RedHat Update for Red Hat Enterprise Linux 6 kernel RHSA-2011:1530-03

Check for the Version of Red Hat Enterprise Linux 6 kernel OpenVAS Vulnerability Test RedHat Update for Red Hat Enterprise Linux 6 kernel RHSA-2011:1530-03 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...

Debian DSA-2507-1 : openjdk-6 - several vulnerabilities

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform. - CVE-2012-1711 CVE-2012-1719 Multiple errors in the CORBA implementation could lead to breakouts of the Java sandbox. - CVE-2012-1713 Missing input sanitising in the font manager could lead to...

DSA-2507-1 openjdk-6 - several

Bulletin has no description...

PT-2012-1862 · Gnu · Gnash

Name of the Vulnerable Software and Affected Versions: Gnash versions prior to 0.8.10 Description: The issue allows local users to obtain sensitive information due to weak permissions used for cookie files with predictable names in /tmp. Recommendations: For versions prior to 0.8.10, update to...

CVE-2011-4328

Gnash prior to 0.8.10 stores cookies in /tmp with world-readable, predictable file names via nsPluginInstance::setupCookies(), allowing local users to obtain sensitive information. Affected versions: Gnash

pidgin / libpurple security vulnerabilities

DoS via XMPP and MSN messages, local information leakage...

Skype 5.x 聊天日志本地信息泄露漏洞

BUGTRAQ ID: 51988 Skype是免费的全球语音沟通软件。 Skype在实现上存在本地信息泄露漏洞，即使用户启用了“Keep history for”设置中的“no history”选项，或者手动地用“Clear history”按钮删除，本地攻击者依然可利用此漏洞获取敏感信息。 0 Skype 5.x 厂商补丁： Skype ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.skype.com/ 在Windows XP中, 转到"C:\Documents and...

Linux Kernel 3.0.4 - procinterrupts Password Length Local Information Disclosure

Linux Kernel 3.0.4 - procinterrupts Password Length Local Information Disclosure / source: https://www.securityfocus.com/bid/50573/info The Linux kernel is prone to a local information-disclosure weakness. Successful exploits allow local attackers to obtain the password length of a victim's...

Linux Kernel 3.0.4 - '/proc/interrupts' Password Length Local Information Disclosure

/ source: https://www.securityfocus.com/bid/50573/info The Linux kernel is prone to a local information-disclosure weakness. Successful exploits allow local attackers to obtain the password length of a victim's account; information harvested may aid in further attacks. Linux kernel 3.1 and prior...

Linux Kernel 2.6.37-rc1 - serial_multiport_struct Local Information Leak

Linux Kernel 2.6.37-rc1 - serialmultiportstruct Local Information Leak / Linux include include include include include define DEVICE "/dev/ttyS1" int mainint argc, char argv int ret = 0; int i, fd, reservedsize; char buf; struct serialmultiportstruct buffer; printf"\m/ Linux \n", argv0; exit-1; i...

kvm: arch/x86/kvm/x86.c: reading uninitialized stack memory

arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via read operations on the /dev/kvm device...

PT-2011-2917 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39 Description: The issue allows local users to obtain potentially sensitive information from kernel memory. This is achieved by leveraging the CAP NET ADMIN capability to issue a crafted request, and then...

kernel: CAN info leak

The bcmconnect function in net/can/bcm.c aka the Broadcast Manager in the Controller Area Network CAN implementation in the Linux kernel 2.6.36 and earlier creates a publicly accessible file with a filename containing a kernel memory address, which allows local users to obtain potentially sensiti...

PT-2012-1507 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39 Description: The issue allows local users to obtain potentially sensitive information from kernel stack memory. This is possible because the do replace function in net/bridge/netfilter/ebtables.c does not...

kernel: s390 task_show_regs infoleak

The taskshowregs function in arch/s390/kernel/traps.c in the Linux kernel before 2.6.38-rc4-next-20110216 on the s390 platform allows local users to obtain the values of the registers of an arbitrary process by reading a status file under /proc/...

libxml2 2.6.x - XMLWriter::writeAttribute() Memory Leak Information Disclosure

libxml2 2.6.x - XMLWriter::writeAttribute Memory Leak Information Disclosure source: https://www.securityfocus.com/bid/45973/info The 'libxml2' library is prone to a local information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may lead to furth...

kernel: xfs: XFS_IOC_FSGETXATTR ioctl memory leak

The xfsiocfsgetxattr function in fs/xfs/linux-2.6/xfsioctl.c in the Linux kernel before 2.6.36-rc4 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an ioctl call...

Linux Kernel "net/"子系统套接字过滤器本地信息泄露漏洞

BUGTRAQ ID: 45064 CVE ID: CVE-2010-4161 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在实现上存在信息泄露漏洞，本地攻击者可利用此漏洞获取敏感信息。 此问题源于从arg needlock = 0的tcpv4,6rcv函数调用函数skfilter时，套接字当时未能锁定。 Linux kernel 2.6.0-2.6.18 rc7 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

Linux Kernel net/子系统多个本地信息泄露漏洞

BUGTRAQ ID: 44630 Linux Kernel是开放源码操作系统Linux所使用的内核。 在Linux Kernel的net/子系统中net/ax25/afax25.c文件下的ax25getname函数和net/packet /afpacket.c文件下的packetgetnamespkt、packetgetname函数没有正确地初始化某些结构成员便将其拷贝到了用户空间，这可能导致泄漏内核栈内存。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

pam: pam_env and pam_mail accessing users' file with root privileges

The 1 pamenv and 2 pammail modules in Linux-PAM aka pam before 1.1.2 use root privileges during read access to files and directories that belong to arbitrary user accounts, which might allow local users to obtain sensitive information by leveraging this filesystem activity, as demonstrated by a...