CVE-2008-3534

CVE-2008-3534 affects the Linux kernel tmpfs implementation (shmem.c: shmem_delete_inode). A local attacker could crash the system by a specific sequence of file create/remove/overwrite operations, linked to allocation of “useless pages” and improper maintenance of i_blocks. Public advisories con...

CVE-2008-3534: Uncontrolled Resource Consumption

The shmemdeleteinode function in mm/shmem.c in the tmpfs implementation in the Linux kernel before 2.6.26.1 allows local users to cause a denial of service system crash via a certain sequence of file create, remove, and overwrite operations, as demonstrated by the insserv program, related to...

CVE-2008-3535: Off-by-one Error

Off-by-one error in the ioviteradvance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local users to cause a denial of service system crash via a certain sequence of file I/O operations with readv and writev, as demonstrated by testcases/kernel/fs/ftest/ftest03 from the Lin...

CVE-2008-2973

Multiple cross-site scripting XSS vulnerabilities in chathead.php in MM Chat 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 sitename and 2 wmessage parameters...

CVE-2008-2974

Directory traversal vulnerability in chatconfig.php in MM Chat 1.5, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter...

CVE-2008-2974

MM Chat 1.5 is affected by a Directory Traversal in chatconfig.php. When register_globals is enabled, remote attackers can use directory traversal sequences in the currentlang parameter to include and execute local files. CVSS v2 base score is 6.8 (MEDIUM). Affected: MM Chat 1.5; exploit details ...

CVE-2008-2973

CVE-2008-2973 involves multiple XSS vulnerabilities in the chathead.php component of MM Chat 1.5. The flaws allow remote attackers to inject arbitrary web script or HTML via the sitename and wmessage parameters. The provided documents confirm the vulnerability details but do not include any remed...

CVE-2008-2974

Directory traversal vulnerability in chatconfig.php in MM Chat 1.5, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter...

CVE-2008-2974: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in chatconfig.php in MM Chat 1.5, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter...

CVE-2008-2973: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in chathead.php in MM Chat 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 sitename and 2 wmessage parameters...

MM Chat 1.5 目录遍历漏洞

No description provided by source...

MM Chat 1.5 (LFI/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== MM Chat 1.5 LFI/XSS Multiple Remote Vulnerabilities ===================================================== -----------------------------------------------------------------------------¬...

mm chat 1.5 - Local File Inclusion Cross-Site Scripting

mm chat 1.5 - Local File Inclusion Cross-Site Scripting ??????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ?????????????????????????????????????????????????????????????????????????????? ????? From T...

mmchat-lfixss.txt

┌┌───────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable crack.... ────┐...

kernel security and bug fix update

2.6.18-53.1.21.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki ORA 6045759 - NET Fix msi issue with kexec/kdump Michael Chan ORA 6219364 - MM Fix allocpagesnode static 'nid' race made kernel crash Joe Jin ORA 6187457 - splice Fix bad unlockpage in error case Jens Axboe ORA 626357...

Debian: Security Advisory (DSA-137)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-6417: Exposure of Sensitive Information to an Unauthorized Actor

The shmemgetpage function mm/shmem.c in Linux kernel 2.6.11 through 2.6.23 does not properly clear allocated memory in some rare circumstances related to tmpfs, which might allow local users to read sensitive kernel data or cause a denial of service crash...

CVE-2007-3739

mm/mmap.c in the hugetlb kernel, when run on PowerPC systems, does not prevent stack expansion from entering into reserved kernel page memory, which allows local users to cause a denial of service OOPS via unspecified vectors...

CVE-2007-3739: Improper Restriction of Operations within the Bounds of a Memory Buffer

mm/mmap.c in the hugetlb kernel, when run on PowerPC systems, does not prevent stack expansion from entering into reserved kernel page memory, which allows local users to cause a denial of service OOPS via unspecified vectors...

Microsoft .NET Framework JIT Compiler Remote Buffer Overflow Vulnerability

Description Microsoft .NET Framework is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code in the context of a user running the application. Successful exploits ca...