you enter and use a technology. Generally by modifying system configuration files and installation of third-party back-door tool to achieve. Has a hidden, can bypass the system log, not easy to be...

NVIDIA binary graphics driver: Privilege escalation vulnerability

Background The NVIDIA binary graphics driver from NVIDIA Corporation provides the kernel module and the GL modules for graphic acceleration on the NVIDIA based graphic cards. Description Rapid7 reported a boundary error in the NVIDIA binary graphics driver that leads to a buffer overflow in the...

DSA-922-1 kernel-source-2.6.8 - several

Bulletin has no description...

CVE-2005-2872

The iptrecent kernel module iptrecent.c in Linux kernel before 2.6.12, when running on 64-bit processors such as AMD64, allows remote attackers to cause a denial of service kernel panic via certain attacks such as SSH brute force, which leads to memset calls using a length based on the uint32t...

CVE-2005-2873

The iptrecent kernel module iptrecent.c in Linux kernel 2.6.12 and earlier does not properly perform certain time tests when the jiffies value is greater than LONGMAX, which can cause iptrecent netfilter rules to block too early, a different vulnerability than CVE-2005-2872...