Ubuntu 5.10 / 6.06 LTS / 6.10 : avahi vulnerability (USN-380-1)

Steve Grubb discovered that netlink messages were not being checked for their sender identity. This could lead to local users manipulating the Avahi service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has...

openSUSE 10 Security Update : avahi (avahi-2217)

Avahi did not check that the received netlink messages originated from the kernel. This could be used by local attackers to inject packets into avahi which could be used to inject bad netlink messages into Avahi, confusing its routing code or worse. CVE-2006-5461 %NASLMINLEVEL 70300 C Tenable...

USN-489-1: Linux kernel vulnerabilities

A flaw was discovered in dvb ULE decapsulation. A remote attacker could send a specially crafted message and cause a denial of service. CVE-2006-4623 The compatsysmount function allowed local users to cause a denial of service when mounting a smbfs filesystem in compatibility mode. CVE-2006-7203...

Mandrake Linux Security Advisory : avahi (MDKSA-2006:215)

Steve Grubb discovered that netlink messages were not being checked for their sender identity. This could lead to local users manipulating the Avahi service. Packages have been patched to correct this issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Fedora Core 6 : avahi-0.6.15-1.fc6 (2006-1340)

Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi. Note that Tenable Network Security has extracted the preceding description block directly fr...

DEBIAN-CVE-2006-5461

Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi...

CVE-2006-5461

Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi...

CVE-2006-5461

Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi...

USN-380-1: Avahi vulnerability

Steve Grubb discovered that netlink messages were not being checked for their sender identity. This could lead to local users manipulating the Avahi service...

[Full-disclosure] [USN-380-1] Avahi vulnerability

=========================================================== Ubuntu Security Notice USN-380-1 November 11, 2006 avahi vulnerability CVE-2006-5461 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 5.10 Ubuntu 6.06 LTS Ubuntu...

CVE-2005-4635

The nlfibinput function in fibfrontend.c in the Linux kernel before 2.6.15 does not check for valid lengths of the header and payload, which allows remote attackers to cause a denial of service invalid memory reference via malformed fiblookup netlink messages...

CVE-2005-4635

The nlfibinput function in fibfrontend.c in the Linux kernel before 2.6.15 does not check for valid lengths of the header and payload, which allows remote attackers to cause a denial of service invalid memory reference via malformed fiblookup netlink messages...

CVE-2005-4635

The nlfibinput function in fibfrontend.c in the Linux kernel before 2.6.15 does not check for valid lengths of the header and payload, which allows remote attackers to cause a denial of service invalid memory reference via malformed fiblookup netlink messages...