PT-2013-4917 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.9.6 Description: The issue is caused by an off-by-one error in the build unc path to root function in fs/cifs/connect.c, allowing remote attackers to cause a denial of service, resulting in memory corruption a...

Gather eCryptfs Metadata

This module will collect the contents of all users' .ecrypts directories on the targeted machine. Collected "wrapped-passphrase" files can be cracked with John the Ripper JtR to recover "mount passphrases". This module requires Metasploit: https://metasploit.com/download Current source:...

[SECURITY] Fedora 18 Update: kdf-4.10.5-1.fc18

KDiskFree displays the available file devices hard drive partitions, floppy and CD/DVD drives, etc. along with information on their capacity, free space, type and mount point...

Oracle Linux 5 : Important: / autofs (ELSA-2007-1128)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2007-1128 advisory. 5.0.1-0.rc2.55.el5.1 - Bug 410041: CVE-2007-5964 autofs defaults don't restrict suid in /net - use mount option nosuid for -hosts map unless suid is explicily...

Oracle Linux 4 : autofs5 (ELSA-2007-1177)

From Red Hat Security Advisory 2007:1177 : Updated autofs5 technology preview packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The autofs utility controls the...

Oracle Linux 5 : nfs-utils (ELSA-2012-0310)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2012-0310 advisory. - Mount fails to anticipate RLIMITFSIZE bz 697979,CVE-2011-1749 Tenable has extracted the preceding description block directly from the Oracle Linux security...

kernel: VFAT slab-based buffer overflow

Buffer overflow in the VFAT filesystem implementation in the Linux kernel before 3.3 allows local users to gain privileges or cause a denial of service system crash via a VFAT write operation on a filesystem with the utf8 mount option, which is not properly handled during UTF-8 to UTF-16 conversi...

CentOS 4 : util-linux (CESA-2009:0981)

An updated util-linux package that fixes one security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The util-linux package contains a collection of basic system utilities, such as fdisk and mount. A log...

[SECURITY] Fedora 17 Update: kdf-4.10.4-1.fc17

KDiskFree displays the available file devices hard drive partitions, floppy and CD/DVD drives, etc. along with information on their capacity, free space, type and mount point...

Fedora Update for kdf FEDORA-2013-10130

Check for the Version of kdf OpenVAS Vulnerability Test Fedora Update for kdf FEDORA-2013-10130 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[SECURITY] Fedora 18 Update: kdf-4.10.4-1.fc18

KDiskFree displays the available file devices hard drive partitions, floppy and CD/DVD drives, etc. along with information on their capacity, free space, type and mount point...

kernel: VFAT slab-based buffer overflow

Buffer overflow in the VFAT filesystem implementation in the Linux kernel before 3.3 allows local users to gain privileges or cause a denial of service system crash via a VFAT write operation on a filesystem with the utf8 mount option, which is not properly handled during UTF-8 to UTF-16 conversi...

Design/Logic Flaw

The cifsfindsmbses function in fs/cifs/connect.c in the Linux kernel before 2.6.36 does not properly determine the associations between users and sessions, which allows local users to bypass CIFS share authentication by leveraging a mount of a share by a different user...

CVE-2011-1585

The cifsfindsmbses function in fs/cifs/connect.c in the Linux kernel before 2.6.36 does not properly determine the associations between users and sessions, which allows local users to bypass CIFS share authentication by leveraging a mount of a share by a different user...

Fedora Update for pmount FEDORA-2013-8801

Check for the Version of pmount OpenVAS Vulnerability Test Fedora Update for pmount FEDORA-2013-8801 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[SECURITY] Fedora 18 Update: pmount-0.9.23-4.fc18

pmount "policy mount" is a wrapper around the standard mount program which permits normal users to mount removable devices without a matching /etc/fstab entry. Be warned that pmount is installed setuid root...

util-linux / mount information leakage

It's possible to check file existance...

Mandriva Linux Security Advisory : util-linux (MDVSA-2013:154)

A vulnerability has been found and corrected in util-linux : An information disclosure flaw was found in the way the mount command reported errors. A local attacker could use this flaw to determine the existence of files and directories they do not have access to CVE-2013-0157. Additionally for...

SuSE 11.2 Security Update : wireshark (SAT Patch Number 7490)

wireshark has been updated to 1.8.6 which fixes bugs and security issues : Vulnerabilities fixed : - The TCP dissector could crash. wnpa-sec-2013-10. CVE-2013-2475 - The HART/IP dissectory could go into an infinite loop. wnpa-sec-2013-11. CVE-2013-2476 - The CSN.1 dissector could crash...

SuSE 10 Security Update : wireshark (ZYPP Patch Number 8500)

wireshark has been updated to 1.6.14 to fix bugs and security issues : Vulnerabilities fixed : - The sFlow dissector could go into an infinite loop. wnpa-sec-2012-32 CVE-2012-6054: The SCTP dissector could go into an infinite loop. wnpa-sec-2012-33 CVE-2012-6056: The MS-MMS dissector could crash...