Linux Kernel set_mempolicy本地拒绝服务漏洞

BUGTRAQ ID: 16135 CVECAN ID: CVE-2005-3358 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的setmempolicy系统调用实现上存在漏洞，本地攻击者可能利用此漏洞对系统进行拒绝服务攻击。 漏洞存在于“mm/mempolicy.c”文件中，本地攻击者以掩码0调用setmempolicy会导致某些64位的系统崩溃。 Linux kernel 2.6.15 RedHat Linux WS 4 RedHat Linux ES 4 RedHat Linux Desktop 4 RedHat Linux AS ...

Linux Kernel IP6_Input_Finish远程拒绝服务漏洞

BUGTRAQ ID: 16043 CVECAN ID: CVE-2005-3858 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的ip6inputfinish函数中存在内存泄露漏洞，远程攻击者可能利用此漏洞对服务器进行拒绝服务攻击。 远程攻击者可以发送特制的IPv6报文导致耗尽所有可用的Kernel内存，造成拒绝服务。 Linux kernel = 2.6.12.5 Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： Linux Upgrade linux-2.6.12.6.tar.bz2...

Linux Kernel ICMP_Push_Reply远程拒绝服务漏洞

BUGTRAQ ID: 16044 CVECAN ID: CVE-2005-3848 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在处理ICMP通讯时存在漏洞，远程攻击者可能利用此漏洞导致主机拒绝服务。 如果icmppushreply中的ipappenddata调用失败的话，就必须调用ipflushpendingframes。否则，inetskicmpsocket-sk-cork.rt就不会调用iprtput，导致无法释放路由和netdevice。远程攻击者可以通过发送大量特制报文导致耗尽所有内存。 Linux kernel =...

Linux Kernel ZLib无效内存访问本地拒绝服务漏洞

BUGTRAQ ID: 14719 CVECAN ID: CAN-2005-2458 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的zlib例程的inflate.c中存在漏洞。如果用户打开了特制的压缩文件的话，就可能导致kernel崩溃。 Linux kernel 2.6.12.5 Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： Linux linux-2.6.12.5.tar.gz...

Linux Kernel XFRM数组索引溢出漏洞

BUGTRAQ ID: 14477 CVECAN ID: CAN-2005-2456 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的xfrmuser.c文件的xfrmskpolicyinsert函数中存在数组索引溢出。如果将大于XFRMPOLICYOUT的p-dir值用作sock-skpolicy数组的索引的话，就可以触发这个漏洞，导致拒绝服务或执行任意代码。 Linux kernel 2.6.13-rc4 S.u.S.E. Linux Enterprise Server 9 S.u.S.E. Linux 9.3 S.u.S.E. Linu...

Linux Kernel SCSI ProcFS拒绝服务漏洞

BUGTRAQ ID: 14790 CVECAN ID: CVE-2005-2800 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的SCSI驱动的procfs接口中存在拒绝服务漏洞。本地攻击者可以反复读取/proc/scsi/sg/devices，而next iterator返回NULL或错误时没有正确的处理这种情况，耗尽kernel内存，导致拒绝服务。 Linux kernel = 2.6.13 Ubuntu Linux 5.0 4 powerpc Ubuntu Linux 5.0 4 i386 Ubuntu Linux 5.0 4...

RHEL 4 : gnupg (RHSA-2006:0615)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2006:0615 advisory. - GnuPG ParseComment Remote Buffer Overflow CVE-2006-3746 Note that Nessus has not tested for this issue but has instead relied only on the...

Setuid() - nproc limit the type of vulnerability of in-depth analysis-vulnerability warning-the black bar safety net

Setuid - nproc limit the type of vulnerability of in-depth analysis PST --------- Subject : Setuid - nproc limit the type of vulnerability of in-depth analysis --------- Author : [email protected] --------- Copyright : www.ph4nt0m.org www.secwiki.com --------- Date : 07/20/2006 ---------...

irb, ruby security update

CentOS Errata and Security Advisory CESA-2006:0604 Updated ruby packages that fix security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ruby is an interpreted scripting language for object-oriented programming. A...

CentOS 3 : initscripts (CESA-2006:0015)

Updated initscripts packages that fix a privilege escalation issue and several bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The initscripts package contains the basic system scripts used to boot your Red Hat system,...

In RedHat 9 on the overflow to obtain root demo-vulnerability warning-the black bar safety net

From recently to be black Server security analysis point of view, I find the user elevated permissions tool. He is using a Samba security vulnerability upgrade in order to ROOT. These days the server because you want to put to the public test, this time also installed a Samba server. The results ...

squirrelmail security update

CentOS Errata and Security Advisory CESA-2006:0283 An updated squirrelmail package that fixes three security and many other bug issues is now available. This update contains bug fixes of upstream squirrelmail 1.4.6 with some additional improvements to international language support. This update h...

RHEL 4 : gnupg (RHSA-2006:0266)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2006:0266 advisory. - security flaw CVE-2006-0049, CVE-2006-0455 Note that Nessus has not tested for these issues but has instead relied only on the application...

[Full-disclosure] Remote access to NeuSecure/Netcool backend database via web interface credentials leakage

-= DDSi Security Report =- March 8th, 2006 --------------------------------------------------------------------------------------------------------- Another credentials leak was found in Netcool/NeuSecure Security Information Management platform which leads to remote backend database access with...

[Full-disclosure] Password disclosure and remote access in Netcool/NeuSecure Security information management platform

Multiple security information disclosure paths and remote access Netcool/NeuSecure Security information management platform . Cleartext-storage of passwords in the configuration file Cleartext reporting of user password in the log Default backend Mysql database user and remote access. Laxed...

RHEL 4 : gnutls (RHSA-2006:0207)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2006:0207 advisory. - - libtasn1 buffer overflow CVE-2006-0645 Note that Nessus has not tested for this issue but has instead relied only on the application's...

oprofile.txt

Hello all, I recently audited a box with a software called OProfile http://oprofile.sourceforge.net/. "OProfile is a system-wide profiler for Linux systems, capable of profiling all running code at low overhead. OProfile is released under the GNU GPL. It consists of a kernel driver and a daemon f...

cups security update

CentOS Errata and Security Advisory CESA-2005:878 Updated CUPS packages that fix multiple security issues are now available for Red Hat Enterprise Linux. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS...

[Full-disclosure] DMA[2005-1112a] - 'Veritas Storage Foundation VCSI18N_LANG buffer overflow'

DMA2005-1112a - 'Veritas Storage Foundation VCSI18NLANG buffer overflow' Author: Kevin Finisterre Vendor: http://www.Veritas.com Product: 'Veritas Cluster Server for UNIX' References: http://www.digitalmunition.com/DMA2005-1112a.txt http://www.symantec.com/avcenter/security/Content/2005.11.08a.ht...

lynx security update

CentOS Errata and Security Advisory CESA-2005:839 An updated lynx package that corrects a security flaw is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Lynx is a text-based Web browser. An arbitrary command execute bug was fou...