Sun Solaris priocntl(2) does not adequately validate path to kernel modules that implement lightweight process (LWP) scheduling policy

Overview The Sun Solaris priocntl2 function does not adequately validate a memory structure that specifies the name of a kernel module. As a result, a local attacker could execute arbitrary code with superuser privileges on a vulnerable system. Description The Sun Solaris priocntl2 function...

CVE-2001-1181

Dynamically Loadable Kernel Module dlkm static kernel symbol table in HP-UX 11.11 is not properly configured, which allows local users to gain privileges...

CVE-2001-0822

FPF kernel module 1.0 allows a remote attacker to cause a denial of service via fragmented packets...

CVE-2001-0822

FPF kernel module 1.0 allows a remote attacker to cause a denial of service via fragmented packets...

slackware.init.txt

I posted this to the linux kernel mailing last Friday, July 13th 2001: Submitted by : Josh [email protected], lockdown [email protected] on July 16th, 2001 Vulnerability : /lib/modules/2.4.5/modules.dep Tested On : Slackware 8.0. 2.4.5 Local : Yes Remote : No Temporary Fix : umask 022 at...

CVE-2001-1181

Dynamically Loadable Kernel Module dlkm static kernel symbol table in HP-UX 11.11 is not properly configured, which allows local users to gain privileges...

CylantSecure 1.0 - Kernel Module Syscall Rerouting

/ source: https://www.securityfocus.com/bid/2958/info CylantSecure is a commercial Linux hardening tool and security infrastructure available from Cylant Technology. A problem in the CylantSecure infrastructure could allow users to escape monitoring. A user with root access may load a module that...

CylantSecure 1.0 - Kernel Module Syscall Rerouting

CylantSecure 1.0 - Kernel Module Syscall Rerouting / source: https://www.securityfocus.com/bid/2958/info CylantSecure is a commercial Linux hardening tool and security infrastructure available from Cylant Technology. A problem in the CylantSecure infrastructure could allow users to escape...

Buffer oveflow in FTPFS (linux kernel module)

FTPFS http://sourceforge.net/projects/ftpfs is a Linux kernel module, enhancing VFS with FTP volume mounting capabilities. However, it has insufficient bounds checking. If a user can enter mount options through a wrapper, he can take over the whole system, even with restricted capabilities. Here'...

FTPFS 0.1.10.2.10.2.2 - mount Buffer Overflow

FTPFS 0.1.10.2.10.2.2 - mount Buffer Overflow source: https://www.securityfocus.com/bid/2498/info FTPFS is a Linux kernel module allowing users to mount remote files from any standard FTP server as a local filesystem. A version of FTPFS is vulnerable to a buffer overflow leading to a denial of...

FTPFS 0.1.1/0.2.1/0.2.2 - mount Buffer Overflow

source: https://www.securityfocus.com/bid/2498/info FTPFS is a Linux kernel module allowing users to mount remote files from any standard FTP server as a local filesystem. A version of FTPFS is vulnerable to a buffer overflow leading to a denial of service, and potentially execution of arbitrary...

[SECURITY] New version of modutils released

Package: modutils Vulnerability: local exploit Debian-specific: no Sebastian Krahmer found a problem in the modprobe utility that could be exploited by local users to run arbitrary commands as root if the machine is running a kernel with kmod enabled. The kmod kernel feature allows the kernel to...

SuSE Security Announcement: modules

-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: modules Announcement-ID: SuSE-SA:2000:44 Date: Monday, November 13th, 2000 10:00 MEST Affected SuSE versions: 6.4, 7.0 Vulnerability Type: local root compromise Severity 1-10: 8 SuSE default package: yes Other affected systems...

FreeBSD-SA-00:42.linux

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:42 Security Advisory FreeBSD, Inc. Topic: Linux binary compatability mode can cause system compromise Category: core Module: kernel Announced: 2000-08-28 Credits: Boris...

FreeBSD-SA-00:25.alpha-random

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:25 Security Advisory FreeBSD, Inc. Topic: FreeBSD/Alpha platform lacks kernel pseudo-random number generator, some applications fail to detect this. Category: core Module...

kernel_hide.txt

Subject: EuroHaCk stealth-code fwd To: [email protected] ---------- Forwarded message ---------- Date: Wed, 18 Aug 1999 18:56:09 +0200 From: Martin Markovitz Reply-To: [email protected] To: [email protected] Subject: EuroHaCk stealth-code hi, don't think that hiding modules is an...

bsd_flags.txt

Subject: [email protected]: FreeBSD-SA-99:01: BSD File Flags and Programming Techniques To: [email protected] [email protected] 1.ems Content-Type: text/plain; charset=us-ascii PGP Signature Status: unknown Signer: Unknown, Key ID xBE7497F1 Signed: 9/3/99 11:38:10 PM...

FreeBSD-SA-99:01.chflags

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-99:01 Security Advisory FreeBSD, Inc. Topic: BSD File Flags and Programming Techniques Category: core Module: kernel Announced: 1999-09-04 Affects: FreeBSD 3.2 and earlier...

autofs.linux.txt

Date: Fri, 19 Feb 1999 00:09:29 -0500 From: Brian Jones To: [email protected] Subject: Linux autofs overflow in 2.0.36+ -----BEGIN PGP SIGNED MESSAGE----- Overflow in Autofs - Feb 18 1999 Affected: Linux autofs kernel module in linux-2.0.36 to 2.2.1 Type of Problem: Buffer overflow in kernel...

insmod.linux.txt

Date: Tue, 30 Mar 1999 22:08:13 -0500 From: Brian Szymanski To: [email protected] Subject: linux insmod bug/security vulnerability Howdy all, Recently I discovered a bug in insmod that would require a lot of time and luck to exploit, but is nonetheless important for systems wanting rock-solid...