6738 matches found
Moderate: Red Hat Security Advisory: ethereal security update
Updated Ethereal packages that fix various security vulnerabilities are now available. Ethereal is a program for monitoring network traffic. The SNMP dissector in Ethereal releases 0.8.15 through 0.10.4 contained a memory read flaw. On a system where Ethereal is running, a remote attacker could...
CVE-2004-0535: Undefined Security Weakness
The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory. NOTE: this issue was originally incorrectly reported as a "buffer overflow" by some sources...
CVE-2004-0482: Undefined Security Weakness
Multiple integer overflows in 1 procfscmdline.c, 2 procfsfpregs.c, 3 procfslinux.c, 4 procfsregs.c, 5 procfsstatus.c, and 6 procfssubr.c in procfs for OpenBSD 3.5 and earlier allow local users to read sensitive kernel memory and possibly perform other unauthorized activities...
PT-2004-1600 · Openbsd · Openbsd
Name of the Vulnerable Software and Affected Versions: OpenBSD versions 3.5 and earlier Description: The issue is related to multiple integer overflows in several procfs files for OpenBSD, including procfs cmdline.c, procfs fpregs.c, procfs linux.c, procfs regs.c, procfs status.c, and procfs...
CVE-2004-0370: Undefined Security Weakness
The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain IPv6 socket options, which could allow attackers to read kernel memory and cause a system panic...
CVE-2004-0247: Undefined Security Weakness
The client and server of Chaser 1.50 and earlier allow remote attackers to cause a denial of service crash via exception via a UDP packet with a length field that is greater than the actual data length, which causes Chaser to read unexpected memory...
DEBIAN-CVE-2003-0625
Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malformed client request in the connection handshake, which leaks the memory in the server's response...
PT-2003-1036 · Xfstt · Xfstt
Name of the Vulnerable Software and Affected Versions: xfstt affected versions not specified Description: The issue is related to an off-by-one error in xfstt, allowing remote attackers to read potentially sensitive memory via a malformed client request in the connection handshake. This can lead ...
CVE-2002-1289
The CVE-2002-1289 entry concerns the Microsoft Java implementation used in Internet Explorer. The vulnerability arises in getNativeServices, which creates an instance of com.ms.awt.peer.INativeServices (INativeServices) and does not verify the memory addresses passed to its methods, allowing remo...
CVE-2002-1125
FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELEASE and earlier, including 1 asmon, 2 ascpu, 3 bubblemon, 4 wmmon, and 5 wmnet2, leave open file descriptors for /dev/mem and /dev/kmem, which allows local users to read kernel memory...
CVE-2002-0882: Undefined Security Weakness
The web server for Cisco IP Phone VoIP models 7910, 7940, and 7960 allows remote attackers to cause a denial of service reset and possibly read sensitive memory via a large integer value in 1 the stream ID of the StreamingStatistics script, or 2 the port ID of the PortInformation script...
CVE-2001-1166: Undefined Security Weakness
linprocfs on FreeBSD 4.3 and earlier does not properly restrict access to kernel memory, which allows one process with debugging rights on a privileged process to read restricted memory from that process...
reading from execve()ed setuid memory
Posted to bugzilla.redhat.com: Tue, 15 May 2001 06:43:27 -0400 This was then made unaccessable, and I've seen nothing that looks like a fix yet. A month and a half seems like long enough to work it out. Contents of https://bugzilla.redhat.com/bugzilla/showbug.cgi?id=40658 as posted before the pag...
CVE-2001-0316: Undefined Security Weakness
Linux kernel 2.4 and 2.2 allows local users to read kernel memory and possibly gain privileges via a negative argument to the sysctl call...
CVE-1999-0401: Undefined Security Weakness
A race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files...
PT-1999-1087 · Linux · Linux
Name of the Vulnerable Software and Affected Versions: Linux version 2.2.1 Description: A race condition exists, allowing local users to read arbitrary memory from /proc files. Recommendations: For Linux version 2.2.1, update to a newer version that contains a fix for this issue...