PT-2012-1507 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39 Description: The issue allows local users to obtain potentially sensitive information from kernel stack memory. This is possible because the do replace function in net/bridge/netfilter/ebtables.c does not...

CVE-2011-1717: Undefined Security Weakness

Skype for Android stores sensitive user data without encryption in sqlite3 databases that have weak permissions, which allows local applications to read user IDs, contacts, phone numbers, date of birth, instant message logs, and other private information...

kernel: s390 task_show_regs infoleak

The taskshowregs function in arch/s390/kernel/traps.c in the Linux kernel before 2.6.38-rc4-next-20110216 on the s390 platform allows local users to obtain the values of the registers of an arbitrary process by reading a status file under /proc/...

CVE-2011-0463: Improper Input Validation

The ocfs2preparepageforwrite function in fs/ocfs2/aops.c in the Oracle Cluster File System 2 OCFS2 subsystem in the Linux kernel before 2.6.39-rc1 does not properly handle holes that cross page boundaries, which allows local users to obtain potentially sensitive information from uninitialized dis...

libxml2 2.6.x - XMLWriter::writeAttribute() Memory Leak Information Disclosure

libxml2 2.6.x - XMLWriter::writeAttribute Memory Leak Information Disclosure source: https://www.securityfocus.com/bid/45973/info The 'libxml2' library is prone to a local information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may lead to furth...

CVE-2010-3435: Undefined Security Weakness

The 1 pamenv and 2 pammail modules in Linux-PAM aka pam before 1.1.2 use root privileges during read access to files and directories that belong to arbitrary user accounts, which might allow local users to obtain sensitive information by leveraging this filesystem activity, as demonstrated by a...

kernel: xfs: XFS_IOC_FSGETXATTR ioctl memory leak

The xfsiocfsgetxattr function in fs/xfs/linux-2.6/xfsioctl.c in the Linux kernel before 2.6.36-rc4 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an ioctl call...

Linux Kernel "net/"子系统套接字过滤器本地信息泄露漏洞

BUGTRAQ ID: 45064 CVE ID: CVE-2010-4161 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在实现上存在信息泄露漏洞，本地攻击者可利用此漏洞获取敏感信息。 此问题源于从arg needlock = 0的tcpv4,6rcv函数调用函数skfilter时，套接字当时未能锁定。 Linux kernel 2.6.0-2.6.18 rc7 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

Linux Kernel net/子系统多个本地信息泄露漏洞

BUGTRAQ ID: 44630 Linux Kernel是开放源码操作系统Linux所使用的内核。 在Linux Kernel的net/子系统中net/ax25/afax25.c文件下的ax25getname函数和net/packet /afpacket.c文件下的packetgetnamespkt、packetgetname函数没有正确地初始化某些结构成员便将其拷贝到了用户空间，这可能导致泄漏内核栈内存。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

pam: pam_env and pam_mail accessing users' file with root privileges

The 1 pamenv and 2 pammail modules in Linux-PAM aka pam before 1.1.2 use root privileges during read access to files and directories that belong to arbitrary user accounts, which might allow local users to obtain sensitive information by leveraging this filesystem activity, as demonstrated by a...

PT-2010-4091 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.35 Description: The issue is related to an integer overflow in the btrfs ioctl clone function, which might allow local users to obtain sensitive information. This can be achieved via a BTRFS IOC CLONE RANGE...

XFS Deleted Inode Local Information Disclosure Vulnerability

Exploit for linux platform in category local exploits ============================================================ XFS Deleted Inode Local Information Disclosure Vulnerability ============================================================ stalehandle.c - attempt to create a stale handle and open it...

XFS - Deleted Inode Local Information Disclosure

XFS - Deleted Inode Local Information Disclosure / stalehandle.c - attempt to create a stale handle and open it Copyright C 2010 Red Hat, Inc. All Rights reserved. This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as publishe...

CVE-2010-0826: Exposure of Sensitive Information to an Unauthorized Actor

The Free Software Foundation FSF Berkeley DB NSS module aka libnss-db 2.2.3pre1 reads the DBCONFIG file in the current working directory, which allows local users to obtain sensitive information via a symlink attack involving a setgid or setuid application that uses this module...

WS-2010-0005

U-Boot before v2010.03-rc1 is vulnerable to a buffer overflow, which could lead to local information disclosure...

CVE-2003-1588: Undefined Security Weakness

Sun Cluster 2.2, when HA-Oracle or HA-Sybase DBMS services are used, stores database credentials in cleartext in a cluster configuration file, which allows local users to obtain sensitive information by reading this file...

Linux Kernel print_fatal_signal()本地信息泄露漏洞

BUGTRAQ ID: 37724 Linux Kernel是开源操作系统Linux所使用的内核。 在启用print-fatal-signals的情况下（print-fatal-signals=1），本地用户跳转到期望的地址就可以将任何内核可到达的内存dump到日志中。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Linux Kernel 'rds_recvmsg()' Function Local Information Disclosure Vulnerability

Exploit for linux platform in category local exploits / rdsclient.c / int mainvoid int sockfd; struct sockaddrin serverAddr; struct sockaddrin toAddr; char recvBuffer128 = "data from client"; struct msghdr msg; struct iovec iov; sockfd = socketAFRDS, SOCKSEQPACKET, 0; if sockfd iovbase =...

JBoss企业应用平台多个安全漏洞

BUGTRAQ ID: 37276 CVE ID: CVE-2009-1380,CVE-2009-2405,CVE-2009-3554 JBoss企业应用平台（EAP）是J2EE应用的中间件平台。 JBoss的实现上存在多个安全漏洞，包括多个跨站脚本问题和一个本地信息泄露问题，远程攻击者可能利用此漏洞来窃取信息。 RedHat JBoss EAP 厂商补丁： RedHat ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.jboss.org/...

kernel: tc: uninitialised kernel memory leak

The tcfilltclass function in net/sched/schapi.c in the tc subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.31-rc9 does not initialize certain 1 tcmpad1 and 2 tcmpad2 structure members, which might allow local users to obtain sensitive information from kernel memory via...