XFS Deleted Inode Local Information Disclosure Vulnerability

Exploit for linux platform in category local exploits ============================================================ XFS Deleted Inode Local Information Disclosure Vulnerability ============================================================ stalehandle.c - attempt to create a stale handle and open it...

PT-2010-4091 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.35 Description: The issue is related to an integer overflow in the btrfs ioctl clone function, which might allow local users to obtain sensitive information. This can be achieved via a BTRFS IOC CLONE RANGE...

XFS - Deleted Inode Local Information Disclosure

XFS - Deleted Inode Local Information Disclosure / stalehandle.c - attempt to create a stale handle and open it Copyright C 2010 Red Hat, Inc. All Rights reserved. This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as publishe...

Linux Kernel print_fatal_signal()本地信息泄露漏洞

BUGTRAQ ID: 37724 Linux Kernel是开源操作系统Linux所使用的内核。 在启用print-fatal-signals的情况下（print-fatal-signals=1），本地用户跳转到期望的地址就可以将任何内核可到达的内存dump到日志中。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Linux Kernel 'rds_recvmsg()' Function Local Information Disclosure Vulnerability

Exploit for linux platform in category local exploits / rdsclient.c / int mainvoid int sockfd; struct sockaddrin serverAddr; struct sockaddrin toAddr; char recvBuffer128 = "data from client"; struct msghdr msg; struct iovec iov; sockfd = socketAFRDS, SOCKSEQPACKET, 0; if sockfd iovbase =...

JBoss企业应用平台多个安全漏洞

BUGTRAQ ID: 37276 CVE ID: CVE-2009-1380,CVE-2009-2405,CVE-2009-3554 JBoss企业应用平台（EAP）是J2EE应用的中间件平台。 JBoss的实现上存在多个安全漏洞，包括多个跨站脚本问题和一个本地信息泄露问题，远程攻击者可能利用此漏洞来窃取信息。 RedHat JBoss EAP 厂商补丁： RedHat ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.jboss.org/...

kernel: tc: uninitialised kernel memory leak

The tcfilltclass function in net/sched/schapi.c in the tc subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.31-rc9 does not initialize certain 1 tcmpad1 and 2 tcmpad2 structure members, which might allow local users to obtain sensitive information from kernel memory via...

Linux Kernel llc_ui_getname函数本地信息泄露漏洞

BUGTRAQ ID: 36126 CVECAN ID: CVE-2009-3001 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的net/llc/afllc.c文件中的llcuigetname函数没有正确地初始化某些数据结构，这允许本地用户通过对AFLLC套接字调用getsockname读取部分内核内存的内容。 Linux kernel 2.6.31-rc7 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

FreeBSD直接管道写操作本地信息泄露漏洞

BUGTRAQ ID: 35279 FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 FreeBSD和其他UNIX类系统上最常见的进程间通讯方式之一是匿名管道。这种机制会创建一对文件描述符，可以从一个描述符读取写入到另一个描述符的数据。 FreeBSD的管道实现中包含名为“直接写入”的优化。在这种优化中，FreeBSD内核利用虚拟内存映射允许直接在进程之间拷贝数据，而不是在调用...

kernel: agp: zero pages before sending to userspace

The 1 agpgenericallocpage and 2 agpgenericallocpages functions in drivers/char/agp/generic.c in the agp subsystem in the Linux kernel before 2.6.30-rc3 do not zero out pages that may later be available to a user-space process, which allows local users to obtain sensitive information by reading...

IBM WebSphere Message Broker本地信息泄露漏洞

BUGTRAQ ID: 33819 CVECAN ID: CVE-2009-0503 WebSphere Message Broker 为增强面向服务的架构交付高级企业服务总线（ESB），为基于标准和非标准的应用程序及服务提供了连通性和通用数据转换。 WebSphere Message Broker在处理JDBC错误时会将数据库连接口令写入到事件日志和系统日志中，本地用户可以通过读取这些日志获得敏感信息。 IBM WebSphere Message Broker 6.1 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

wicd

New wicd packages are available for Slackware 12.2 and -current to fix a security issue with the D-Bus configuration file that could allow local information disclosure such as network credentials. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database:...

FreeBSD 7.1 - libc Berkley DB Interface Uninitialized Memory Local Information Disclosure

FreeBSD 7.1 - libc Berkley DB Interface Uninitialized Memory Local Information Disclosure // source: https://www.securityfocus.com/bid/34666/info FreeBSD is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead ...

[security bulletin] HPSBMA02361 SSRT080119 rev.1 - HP OpenView Select Identity Connectors running on Windows, Local Information Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01531379 Version: 1 HPSBMA02361 SSRT080119 rev.1 - HP OpenView Select Identity Connectors running on Windows, Local Information Disclosure NOTICE: The information in this Security Bulletin should...

Local information disclosure in WeFi Client v3.3.3.0

================================================== INFO ================================================== The wireless client, WeFi v3.3.3.0 is susceptible to a local information disclosure due to irresponsible coding. Earlier versions may also be affected...

wefi3330-lfi.txt

================================================== INFO ================================================== The wireless client, WeFi v3.3.3.0 is susceptible to a local information disclosure due to irresponsible coding. Earlier versions may also be affected...

Issue with core dump owner

The docoredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive informatio...

DEBIAN-CVE-2007-5958

X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists...

rPSA-2007-0214-1 initscripts

rPath Security Advisory: 2007-0214-1 Published: 2007-10-11 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Local Information Exposure Updated Versions: initscripts=conary.rpath.com@rpl:1/8.12-8.10-1 rPath Issue Tracking System: https://issues.rpath.com/browse/RPL-1825...

CVE-2007-4656

backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP uploads, which allows local users to obtain sensitive information by listing the process and its arguments, a different vulnerability than...