kernel: nfs: fix NFS v4 client handling of MAY_EXEC in nfs_permission

The nfspermission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomicopen is available, does not check execute aka EXEC or MAYEXEC permission bits, which allows local users to bypass permissions and execute files, as demonstrated by file...

RedHat Security Advisory RHSA-2009:1106

The remote host is missing updates to the Linux kernel announced in advisory RHSA-2009:1106. Security fixes: several flaws were found in the way the Linux kernel CIFS implementation handles Unicode strings. CIFS clients convert Unicode strings sent by a server to their local character sets, and...

RedHat Security Advisory RHSA-2009:1106

The remote host is missing updates to the Linux kernel announced in advisory RHSA-2009:1106. Security fixes: several flaws were found in the way the Linux kernel CIFS implementation handles Unicode strings. CIFS clients convert Unicode strings sent by a server to their local character sets, and...

kernel security update

CentOS Errata and Security Advisory CESA-2009:1106 Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages...

Mandriva Linux Security Advisory : kernel (MDVSA-2009:135)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The selinuxippostrouteiptablescompat function in security/selinux/hooks.c in the SELinux subsystem in the Linux kernel before 2.6.27.22, and 2.6.28.x before 2.6.28.10, when compatnet is enabled, omits calls to avchasperm...

RHEL 5 : kernel (RHSA-2009:1106)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1106 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security fixes: several flaws were found in the way th...

kernel security and bug fix update

2.6.18-128.1.14.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki,Guru Anbalagane orabug 6045759 - MM shrink zone patch John Sobecki,Chris Mason orabug 6086839 - NET Add xen pv/bonding netconsole support Tina yang orabug 6993043 bz 7258 - nfs convert ENETUNREACH to ENOTCONN Guru...

kernel: nfsd should drop CAP_MKNOD for non-root

nfsd in the Linux kernel before 2.6.28.9 does not drop the CAPMKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the rootsquash option...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

IBM AIX 'portmapper'远程拒绝服务漏洞

Bugraq ID: 35211 IBM AIX是一款商业性质的操作系统。 IBM AIX 'portmapper'存在安全问题，远程攻击者可以利用漏洞对依赖'portmapper'服务的NFS,NIS或其他子系统崩溃。 目前没有详细漏洞细节提供。 IBM AIX 5.3 可参考如下补丁信息： IBM AIX 5.3 IBM IZ50802.53TL8SP6.epkg.Z ftp://ftp.software.ibm.com/aix/efixes/iz50802/IZ50802.53TL8SP6.epkg.Z...

Design/Logic Flaw

Kerberos in Sun Solaris 8, 9, and 10, and OpenSolaris before snv117, does not properly manage credential caches, which allows local users to access Kerberized NFS mount points and Kerberized NFS shares via unspecified vectors...

CVE-2009-1933

CVE-2009-1933 affects Sun Solaris 8/9/10 and OpenSolaris prior to snv_117, where Kerberos credential caches are not managed correctly. The root cause is improper handling of Kerberos credentials, enabling local users to access Kerberized NFS mount points and shares via unspecified vectors. Impact...

CVE-2009-1933

Kerberos in Sun Solaris 8, 9, and 10, and OpenSolaris before snv117, does not properly manage credential caches, which allows local users to access Kerberized NFS mount points and Kerberized NFS shares via unspecified vectors...

RedHat Security Advisory RHSA-2009:1081

The remote host is missing updates to kernel-rt announced in advisory RHSA-2009:1081. These updated packages fix the following security issues: a buffer overflow flaw was found in the CIFSTCon function of the Linux kernel Common Internet File System CIFS implementation. When mounting a CIFS share...

RedHat Security Advisory RHSA-2009:1077

The remote host is missing updates to the kernel announced in advisory RHSA-2009:1077. This update includes backported fixes for two approved security issues. These issues only affected users of Red Hat Enterprise Linux 4.7 Extended Update Support, as they have already been addressed for users of...

RedHat Security Advisory RHSA-2009:1081

The remote host is missing updates to kernel-rt announced in advisory RHSA-2009:1081. These updated packages fix the following security issues: a buffer overflow flaw was found in the CIFSTCon function of the Linux kernel Common Internet File System CIFS implementation. When mounting a CIFS share...

kernel: nfsd should drop CAP_MKNOD for non-root

nfsd in the Linux kernel before 2.6.28.9 does not drop the CAPMKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the rootsquash option...

Solaris Update for /usr/lib/nfs/nfsd and /usr/lib/nfs/lockd 109784-03

Check for the Version of /usr/lib/nfs/nfsd and /usr/lib/nfs/lockd OpenVAS Vulnerability Test Solaris Update for /usr/lib/nfs/nfsd and /usr/lib/nfs/lockd 109784-03 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Solaris Update for NFS & autofs 113318-35

Check for the Version of NFS & autofs OpenVAS Vulnerability Test Solaris Update for NFS & autofs 113318-35 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Solaris Update for NFS & autofs 113318-35

Check for the Version of NFS & autofs OpenVAS Vulnerability Test Solaris Update for NFS & autofs 113318-35 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...