Debian DSA-1017-1 : kernel-source-2.6.8 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2004-1017 Multiple overflows exist in the ioedgepor...

Debian DSA-1183-1 : kernel-source-2.4.27 - several vulnerabilities

Several security related problems have been discovered in the Linux kernel which may lead to a denial of service or even the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-4798 A buffer overflow in NFS readlink handling...

DSA-1183-1 kernel-source-2.4.27 - several vulnerabilities

Bulletin has no description...

CentOS 3 / 4 : wireshark (CESA-2006:0658)

New Wireshark packages that fix various security vulnerabilities are now available. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Bugs were found in...

security flaw

Unspecified vulnerability in the SCSI dissector in Wireshark formerly Ethereal 0.99.2 allows remote attackers to cause a denial of service crash via unspecified vectors...

Low: Red Hat Security Advisory: wireshark security update

New Wireshark packages that fix various security vulnerabilities are now available. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Bugs were found in...

GLSA-200608-26 : Wireshark: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200608-26 Wireshark: Multiple vulnerabilities The following vulnerabilities have been discovered in Wireshark. Firstly, if the IPsec ESP parser is used it is susceptible to off-by-one errors, this parser is disabled by default;...

Wireshark: Multiple vulnerabilities

Background Wireshark is a feature-rich network protocol analyzer. Description The following vulnerabilities have been discovered in Wireshark. Firstly, if the IPsec ESP parser is used it is susceptible to off-by-one errors, this parser is disabled by default; secondly, the SCSI dissector is...

CVE-2006-4330

Unspecified vulnerability in the SCSI dissector in Wireshark formerly Ethereal 0.99.2 allows remote attackers to cause a denial of service crash via unspecified vectors...

CVE-2006-4330

Unspecified vulnerability in the SCSI dissector in Wireshark formerly Ethereal 0.99.2 allows remote attackers to cause a denial of service crash via unspecified vectors...

CVE-2006-4330

Unspecified vulnerability in the SCSI dissector in Wireshark formerly Ethereal 0.99.2 allows remote attackers to cause a denial of service crash via unspecified vectors...

Multiple problems in Wireshark (Ethereal®) versions 0.7.9 to 0.99.2

Summary Name: Multiple problems in Wireshark Ethereal® versions 0.7.9 to 0.99.2 Docid: wnpa-sec-2006-02 Date: August 23, 2006 Versions affected: 0.7.9 up to and including 0.99.2 Details Description Wireshark 0.99.3 fixes the following vulnerabilities: The SCSI dissector could crash. Versions...

SuSE Linux Kernel非授权操作SCS设备固件漏洞

BUGTRAQ ID: 11784 CVECAN ID: CVE-2004-1190 SuSE Linux是一款开放源代码Linux系统。 SuSE Linux对SCSI设备接口的管理存在漏洞，本地攻击者可能利用此漏洞非授权修改破坏设备的固件。 SuSE Linux可能允许本地攻击者覆盖小型计算机系统接口（SCSI）设备的固件。拥有只读访问权限的本地攻击者可以向SCSI设备发送SCSI命令覆盖固件，导致设备永久的不可恢复的失效，可能必须送回厂商才能修复。 S.u.S.E. Linux Enterprise Server 9 S.u.S.E. Linux 9.0 RedHat ------...

Linux Kernel SCSI ProcFS拒绝服务漏洞

BUGTRAQ ID: 14790 CVECAN ID: CVE-2005-2800 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的SCSI驱动的procfs接口中存在拒绝服务漏洞。本地攻击者可以反复读取/proc/scsi/sg/devices，而next iterator返回NULL或错误时没有正确的处理这种情况，耗尽kernel内存，导致拒绝服务。 Linux kernel = 2.6.13 Ubuntu Linux 5.0 4 powerpc Ubuntu Linux 5.0 4 i386 Ubuntu Linux 5.0 4...

kernel security update

CentOS Errata and Security Advisory CESA-2006:0437 Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 3. This is the eighth regular update. This security advisory has been rated as having important security impact by the Red Ha...

CentOS 4 : kernel (CESA-2006:0132)

Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 4. This is the third regular update. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Linux kernel handles the basic...

USN-302-1: Linux kernel vulnerabilities

An integer overflow was discovered in the doreplace function. A local user process with the CAPNETADMIN capability could exploit this to execute arbitrary commands with full root privileges. However, none of Ubuntu's supported packages use this capability with any non-root user, so this only...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:086)

A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Prior to Linux kernel 2.6.16.5, the kernel does not properly handle uncanonical return addresses on Intel EM64T CPUs which causes the kernel exception handler to run on the user stack with the wrong GS...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:059)

A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : sysctl.c in the Linux kernel prior to 2.6.14.1 allows local users to cause a Denial of Service kernel oops and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the...

kernel security update

CentOS Errata and Security Advisory CESA-2006:0132 Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 4. This is the third regular update. This update has been rated as having moderate security impact by the Red Hat Security...