1276 matches found
Linux Kernel auto-reap ptraced子进程本地拒绝服务漏洞
BUGTRAQ ID: 15625 CVECAN ID: CVE-2005-3784 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel对系统进程的处理上存在问题，本地攻击者可能利用此漏洞进行拒绝服务攻击。 漏洞存在于signal.c文件中，内核对子进程执行auto-reap操作时，操作对象包含了已经被ptrace附着的进程，这可能导致ptrace引用混乱，允许本地攻击者触发拒绝服务问题。 Linux kernel = 2.6.15-rc2 S.u.S.E. Linux Enterprise Server 9 S.u.S.E. Linux...
RHEL 4 : kernel (RHSA-2006:0575)
Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system...
CVE-2005-0136
Technical details for CVE-2005-0136 are not publicly available in the provided documents. Please monitor for updates in the connected feeds for affected products, components, and remediation information; no concrete exploit vectors, affected versions, or fixes are specified here.
CVE-2005-0136
The Linux kernel before 2.6.11 on the Itanium IA64 platform has certain "ptrace corner cases" that allow local users to cause a denial of service crash via crafted syscalls, possibly related to MCA/INIT, a different vulnerability than CVE-2005-1761...
CVE-2004-0997
CVE-2004-0997 is a local privilege-escalation vulnerability in the MIPS ptrace assembly code of the Linux kernel 2.4.x prior to 2.4.17. The connected Debian advisories (DSA-1067-1 and DSA-1070-1) reference this CVE among a list of kernel vulnerabilities and indicate remediation via updates to ker...
Mandrake Linux Security Advisory : kernel (MDKSA-2006:086)
A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Prior to Linux kernel 2.6.16.5, the kernel does not properly handle uncanonical return addresses on Intel EM64T CPUs which causes the kernel exception handler to run on the user stack with the wrong GS...
CVE-2006-1052
The selinuxptrace logic in hooks.c in SELinux for Linux 2.6.6 allows local users with ptrace permissions to change the tracer SID to an SID of another process...
Code injection
The selinuxptrace logic in hooks.c in SELinux for Linux 2.6.6 allows local users with ptrace permissions to change the tracer SID to an SID of another process...
CVE-2006-1052
The selinuxptrace logic in hooks.c in SELinux for Linux 2.6.6 allows local users with ptrace permissions to change the tracer SID to an SID of another process...
ChangeLog-2.6.16.6
commit 37863c8a9b7b0261ec76daad8afffe9ab5314794 Author: Greg Kroah-Hartman [email protected] Date: Mon Apr 17 13:36:51 2006 -0700 Linux 2.6.16.6 commit 512dba41bae0ec8de72269167f23b75a4770097d Author: Hugh Dickins [email protected] Date: Wed Apr 12 14:34:27 2006 -0700 PATCH shmat: stop mprotect from...
Design/Logic Flaw
Linux kernel 2.6.16-rc2 and earlier, when running on x8664 systems with preemption enabled, allows local users to cause a denial of service oops via multiple ptrace tasks that perform single steps, which can cause corruption of the DEBUGSTACK stack during the dodebug function call...
CVE-2006-1066
Linux kernel 2.6.16-rc2 and earlier, when running on x8664 systems with preemption enabled, allows local users to cause a denial of service oops via multiple ptrace tasks that perform single steps, which can cause corruption of the DEBUGSTACK stack during the dodebug function call...
CVE-2006-1066
Linux kernel 2.6.16-rc2 and earlier, when running on x8664 systems with preemption enabled, allows local users to cause a denial of service oops via multiple ptrace tasks that perform single steps, which can cause corruption of the DEBUGSTACK stack during the dodebug function call...
CVE-2006-1066
Linux kernel 2.6.16-rc2 and earlier, when running on x8664 systems with preemption enabled, allows local users to cause a denial of service oops via multiple ptrace tasks that perform single steps, which can cause corruption of the DEBUGSTACK stack during the dodebug function call...
CVE-2006-1066
CVE-2006-1066 is tied to the Linux kernel prior to 2.6.16 on x86_64 with preemption enabled. The vulnerability allows a local attacker to trigger a denial of service (oops) by using multiple ptrace tasks performing single steps, which can cause corruption of the DEBUG_STACK stack during the do_de...
SCO Unixware 7.1.3 - ptrace Local Privilege Escalation
SCO Unixware 7.1.3 - ptrace Local Privilege Escalation / SCO Unixware 7.1.3 ptrace local root exploit ============================================ SCO Unixware 7.1.3 kernel allows unprivledged users to debug binaries. The condition can be exploited by an attacker when he has execute permissions t...
SCO Unixware 7.1.3 (ptrace) Local Privilege Escalation Exploit
Exploit for sco platform in category local exploits ============================================================== SCO Unixware 7.1.3 ptrace Local Privilege Escalation Exploit ============================================================== / SCO Unixware 7.1.3 ptrace local root exploit...
SCO Unixware 7.1.3 - 'ptrace' Local Privilege Escalation
/ SCO Unixware 7.1.3 ptrace local root exploit ============================================ SCO Unixware 7.1.3 kernel allows unprivledged users to debug binaries. The condition can be exploited by an attacker when he has execute permissions to a file which has the suid bit set. Example. $ uname -...
iDefense Security Advisory 02.24.06: SCO Unixware Setuid ptrace Local Privilege Escalation Vulnerability
SCO Unixware Setuid ptrace Local Privilege Escalation Vulnerability iDefense Security Advisory 02.24.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=395 February 24, 2006 I. BACKGROUND SCO Unixware is a Unix operating system that runs on many OEM platforms. More information...