kernel: posix-cpu-timers: workaround to suppress the problems with mt exec

Race condition in the exitsignal function in kernel/exit.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vectors related to multithreaded exec, the use of a thread group leader in kernel/posix-cpu-timers.c, and the selection of a new thread group leader...

Visualizing Wi-Fi Networks Through Light

Today’s Image of the Day comes from a film posted on YOUrban. The film is an exploration of the typically intangible landscape of WiFi signals. They built a WiFi measuring rod that displays strength of signal in a vertical alignment of light bars. As they moved the rod, they used long-exposure...

Indian Hacker shared his video of hacking Microsoft Kinect Xbox to control Tata Sky !

The desire of remote free experience urged Harishankar Narayan a mechanical Engineer to hack into the Microsoft Kinect Xbox and control Tata Sky through Kinetic Movements. In a You Tube video which he has uploaded the man is seen controlling the Tata Sky with the movements of his hands. The...

Attack Can Extract Crypto Keys From Mobile Device Signals

SAN FRANCISCO–Many carriers and mobile providers are touting smartphones as the future of secure mobile payment systems, enabling users to pay for purchases with an app on their phones, and this already reality in many parts of Asia and Europe. However, researchers have discovered that some of th...

Linux Kernel 2.6.32 (Ubuntu 10.04) - '/proc' Handling SUID Privilege Escalation

Source: http://www.halfdog.net/Security/2011/SuidBinariesAndProcInterface/ proc Handling of Already Opened Files: Subvert The Stack Base Address Randomization With Suid-Binaries Problem description: Latest ubuntu lucid stock kernel 2.6.32-27-generic contains a bug that allows to keep attached to...

kernel: posix-cpu-timers: workaround to suppress the problems with mt exec

Race condition in the exitsignal function in kernel/exit.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vectors related to multithreaded exec, the use of a thread group leader in kernel/posix-cpu-timers.c, and the selection of a new thread group leader...

CVE-2011-0007

pimd 2.1.5 and possibly earlier versions allows user-assisted local users to overwrite arbitrary files via a symlink attack on 1 pimd.dump when a USR1 signal is sent, or 2 pimd.cache when USR2 is sent...

kernel: posix-cpu-timers: workaround to suppress the problems with mt exec

Race condition in the exitsignal function in kernel/exit.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vectors related to multithreaded exec, the use of a thread group leader in kernel/posix-cpu-timers.c, and the selection of a new thread group leader...

Linux Kernel 2.6.37 (RedHat Ubuntu 10.04) - Full-Nelson.c Local Privilege Escalation

Linux Kernel 2.6.37 RedHat Ubuntu 10.04 - Full-Nelson.c Local Privilege Escalation / Linux Kernel = 2.6.37 local privilege escalation by Dan Rosenberg @djrbliss on twitter Usage: gcc full-nelson.c -o full-nelson ./full-nelson This exploit leverages three vulnerabilities to get root, all of which...

CVE-2010-4248

Race condition in the exitsignal function in kernel/exit.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vectors related to multithreaded exec, the use of a thread group leader in kernel/posix-cpu-timers.c, and the selection of a new thread group leader...

gdm security and bug fix update

1:2.6.0.5-7.rhel4.19.el48.2 - Fix tcpwrappers on 64-bit arches Resolves: 625916 1:2.6.0.5-7.rhel4.19.el48.1 - Do less unsavory work after jumping out of a signal handler Resolves: 625818...

Digital Imagery Gets Encrypted Watermarking

A new approach to adding an encrypted watermark to digital images allows the an image to be validated against a pass key, according to research according to research published in the International Journal of Signal and Imaging Systems Engineering. Read the full article. Science Daily...

solaris/x86 SystemV killall command - 39 bytes

Exploit for solaris/x86 platform in category shellcode ============================================== solaris/x86 SystemV killall command - 39 bytes ============================================== / Title: Solaris/x86 - SystemV killall command - 39 bytes Author: Jonathan Salwan Web:...

Solaris/x86 - SystemV killall command - 39 bytes

Solaris/x86 - SystemV killall command - 39 bytes. Shellcode exploit for solaris platform / Title: Solaris/x86 - SystemV killall command - 39 bytes Author: Jonathan Salwan Web: http://www.shell-storm.org Twitter: http://twitter.com/jonathansalwan ! Database of shellcodes:...

RHEL 5 : openldap (RHSA-2010:0198)

Updated openldap packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

[SECURITY] Fedora 12 Update: sip-4.10.1-2.fc12

SIP is a tool for generating bindings for C++ classes so that they can be accessed as normal Python classes. SIP takes many of its ideas from SWIG bu t, because it is specifically designed for C++ and Python, is able to generate tighter bindings. SIP is so called because it is a small SWIG. SIP w...

CVE-2010-0003

The printfatalsignal function in kernel/signal.c in the Linux kernel before 2.6.32.4 on the i386 platform, when print-fatal-signals is enabled, allows local users to discover the contents of arbitrary memory locations by jumping to an address and then reading a log file, and might allow local use...

openSUSE Security Update : openssl-CVE-2009-4355.patch (openssl-CVE-2009-4355.patch-1834)

Incorrect use of an openssl cleanup function can lead to memory leaks in applications. For example an ssl enabled web server such as apache that uses php, curl and openssl leaks memory if a SIGHUP signal was sent to apache. The openssl cleanup function was made more robust to avoid memory leaks...

openSUSE Security Update : openssl-CVE-2009-4355.patch (openssl-CVE-2009-4355.patch-1833)

Incorrect use of an openssl cleanup function can lead to memory leaks in applications. For example an ssl enabled web server such as apache that uses php, curl and openssl leaks memory if a SIGHUP signal was sent to apache. The openssl cleanup function was made more robust to avoid memory leaks...

Linux Kernel 'print_fatal_signal()'本地信息泄漏漏洞

Bugraq ID: 37724 Linux是一款开放源代码的操作系统。 当print-fatal-signals启用时，通过简单的跳到用户空间的地址可Dump出任意内核可访问的内存。 或如果部分硬件在读的过程中可导致系统崩溃。 重要信号处理器会在执行地址Dump出16个字节，此地址完全可由ring 3级别用户控制。 另外，当跳到没有映射的地址时，将触发多大16个额外的无用页面错误，导致系统变慢或效率不高 此选项默认在系统中关闭，并且只存在在i386系统上。 Linux kernel 2.6.32 Linux kernel 2.6.31 5 Linux kernel 2.6.31 .2...