CVE-2005-4552

The CVE-2005-4552 entry applies to Sun Solaris PC NetLink 2.0, affecting the (1) slsmgr and (2) slsadmin programs. The root issue is insecure handling of temporary files, which allows local users to gain privileges. The description does not specify version ranges beyond PC NetLink 2.0, nor provid...

Sun Solaris PC Netlink symbolic links problem

"/opt/lanman/sbin/slsmgr" and "/etc/init.d/slsadmin" symbolic links problem...

[SA18230] Sun Solaris PC NetLink Insecure File Handling Vulnerability

TITLE: Sun Solaris PC NetLink Insecure File Handling Vulnerability SECUNIA ADVISORY ID: SA18230 VERIFY ADVISORY: http://secunia.com/advisories/18230/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Sun Solaris PC Netlink 2.x http://secunia.com/product/6667/...

Fedora Core 1 : iproute-2.4.7-13.2 (2004-115)

This update of the iproute package fixes a security problem found in netlink. See CVE-2003-0856. All users of the netlink application are very strongly advised to update to these latest packages. - Thu May 06 2004 Phil Knirsch 2.4.7-13.2 - Built security errata version for FC1. - Wed Apr 21 2004...

Fedora Core 1 : glibc-2.3.2-101.1 (2003-002)

Herbert Xu reported that various applications can accept spoofed messages sent on the kernel netlink interface by other users on the local machine. This could lead to a local denial of service attack. The glibc function getifaddrs uses netlink and could therefore be vulnerable to this issue. The...

RHEL 3 : glibc (RHSA-2003:334)

Updated glibc packages that resolve a vulnerability and address several bugs are now available. The glibc packages contain GNU libc, which provides standard system libraries. Herbert Xu reported that various applications can accept spoofed messages sent on the kernel netlink interface by other...

RHEL 2.1 / 3 : iproute (RHSA-2003:317)

Updated iproute packages that close a locally-exploitable denial of service vulnerability are now available. The iproute package contains advanced IP routing and network device configuration tools. Herbert Xu reported that iproute can accept spoofed messages sent on the kernel netlink interface b...

RHEL 3 : quagga (RHSA-2003:315)

Updated Quagga packages that close a locally-exploitable denial of service vulnerability are now available. Quagga is an open source implementation of TCP/IP routing software. Herbert Xu reported that Quagga can accept spoofed messages sent on the kernel netlink interface by other users on the...

DSA-492 iproute - denial of service

Bulletin has no description...

CVE-2003-0857

The 1 ipqread and 2 ipulogread functions in iptables allow local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface...

CVE-2003-0856

iproute 2.4.7 and earlier allows local users to cause a denial of service via spoofed messages as other users to the kernel netlink interface...

CVE-2003-0859

The getifaddrs function in GNU libc glibc 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface...

CVE-2003-0858

Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface...

Low: Red Hat Security Advisory: : Updated iproute packages fix local security vulnerability

Updated iproute packages that close a locally-exploitable denial of service vulnerability are now available. The iproute package contains advanced IP routing and network device configuration tools. Herbert Xu reported that iproute can accept spoofed messages sent on the kernel netlink interface b...

CVE-2003-0856

CVE-2003-0856 affects iproute up to version 2.4.7, where local users could trigger a denial of service by sending spoofed messages through the kernel netlink interface. The issue is a local-privilege-path denial of service caused by unverified netlink messages. Public advisories (Debian DSA-492, ...

CVE-2003-0856

iproute 2.4.7 and earlier allows local users to cause a denial of service via spoofed messages as other users to the kernel netlink interface...

CVE-2003-0859

The getifaddrs function in GNU libc glibc 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface...

CVE-2003-0859

CVE-2003-0859 : Affected GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages to the kernel netlink interface via getifaddrs. Public advisories (Red Hat RHSA-2003:334/325, Fedora, OpenBSD/OpenPKG, SUSE, Slackware, etc.) describe the issue ...

CVE-2003-0858

Removed by vendor...

security flaw

Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface...