2863 matches found
FreeBSD Security Advisory (FreeBSD-SA-10:04.jail.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-10:04.jail.asc SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
New local NT attack - TOCTOU (Time-Of-Check-to-Time-Of-Use race conditions)
If service hooks are used for argument filtering, race conditions are possible between argument check and actual sytem call...
Microsoft Windows内核空指针本地拒绝服务漏洞（MS10-021）
BUGTRAQ ID: 39297 CVE ID: CVE-2010-0234 Microsoft Windows是微软发布的非常流行的操作系统。 Windows内核中没有充分验证传递到Windows内核系统调用的注册表项参数。攻击者可以通过运行特制应用程序来利用该漏洞，导致系统变得没有响应并自动重新启动。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Vista Microsoft...
chmod"/etc/shadow", 0777 Shellcode33 Bytes
33 Bytes chmod"/etc/shadow", 0777 Shellcode. Shellcode exploit for linx86 platform [email protected] http://plasticsouptaste.blogspot.com Name: 33 bytes chmod"/etc/shadow", 0777 shellcode Platform: Linux x86 include "stdio.h" int mainint argc, char argv char shellcode...
Important: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5.2 Extended Update Support. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel...
Rising AntiVirus 2008/2009/2010 Local Privilege Escalation Exploit
RsNtGdi.sys not verify the Irp-UserBuffer address. Exploit code will restore all of the kernel SSDT hook Rising AntiVirus 2008 / 2009 / 2010 none include "stdafx.h" include "windows.h" enum SystemModuleInformation = 11 ; typedef struct ULONG Unknown1; ULONG Unknown2; PVOID Base; ULONG Size; ULONG...
CentOS 5 : kernel (CESA-2009:0473)
Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...
SuSE9 Security Update : Linux kernel (YOU Patch Number 12541)
This update fixes various security issues and some bugs in the SUSE Linux Enterprise 9 kernel. The following security bugs were fixed : - A race condition in the pipe2 systemcall could be used by local attackers to execute code. CVE-2009-3547 - On x8664 systems a information leak of high register...
PT-2009-3691 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue arises from the Windows kernel's failure to properly validate an argument passed to a system call, allowing local users to gain privileges via a crafted application...
Code injection
Unspecified vulnerability in the ZFS filesystem in Sun Solaris 10, and OpenSolaris snv100 through snv117, allows local users to bypass intended limitations of the filechownself privilege via certain uses of the chown system call...
CVE-2009-3706
CVE-2009-3706 affects the ZFS filesystem in Sun Solaris 10 and OpenSolaris snv_100–snv_117. A local attacker can bypass the file_chown_self privilege via certain uses of the chown system call, effectively bypassing intended limitations. The description does not specify concrete affected component...
Linux Kernel perf_counter_open()函数本地溢出漏洞
BUGTRAQ ID: 36423 CVECAN ID: CVE-2009-3234 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的kernel/perfcounter.c文件中的perfcopyattr函数存在缓冲区溢出漏洞。本地攻击者可以通过向perfcounteropen系统调用传送特制数据触发这个溢出，导致内核崩溃。 Linux kernel 2.6.31 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
kernel: execve: must clear current->clear_child_tid
The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current-clearchildtid pointer, which allows local users to cause a denial of service memory corruption or possibly gain privileges via a clone system call with CLONECHILDSETTID or...
Linux Kernel 2.4.x2.6.x (CentOS 4.85.3 RHEL 4.85.3 SuSE 10 SP211 Ubuntu 8.10) (PPC) - sock_sendpage() Local Privilege Escalation
Linux Kernel 2.4.x2.6.x CentOS 4.85.3 RHEL 4.85.3 SuSE 10 SP211 Ubuntu 8.10 PPC - socksendpage Local Privilege Escalation / Linux socksendpage NULL pointer dereference Copyright 2009 Ramon de Carvalho Valle This program is free software; you can redistribute it and/or modify it under the terms of...
Memory corruption
The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current-clearchildtid pointer, which allows local users to cause a denial of service memory corruption or possibly gain privileges via a clone system call with CLONECHILDSETTID or...
CVE-2009-2848
The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current-clearchildtid pointer, which allows local users to cause a denial of service memory corruption or possibly gain privileges via a clone system call with CLONECHILDSETTID or...
CVE-2009-2848
CVE-2009-2848 is confirmed in connected material as applicable to MiracleLinux kernel package 2.6.18-128.10AXS3, aligning with the Linux kernel vulnerability where execve does not properly clear current->clear_child_tid during thread creation/exit. This misbehavior can enable local users to ca...
HP-UX Update for ttrace(2) HPSBUX02450
Check for the Version of ttrace2 OpenVAS Vulnerability Test HP-UX Update for ttrace2 HPSBUX02450 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
HP-UX Update for ttrace(2) HPSBUX02450
Check for the Version of ttrace2 OpenVAS Vulnerability Test HP-UX Update for ttrace2 HPSBUX02450 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
