SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 8587)

The SUSE Linux Enterprise 10 SP4 kernel has been updated to fix various bugs and security issues. Security issues fixed : - The ip6fragqueue function in net/ipv6/reassembly.c in the Linux kernel allowed remote attackers to bypass intended network restrictions via overlapping IPv6 fragments...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 8583)

The SUSE Linux Enterprise 10 SP4 kernel has been updated to fix various bugs and security issues. Security issues fixed : - The ip6fragqueue function in net/ipv6/reassembly.c in the Linux kernel allowed remote attackers to bypass intended network restrictions via overlapping IPv6 fragments...

FreeBSD NFS server memory corruption

It's possible to call readdir on plain file...

[SECURITY] [DSA 2672-1] kfreebsd-9 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2672-1 [email protected] http://www.debian.org/security/ Florian Weimer May 22, 2013 http://www.debian.org/security/faq -...

Debian DSA-2672-1 : kfreebsd-9 - interpretation conflict

Adam Nowacki discovered that the new FreeBSD NFS implementation processes a crafted READDIR request which instructs to operate a file system on a file node as if it were a directory node, leading to a kernel crash or potentially arbitrary code execution. The kfreebsd-8 kernel in the oldstable...

SuSE 11.2 Security Update : nfs-client (SAT Patch Number 7717)

This update fixes a DNS spoofing problem with NFS rpc-gssd. CVE-2013-1923bnc813464 It also adds MOUNTDOPTIONS and GSSDOPTIONS to /etc/sysconfig/nfs. bnc818094, bnc816897 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

SuSE 10 Security Update : nfs-utils (ZYPP Patch Number 8569)

This update fixes a DNS spoofing problem with NFS rpc-gssd. CVE-2013-1923bnc813464 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid66553; scriptversion"1.6";...

RedHat Update for kernel RHSA-2013:0847-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2013:0847-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

[SECURITY] [DSA 2672-1] kfreebsd-9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2672-1 [email protected] http://www.debian.org/security/ Florian Weimer May 22, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2672-1 (kfreebsd-9 - interpretation conflict)

Adam Nowacki discovered that the new FreeBSD NFS implementation processes a crafted READDIR request which instructs to operate a file system on a file node as if it were a directory node, leading to a kernel crash or potentially arbitrary code execution. The kfreebsd-8 kernel in the oldstable...

DSA-2672-1 kfreebsd-9 - interpretation conflict

Bulletin has no description...

1

kernel 2.6.18-348.6.1.0.1 - oprofile x86, mm: Add getuserpagesfast orabug 14277030 - oprofile export getuserpagesfast function orabug 14277030 - oprofile oprofile, x86: Fix nmi-unsafe callgraph support orabug 14277030 - oprofile oprofile: use KMNMI slot for kmapatomic orabug 14277030 - oprofile...

Debian: Security Advisory (DSA-2672-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Security Advisory FreeBSD-SA-13:05.nfsserver [REVISED]

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-13:05.nfsserver Security Advisory The FreeBSD Project Topic: Insufficient input validation in the NFS server Category: core Module: nfsserver Announced: 2013-04-2...

CVE-2013-3266

The nfsrvdreaddir function in sys/fs/nfsserver/nfsnfsdport.c in the new NFS server in FreeBSD 8.0 through 9.1-RELEASE-p3 does not verify that a READDIR request is for a directory node, which allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code ...

Memory corruption

The nfsrvdreaddir function in sys/fs/nfsserver/nfsnfsdport.c in the new NFS server in FreeBSD 8.0 through 9.1-RELEASE-p3 does not verify that a READDIR request is for a directory node, which allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code ...

CVE-2013-3266

The nfsrvdreaddir function in sys/fs/nfsserver/nfsnfsdport.c in the new NFS server in FreeBSD 8.0 through 9.1-RELEASE-p3 does not verify that a READDIR request is for a directory node, which allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code ...

CVE-2013-3266

The CVE-2013-3266 issue affects the FreeBSD NFS server (nfsrvd_readdir in sys/fs/nfsserver/nfs_nfsdport.c) across FreeBSD 8.0–9.1-RELEASE-p3. Root cause: READDIR requests are not verified to be for a directory node, allowing a file to be interpreted as a directory. Impact: remote memory corruptio...

CVE-2013-3266

The nfsrvdreaddir function in sys/fs/nfsserver/nfsnfsdport.c in the new NFS server in FreeBSD 8.0 through 9.1-RELEASE-p3 does not verify that a READDIR request is for a directory node, which allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code ...

FreeBSD : FreeBSD -- NFS remote denial of service (e66a6e2f-b0d5-11e2-9164-0016e6dcb562)

Insufficient input validation in the NFS server allows an attacker to cause the underlying file system to treat a regular file as a directory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database...