kernel: recv{from,msg}() on an rds socket can leak kernel memory

The rdsrecvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a 1 recvfrom or 2 recvmsg system call on an RDS socket...

Debian: Security Advisory (DSA-2507-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-0421: Exposure of Sensitive Information to an Unauthorized Actor

The SUSE Audit Log Keeper daemon before 0.2.1-0.4.6.1 for SUSE Manager and Spacewalk uses world-readable permissions for /etc/auditlog-keeper.conf, which allows local users to obtain passwords by reading this file...

Linux Kernel 2.6.x - 'rds_recvmsg()' Local Information Disclosure

/ source: https://www.securityfocus.com/bid/54702/info The Linux kernel is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. / / rdsclient.c / int mainvoid int sockfd; struct sockaddrin...

RedHat Update for Red Hat Enterprise Linux 6 kernel RHSA-2011:1530-03

Check for the Version of Red Hat Enterprise Linux 6 kernel OpenVAS Vulnerability Test RedHat Update for Red Hat Enterprise Linux 6 kernel RHSA-2011:1530-03 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...

Debian DSA-2507-1 : openjdk-6 - several vulnerabilities

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform. - CVE-2012-1711 CVE-2012-1719 Multiple errors in the CORBA implementation could lead to breakouts of the Java sandbox. - CVE-2012-1713 Missing input sanitising in the font manager could lead to...

DSA-2507-1 openjdk-6 - several

Bulletin has no description...

CVE-2012-1106: Undefined Security Weakness

The C handler plug-in in Automatic Bug Reporting Tool ABRT, possibly 2.0.8 and earlier, does not properly set the group GID permissions on core dump files for setuid programs when the sysctl fs.suiddumpable option is set to 2, which allows local users to obtain sensitive information...

PT-2012-1862 · Gnu · Gnash

Name of the Vulnerable Software and Affected Versions: Gnash versions prior to 0.8.10 Description: The issue allows local users to obtain sensitive information due to weak permissions used for cookie files with predictable names in /tmp. Recommendations: For versions prior to 0.8.10, update to...

CVE-2011-4328

Gnash prior to 0.8.10 stores cookies in /tmp with world-readable, predictable file names via nsPluginInstance::setupCookies(), allowing local users to obtain sensitive information. Affected versions: Gnash

pidgin / libpurple security vulnerabilities

DoS via XMPP and MSN messages, local information leakage...

Skype 5.x 聊天日志本地信息泄露漏洞

BUGTRAQ ID: 51988 Skype是免费的全球语音沟通软件。 Skype在实现上存在本地信息泄露漏洞，即使用户启用了“Keep history for”设置中的“no history”选项，或者手动地用“Clear history”按钮删除，本地攻击者依然可利用此漏洞获取敏感信息。 0 Skype 5.x 厂商补丁： Skype ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.skype.com/ 在Windows XP中, 转到"C:\Documents and...

Linux Kernel 3.0.4 - procinterrupts Password Length Local Information Disclosure

Linux Kernel 3.0.4 - procinterrupts Password Length Local Information Disclosure / source: https://www.securityfocus.com/bid/50573/info The Linux kernel is prone to a local information-disclosure weakness. Successful exploits allow local attackers to obtain the password length of a victim's...

Linux Kernel 3.0.4 - '/proc/interrupts' Password Length Local Information Disclosure

/ source: https://www.securityfocus.com/bid/50573/info The Linux kernel is prone to a local information-disclosure weakness. Successful exploits allow local attackers to obtain the password length of a victim's account; information harvested may aid in further attacks. Linux kernel 3.1 and prior...

Linux Kernel 2.6.37-rc1 - serial_multiport_struct Local Information Leak

Linux Kernel 2.6.37-rc1 - serialmultiportstruct Local Information Leak / Linux include include include include include define DEVICE "/dev/ttyS1" int mainint argc, char argv int ret = 0; int i, fd, reservedsize; char buf; struct serialmultiportstruct buffer; printf"\m/ Linux \n", argv0; exit-1; i...

CVE-2011-3692: Undefined Security Weakness

NetSaro Enterprise Messenger Server 2.0 stores cleartext console credentials in configuration.xml, which allows local users to obtain sensitive information by reading this file and performing a base64 decoding step...

kvm: arch/x86/kvm/x86.c: reading uninitialized stack memory

arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via read operations on the /dev/kvm device...

PT-2011-2917 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39 Description: The issue allows local users to obtain potentially sensitive information from kernel memory. This is achieved by leveraging the CAP NET ADMIN capability to issue a crafted request, and then...

kernel: CAN info leak

The bcmconnect function in net/can/bcm.c aka the Broadcast Manager in the Controller Area Network CAN implementation in the Linux kernel 2.6.36 and earlier creates a publicly accessible file with a filename containing a kernel memory address, which allows local users to obtain potentially sensiti...

PT-2012-1507 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39 Description: The issue allows local users to obtain potentially sensitive information from kernel stack memory. This is possible because the do replace function in net/bridge/netfilter/ebtables.c does not...