SAP DB / MaxDB Cons Program Arbitrary Command Execution

The version of SAP DB / MaxDB installed on the remote host fails to sanitize user-supplied input to the 'show' and 'execsdbinfo' commands before passing it to a 'system' call. An unauthenticated, remote attacker can leverage this issue to execute arbitrary commands on the affected host subject to...

SOL8171 - Linux kernel IA32 System Call vulnerability - CVE-2007-4573

Vulnerability description This security advisory describes a vulnerability in the Linux kernel which may allow local users to gain elevated privileges using the IA32 system call emulation functionality on 64-bit platforms. Information about this advisory is available at the following location:...

RISE-2007004.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Apple Mac OS X 10.4.x Kernel i386setldt Integer Overflow Vulnerability http://risesecurity.org/advisory/RISE-2007004/ Published: November 16, 2007 Updated: November 16, 2007 INTRODUCTION There exists a vulnerability within an architecture dependent...

Mandrake Linux Security Advisory : kernel (MDKSA-2007:195)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : A stack-based buffer overflow in the random number generator could allow local root users to cause a denial of service or gain privileges by setting the default wakeup threshold to a value greater than the output pool si...

openSUSE 10 Security Update : kernel (kernel-2705)

This kernel update fixes the following security problems : - CVE-2006-5751: An integer overflow in the networking bridge ioctl starting with Kernel 2.6.7 could be used by local attackers to overflow kernel memory buffers and potentially escalate privileges 222656 - CVE-2006-6106: Multiple buffer...

openSUSE 10 Security Update : kernel (kernel-4503)

This kernel update fixes the following security problems : - CVE-2007-4571: An information disclosure vulnerability in the ALSA driver can be exploited by local users to read sensitive data from the kernel memory. - CVE-2007-4573: It was possible for local user to become root by exploitable a bug...

openSUSE 10 Security Update : kernel (kernel-2397)

This kernel update fixes the following security problems : - CVE-2006-4145: A bug within the UDF filesystem that caused machine hangs when truncating files on the filesystem was fixed. 186226 - A potential crash when receiving IPX packets was fixed. This problem is thought not to be exploitable...

CentOS 5 : kernel (CESA-2007:0936)

Updated kernel packages that fix a security issue in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. A flaw was foun...

RHEL 5 : kernel (RHSA-2007:0936)

Updated kernel packages that fix a security issue in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. A flaw was foun...

CentOS 4 : kernel (CESA-2007:0937)

Updated kernel packages that fix a security issue in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. A flaw was foun...

kernel security update

CentOS Errata and Security Advisory CESA-2007:0937 Updated kernel packages that fix a security issue in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic...

Linux Kernel 2.4/2.6 x86-64 System Call Emulation Exploit

No description provided by source. / exploit for x8664 linux kernel ia32syscall emulation bug, discovered by Wojciech Purczynski cliphatisec.pl by Robert Swiecki robertatswiecki.net Przemyslaw Frasunek venglinatfreebsd.lublin.pl Pawel Pisarczyk pawelatimmos.com.pl of ATM-Lab http://www.atm-lab.pl...

x86_64 syscall vulnerability

The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x8664 architecture, does not zero extend the eax register after the 32bit entry path to ptrace is used, which might allow local users to gain privileges by triggering an out-of-bounds...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix a security issue in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. A flaw was foun...

Linux Kernel 2.42.6 (x86-64) - System Call Emulation Privilege Escalation

Linux Kernel 2.42.6 x86-64 - System Call Emulation Privilege Escalation / exploit for x8664 linux kernel ia32syscall emulation bug, discovered by Wojciech Purczynski by Robert Swiecki Przemyslaw Frasunek Pawel Pisarczyk of ATM-Lab http://www.atm-lab.pl / include include include include include...

Linux Kernel 2.4/2.6 (x86-64) - System Call Emulation Privilege Escalation

/ exploit for x8664 linux kernel ia32syscall emulation bug, discovered by Wojciech Purczynski by Robert Swiecki Przemyslaw Frasunek Pawel Pisarczyk of ATM-Lab http://www.atm-lab.pl / include include include include include include include include include uint32t uid, euid, suid; static void...

COSEINC Linux Advisory #2: IA32 System Call Emulation Vulnerability

=== ABSTRACT ========================================================= Insufficient validation of general-purpose register in IA32 system call emulation code may lead to local system compromise on x8664 platform. === AFFECTED SOFTWARE ================================================ Linux 2.6 Lin...

Out-of-bounds

The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x8664 architecture, does not zero extend the eax register after the 32bit entry path to ptrace is used, which might allow local users to gain privileges by triggering an out-of-bounds...

CVE-2007-4573

The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x8664 architecture, does not zero extend the eax register after the 32bit entry path to ptrace is used, which might allow local users to gain privileges by triggering an out-of-bounds...

CVE-2007-4573

CVE-2007-4573 - Linux kernel IA32 system call emulation on x86_64 : A flaw in IA32 emulation on 64-bit Linux kernels (2.4.x and 2.6.x up to 2.6.22.7) can allow a local unprivileged user to gain privileges by triggering an out-of-bounds access to the system call table via the %RAX register after t...