CVE-2009-1338

The CVE-2009-1338 issue is confirmed in the Linux kernel prior to 2.6.28, where the kill_something_info() function in kernel/signal.c did not respect PID namespaces when handling signals directed to PID -1. This allowed a local attacker to bypass namespace isolation and send signals to processes ...

Ubuntu: Security Advisory (USN-752-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Kernel < 2.6.29 exit_notify() Local Privilege Escalation Exploit

No description provided by source. !/bin/sh gw-notexit.sh: Linux kernel 2.6.29 exitnotify local root exploit by Milen Rangelov gat3way-at-gat3way-dot-eu Based on 'exitnotify' CAPKILL verification bug found by Oleg Nestorov. Basically it allows us to send arbitrary signals to a privileged suidroot...

Mandriva Update for drakx-net MDVA-2008:088 (drakx-net)

Check for the Version of drakx-net OpenVAS Vulnerability Test Mandriva Update for drakx-net MDVA-2008:088 drakx-net Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for phonon MDVA-2008:153 (phonon)

Check for the Version of phonon OpenVAS Vulnerability Test Mandriva Update for phonon MDVA-2008:153 phonon Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Mandriva Update for drakx-net MDVA-2008:088 (drakx-net)

Check for the Version of drakx-net OpenVAS Vulnerability Test Mandriva Update for drakx-net MDVA-2008:088 drakx-net Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Linux kernel minor signal handling vulnerability

The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONEPARENT flag, and then letting this new process exit...

Ubuntu: Security Advisory (USN-574-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for apache2 vulnerabilities USN-499-1

Ubuntu Update for Linux kernel vulnerabilities USN-499-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4991.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for apache2 vulnerabilities USN-499-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for linux-source-2.6.15 vulnerabilities USN-508-1

Ubuntu Update for Linux kernel vulnerabilities USN-508-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5081.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.15 vulnerabilities USN-508-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for linux-source-2.6.17/20/22 vulnerabilities USN-574-1

Ubuntu Update for Linux kernel vulnerabilities USN-574-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5741.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.17/20/22 vulnerabilities USN-574-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH...

Hackers can sniff keystrokes from thin air

By Elinor Mills, CNET Presenters at the CanSecWest security conference detailed on Thursday how they can sniff data by analyzing keystroke vibrations using a laser trained on a shiny laptop or through electrical signals coming from a PC connected to a PS/2 keyboard and plugged into a socket. Usin...

RedHat Update for kernel RHSA-2007:1049-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2007:1049-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

CVE-2009-0028

CVE-2009-0028 is a local vulnerability in the Linux kernel up to version 2.6.28 where the clone system call with CLONE_PARENT can allow an unprivileged child to spawn a second child and exit, enabling it to send arbitrary signals to the parent process. The MiracleLinux AXSA-2009-42:04 advisory ex...

Linux Kernel 2.6.x - Cloned Process CLONE_PARENT Local Origin Validation

Linux Kernel 2.6.x - Cloned Process CLONEPARENT Local Origin Validation / source: https://www.securityfocus.com/bid/33906/info The Linux kernel is prone to an origin-validation weakness when dealing with signal handling. This weakness occurs when a privileged process calls attacker-supplied...

Linux Kernel 2.6.x - Cloned Process 'CLONE_PARENT' Local Origin Validation

/ source: https://www.securityfocus.com/bid/33906/info The Linux kernel is prone to an origin-validation weakness when dealing with signal handling. This weakness occurs when a privileged process calls attacker-supplied processes as children. Attackers may exploit this to send arbitrary signals t...

Enomaly ECP多个安全漏洞

BUGTRAQ ID: 33544 CVECAN ID: CVE-2008-4990,CVE-2009-0390 Enomaly ECP（之前名为Enomalism）是用于管理虚拟机的软件。 ECP的enomalism2.sh中存在多个安全漏洞，本地攻击者可以通过符号链接攻击以root用户权限覆盖任意系统文件、向kill命令注入参数以终止任意进程或向进程发送信号，或导致虚拟机无法启动。 Enomaly Elastic Computing Platform 2.1 临时解决方法： 将PIDFILE从/tmp/enomalism2.pid更改为/var/run/enomalism2.pid。...

linux/x86 killall5 shellcode 34 bytes

No description provided by source. / Linux x86 | killall5 Shellcode 34 bytes Author: Jonathan Salwan js.rac.projet AT gmail.com Web: http://pollydevstorm.zapto.org killall5 is the SystemV killall command. It sends a signal to all processes except the processes in its own session, so it won't kill...

linux/x86 killall5 shellcode 34 bytes

Exploit for linux/x86 platform in category shellcode ===================================== linux/x86 killall5 shellcode 34 bytes ===================================== / Linux x86 | killall5 Shellcode 34 bytes Author: Jonathan Salwan : 8048054: 31 c0 xor %eax,%eax 8048056: 50 push %eax 8048057: 66...

linux/x86 - killall5 shellcode 34 bytes

linux/x86 killall5 shellcode 34 bytes. Shellcode exploit for linx86 platform / Linux x86 | killall5 Shellcode 34 bytes Author: Jonathan Salwan : 8048054: 31 c0 xor %eax,%eax 8048056: 50 push %eax 8048057: 66 68 6c 35 pushw $0x356c 804805b: 68 6c 6c 61 6c push $0x6c616c6c 8048060: 68 6e 2f 6b 69...