[PRE-SA-2011-02] Information disclosure vulnerability in the OSF partition handling code of the Linux kernel

PRE-CERT Security Advisory ========================== Advisory: PRE-SA-2011-02 Released on: 16 Mar 2011 Last updated on: 16 Mar 2011 Affected product: Linux Kernel 2.4 and 2.6 Impact: disclosure of sensitive information Origin: storage devices Credit: Timo Warns PRESENSE Technologies GmbH CVE...

CVE-2011-1017

Heap-based buffer overflow in the ldmfragadd function in fs/partitions/ldm.c in the Linux kernel 2.6.37.2 and earlier might allow local users to gain privileges or obtain sensitive information via a crafted LDM partition table...

CVE-2011-1012

The ldmparsevmdb function in fs/partitions/ldm.c in the Linux kernel before 2.6.38-rc6-git6 does not validate the VBLK size value in the VMDB structure in an LDM partition table, which allows local users to cause a denial of service divide-by-zero error and OOPS via a crafted partition table...

Heap overflow

Heap-based buffer overflow in the ldmfragadd function in fs/partitions/ldm.c in the Linux kernel 2.6.37.2 and earlier might allow local users to gain privileges or obtain sensitive information via a crafted LDM partition table...

Design/Logic Flaw

The ldmparsevmdb function in fs/partitions/ldm.c in the Linux kernel before 2.6.38-rc6-git6 does not validate the VBLK size value in the VMDB structure in an LDM partition table, which allows local users to cause a denial of service divide-by-zero error and OOPS via a crafted partition table...

Buffer overflow

Buffer overflow in the macpartition function in fs/partitions/mac.c in the Linux kernel before 2.6.37.2 allows local users to cause a denial of service panic or possibly have unspecified other impact via a malformed Mac OS partition table...

CVE-2011-1010

Buffer overflow in the macpartition function in fs/partitions/mac.c in the Linux kernel before 2.6.37.2 allows local users to cause a denial of service panic or possibly have unspecified other impact via a malformed Mac OS partition table...

CVE-2011-1012

The ldmparsevmdb function in fs/partitions/ldm.c in the Linux kernel before 2.6.38-rc6-git6 does not validate the VBLK size value in the VMDB structure in an LDM partition table, which allows local users to cause a denial of service divide-by-zero error and OOPS via a crafted partition table...

PT-2011-2812 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.37.2 Description: The issue is related to a buffer overflow in the mac partition function, located in fs/partitions/mac.c. This can be exploited by local users through a malformed Mac OS partition table,...

PT-2011-2813 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.38-rc6-git6 Description: The issue is related to the ldm parse vmdb function in the Linux kernel, which does not validate the VBLK size value in the VMDB structure in an LDM partition table. This allows loca...

CVE-2011-1010

Buffer overflow in the macpartition function in fs/partitions/mac.c in the Linux kernel before 2.6.37.2 allows local users to cause a denial of service panic or possibly have unspecified other impact via a malformed Mac OS partition table...

PT-2011-1080 · Suse +1 · Suse Linux Enterprise +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39.1 Description: The issue is related to the ldm frag add function in fs/partitions/ldm.c, which does not properly handle memory allocation for non-initial fragments. This might allow local users to conduct...

CVE-2011-1012

The ldmparsevmdb function in fs/partitions/ldm.c in the Linux kernel before 2.6.38-rc6-git6 does not validate the VBLK size value in the VMDB structure in an LDM partition table, which allows local users to cause a denial of service divide-by-zero error and OOPS via a crafted partition table...

CVE-2011-1017

Heap-based buffer overflow in the ldmfragadd function in fs/partitions/ldm.c in the Linux kernel 2.6.37.2 and earlier might allow local users to gain privileges or obtain sensitive information via a crafted LDM partition table...

[PRE-SA-2011-01] Multiple Linux kernel vulnerabilities in partition handling code of LDM and MAC partition tables

PRE-CERT Security Advisory Advisory: PRE-SA-2011-01 Released on: 23 Feb 2011 Last updated on: 23 Feb 2011 Affected product: Linux Kernel 2.4 and 2.6 Impact: - privilege Escalation - denial-of-service - disclosure of sensitive information Origin: storage devices CVE Identifier: - CVE-2011-1010...

[SECURITY] Fedora 12 Update: pam_mount-2.5-1.fc12

This module is aimed at environments with central file servers that a user wishes to mount on login and unmount on logout, such as semi-diskless stations where many users can logon. The module also supports mounting local filesystems of any kind the normal mount utility supports, with extra code ...

IIS5.1 Directory Authentication Bypass by using “:$I30:$Index_Allocation”

Description: Although IIS5 is very old, finding one is not impossible! Therefore, I want to introduce a technique to bypass the IIS authentication methods on a directory. This vulnerability is because of using Alternate Data Stream to open a protected folder. All of IIS authentication methods can...

Test System if cryptsetup is installed and the SWAP Partition encrypted

Test System if cryptsetup is installed and the SWAP Partition is encrypted. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Test System if cryptsetup is installed and the SWAP Partition encrypted

Test System if cryptsetup is installed and the SWAP Partition encrypted. OpenVAS Vulnerability Test $Id: GSHBSSHcryptsetupswap.nasl 7061 2017-09-05 11:50:40Z teissa $ Test System if cryptsetup is installed and the SWAP Partition encrypted Authors: Thomas Rotter Copyright: Copyright c 2010 Greenbo...

kernel security and bug fix update

2.4.21-63.0.0.0.1.EL - add directio support for qla drivers herb ora 6346849 - support PT Quad card ora 5751043 - io to nfs partition hangs ora 5088963 - add entropy for bnx2 nic ora 5931647 - avoid large allocation-fragmentation in MTU zab - fix clear highpage wli 2.4.21-63.EL - fs: fix pipe nul...