DSA-1915-1 linux-2.6 - several vulnerabilities

Bulletin has no description...

Linux Kernel 2.6.31-rc4 - nfs4_proc_lock() Denial of Service

Linux Kernel 2.6.31-rc4 - nfs4proclock Denial of Service / Description of problem: execution of a particular program from the Arachne suite reliably causes a kernel panic due to a NULL-pointer dereference in nfs4proclock. Version-Release number of selected component if applicable:...

Linux Kernel < 2.6.31-rc4 nfs4_proc_lock() Denial of Service

No description provided by source. Description of problem: execution of a particular program from the Arachne suite reliably causes a kernel panic due to a NULL-pointer dereference in nfs4proclock. Version-Release number of selected component if applicable: 2.6.18-164.2.1.el5 How reproducible:...

Linux Kernel < 2.6.31-rc4 nfs4_proc_lock() Denial of Service

Exploit for unknown platform in category dos / poc ============================================================ Linux Kernel :nfs:nfs4proclock+0x21f/0x3ad PGD 1026eec067 PUD 1026f2f067 PMD 0 Oops: 0000 1 SMP last sysfs file: /block/dm-1/range CPU 0 Modules linked in: ipmidevintf ipmisi...

Linux Kernel &lt; 2.6.31-rc4 - &#039;nfs4_proc_lock()&#039; Denial of Service

/ Description of problem: execution of a particular program from the Arachne suite reliably causes a kernel panic due to a NULL-pointer dereference in nfs4proclock. Version-Release number of selected component if applicable: 2.6.18-164.2.1.el5 How reproducible: always on NFSv4 mounted directories...

Design/Logic Flaw

nfs.ext in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly use the nfsportmon setting, which allows remote attackers to bypass intended access restrictions for NFSv4 shares via unspecified vectors...

Design/Logic Flaw

gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to bypass intended access restrictions for Kerberized NFSv4 shares via unspecified vectors...

CVE-2009-3516

gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to bypass intended access restrictions for Kerberized NFSv4 shares via unspecified vectors...

CVE-2009-3517

nfs.ext in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly use the nfsportmon setting, which allows remote attackers to bypass intended access restrictions for NFSv4 shares via unspecified vectors...

CVE-2009-3517

nfs.ext in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly use the nfsportmon setting, which allows remote attackers to bypass intended access restrictions for NFSv4 shares via unspecified vectors...

CVE-2009-3516

gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to bypass intended access restrictions for Kerberized NFSv4 shares via unspecified vectors...

CVE-2009-3517

CVE-2009-3517 concerns IBM AIX NFS client/server handling where nfs.ext on AIX 5.3.x (5.3.0–5.3.9) and 6.1.x (6.1.0–6.1.2) does not properly enforce nfs_portmon, allowing remote attackers to bypass access restrictions on NFSv4 shares via unspecified vectors. The root cause is improper use of the ...

CVE-2009-3516

CVE-2009-3516 affects IBM AIX: gssd in AIX 5.3.x (up to 5.3.9) and 6.1.x (up to 6.1.2) does not properly handle the NFSv4 Kerberos credential cache, enabling local users to bypass access restrictions on Kerberized NFSv4 shares via unspecified vectors. Impact per CVSS v2 is High (local, no auth, f...

Linux kernel 'O_EXCL' NFSv4特权提升漏洞

Bugraq ID: 36472 CNCAN ID：CNCAN-2009092205 Linux是一款开放源代码的操作系统。 Linux NFSv4处理doopenlookup存在问题，本地攻击者可以利用漏洞以其他用户权限执行任意代码。 目前没有详细漏洞细节提供。 Linux kernel 2.6.19 -rc4 Linux kernel 2.6.19 -rc3 + Trustix Secure Enterprise Linux 2.0 + Trustix Secure Linux 2.2 + Trustix Secure Linux 2.1 + Trustix Secure Linux...

Linux Kernel O_EXCL NFSv4本地权限提升漏洞

BUGTRAQ ID: 36472 CVE ID: CVE-2009-3286 Linux Kernel是开放源码操作系统Linux所使用的内核。 当OEXCL创建文件失败时，Linux Kernel的NFSv4没有正确地清除inode。这导致以不安全的设置（如setuid位）创建文件，本地用户可以通过执行doopenpermission函数获得权限提升。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://git.kernel.org/linus/af85852d...

CVE-2009-3286

NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an OEXCL create fails, which causes files to be created with insecure settings such as setuid bits, and possibly allows local users to gain privileges, related to the execution of the...

Design/Logic Flaw

NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an OEXCL create fails, which causes files to be created with insecure settings such as setuid bits, and possibly allows local users to gain privileges, related to the execution of the...

CVE-2009-3286

NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an OEXCL create fails, which causes files to be created with insecure settings such as setuid bits, and possibly allows local users to gain privileges, related to the execution of the...

CVE-2009-3286

CVE-2009-3286 affects the Linux kernel 2.6.18 (and possibly other versions) where NFSv4 O_EXCL creates are not properly cleaned up, causing files to be created with insecure settings (e.g., setuid bits) and potentially enabling local privilege escalation. The issue is tied to the do_open_permissi...

CVE-2009-3286

NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an OEXCL create fails, which causes files to be created with insecure settings such as setuid bits, and possibly allows local users to gain privileges, related to the execution of the...