473 matches found
CVE-2011-1098
Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions are in place...
PT-2011-1092 · Red Hat +1 · Logrotate +2
Name of the Vulnerable Software and Affected Versions: logrotate versions 3.7.9 and earlier logrotate versions prior to 3.8.0 Description: The issue is related to a race condition in the createOutputFile function in logrotate.c, allowing local users to read log data by opening a file before the...
PT-2011-1094 · Logrotate +2 · Logrotate +2
Name of the Vulnerable Software and Affected Versions: logrotate versions 3.7.9 and earlier logrotate versions prior to 3.8.0 Description: The issue might allow context-dependent attackers to cause a denial of service via a newline or backslash character in a log filename. Multiple vulnerabilitie...
PT-2011-1093 · Logrotate +2 · Logrotate +2
Name of the Vulnerable Software and Affected Versions: logrotate versions 3.7.9 and earlier logrotate versions prior to 3.8.0 Description: The issue allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a log filename. This can be demonstrated by a filename...
[SECURITY] Fedora 15 Update: logrotate-3.7.9-8.fc15
The logrotate utility is designed to simplify the administration of log files on a system which generates a lot of log files. Logrotate allows for the automatic rotation compression, removal and mailing of log files. Logrotate can be set to handle a log file daily, weekly, monthly or when the log...
Fedora 15 : logrotate-3.7.9-8.fc15 (2011-3758)
Fixes CVE-2011-1154, CVE-2011-1155 and CVE-2011-1098. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
openSUSE Security Update : squidGuard (openSUSE-SU-2010:0460-1)
Two buffer overflows in squidGard were fixed : CVE-2009-3700: Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote attackers to cause a denial of service application hang or loss of blocking functionality via a long URL with many / slash characters, related to 'emergency mode.'...
openSUSE Security Update : squidGuard (openSUSE-SU-2010:0460-1)
Two buffer overflows in squidGard were fixed : CVE-2009-3700: Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote attackers to cause a denial of service application hang or loss of blocking functionality via a long URL with many / slash characters, related to 'emergency mode.'...
CentOS 5 : cups (CESA-2007:1020)
Updated CUPS packages that fix a security issue in the Internet Printing Protocol IPP handling and correct some bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing...
SuSE9 Security Update : net-snmp (YOU Patch Number 12298)
Remote attackers could crash net-snmp via GETBULK-Request. CVE-2008-4309 In addition the following non-security issues have been fixed : - typo in error message bnc439857 - make OIDs longer than 256 chars work bnc345914 - typo in the snmpd init script to really load all agents bnc415127 - logrota...
Linux Kernel < 2.6.29 exit_notify() Local Privilege Escalation Exploit
No description provided by source. !/bin/sh gw-notexit.sh: Linux kernel 2.6.29 exitnotify local root exploit by Milen Rangelov gat3way-at-gat3way-dot-eu Based on 'exitnotify' CAPKILL verification bug found by Oleg Nestorov. Basically it allows us to send arbitrary signals to a privileged suidroot...
Mandriva Update for bind MDKA-2007:090 (bind)
Check for the Version of bind OpenVAS Vulnerability Test Mandriva Update for bind MDKA-2007:090 bind Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Linux Kernel < 2.6.29 exit_notify() Local Privilege Escalation Exploit
Exploit for linux platform in category local exploits ====================================================================== Linux Kernel 2.6.29 exitnotify Local Privilege Escalation Exploit ====================================================================== !/bin/sh gw-notexit.sh: Linux kerne...
Linux Kernel 2.6.29 - exit_notify() Local Privilege Escalation
Linux Kernel 2.6.29 - exitnotify Local Privilege Escalation !/bin/sh gw-notexit.sh: Linux kernel 2.6.29 exitnotify local root exploit by Milen Rangelov gat3way-at-gat3way-dot-eu Based on 'exitnotify' CAPKILL verification bug found by Oleg Nestorov. Basically it allows us to send arbitrary signals...
Linux Kernel < 2.6.29 - 'exit_notify()' Local Privilege Escalation
!/bin/sh gw-notexit.sh: Linux kernel 2.6.29 exitnotify local root exploit by Milen Rangelov gat3way-at-gat3way-dot-eu Based on 'exitnotify' CAPKILL verification bug found by Oleg Nestorov. Basically it allows us to send arbitrary signals to a privileged suidroot parent process. Due to a bad check...
SuSE 10 Security Update : net-snmp (ZYPP Patch Number 5807)
Remote attackers could crash net-snmp via GETBULK-Request. CVE-2008-4309 In addition the following non-security issues have been fixed : - typo in error message. bnc439857 - fix duplicate registration warnings on startup. bnc326957 - container insert errors reproducable with shared ip setups...
Send ICMP Nasty Garbage (sing) Append File Logrotate Exploit
No description provided by source. / sing file append exploit by bannedit 12/05/2007 The original reporter of this issue included an example session which added an account to the machine. The method for this exploit is slightly different and much more quiet. Although it relies upon logrotate for...
sendicmp-append.txt
/ sing file append exploit by bannedit 12/05/2007 The original reporter of this issue included an example session which added an account to the machine. The method for this exploit is slightly different and much more quiet. Although it relies upon logrotate for help. This could easily be modified...
Send ICMP Nasty Garbage (sing) Append File Logrotate Exploit
Exploit for linux platform in category local exploits ============================================================ Send ICMP Nasty Garbage sing Append File Logrotate Exploit ============================================================ / sing file append exploit by bannedit 12/05/2007 The original...
Send ICMP Nasty Garbage (SING) - Append File Logrotate
Send ICMP Nasty Garbage SING - Append File Logrotate / sing file append exploit by bannedit 12/05/2007 The original reporter of this issue included an example session which added an account to the machine. The method for this exploit is slightly different and much more quiet. Although it relies...