CVE-2003-0246

The ioperm system call in Linux kernel 2.4.20 and earlier does not properly restrict privileges, which allows local users to gain read or write access to certain I/O ports...

Linux Kernel 2.2.x2.4.x - Privileged Process Hijacking Privilege Escalation (2)

Linux Kernel 2.2.x2.4.x - Privileged Process Hijacking Privilege Escalation 2 / source: https://www.securityfocus.com/bid/7112/info A vulnerability has been discovered in the Linux kernel which can be exploited using the ptrace system call. By attaching to an incorrectly configured root process,...

Linux Kernel 2.2.x/2.4.x - Privileged Process Hijacking Privilege Escalation (2)

/ source: https://www.securityfocus.com/bid/7112/info A vulnerability has been discovered in the Linux kernel which can be exploited using the ptrace system call. By attaching to an incorrectly configured root process, during a specific time window, it may be possible for an attacker to gain...

CVE-2002-0754

Kerberos 5 su k5su in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges after it has dropped them...

Linux Kernel 2.2.x2.4.x - Privileged Process Hijacking Privilege Escalation (1)

Linux Kernel 2.2.x2.4.x - Privileged Process Hijacking Privilege Escalation 1 / source: https://www.securityfocus.com/bid/7112/info A vulnerability has been discovered in the Linux kernel which can be exploited using the ptrace system call. By attaching to an incorrectly configured root process,...

Moderate: Red Hat Security Advisory: krb5 security update

Updated packages fix a vulnerability found in the Kerberos FTP client distributed with the Red Hat Linux Advanced Server krb5 packages. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1. For Advanced Workstation 2.1 these packages also fix CAN-2002-1235 as described in...

FreeBSD Security Advisory FreeBSD-SA-02:44.filedesc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-02:44.filedesc Security Advisory The FreeBSD Project Topic: file descriptor leak in fpathconf Category: core Module: kernel Announced: 2003-01-07 Credits: Joost P...

FreeBSD-SA-02:44.filedesc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-02:44.filedesc Security Advisory The FreeBSD Project Topic: file descriptor leak in fpathconf Category: core Module: kernel Announced: 2003-01-07 Credits: Joost...

CVE-2002-1668

HP-UX 11.11 and earlier allows local users to cause a denial of service kernel deadlock, due to a "file system weakness" that is possibly via an mmap system call and performing an I/O operation using data from the mapped buffer on the file descriptor for the mapped file...

CVE-2002-2180

The setitimer2 system call in OpenBSD 2.0 through 3.1 does not properly check certain arguments, which allows local users to write to kernel memory and possibly gain root privileges, possibly via an integer signedness error...

CVE-2002-1197

bugzillaemailappend.pl in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, allows remote attackers to execute arbitrary code via shell metacharacters in a system call to processmail...

Grsecurity Kernel Patch 1.9.4 (Linux Kernel) - Memory Protection

source: https://www.securityfocus.com/bid/4762/info An attacker with root access may be able to write to kernel memory in spite of the security patch provided by grsecurity. The patch operates by redirecting the write system call, when it is being used to write to a memory device. Unfortunately,...

FreeBSD-SA-02:08.exec

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:08 Security Advisory FreeBSD, Inc. Topic: race condition during exec may allow local root compromise Category: core Module: kernel Announced: 2002-01-24 Credits: Logan...

CVE-2001-0734

Hitachi Super-H architecture in NetBSD 1.5 and 1.4.1 allows a local user to gain privileges via modified Status Register contents, which are not properly handled by 1 the sigreturn system call or 2 the processwriteregs kernel routine...

CVE-2001-0734

CVE-2001-0734 affects Hitachi Super-H architecture on NetBSD 1.5 and 1.4.1, enabling a local user to gain privileges via manipulated Status Register contents not correctly handled by the sigreturn system call or the process_write_regs kernel routine. The connected documents do not provide additio...

CVE-2001-0351

The CVE-2001-0351 entry concerns Microsoft Windows 2000 Telnet Service. The vulnerability allows an unprivileged local user to invoke a system call that terminates an existing Telnet session, producing a denial-of-service condition. Affected software is Windows 2000 with the Telnet Service; the u...

CVE-1999-1252

Technical details about CVE-1999-1252 are not publicly provided in the connected documents. Monitor for updates.

BSDI 3.0/3.1 - Local Kernel Denial of Service

/ source: https://www.securityfocus.com/bid/3220/info It has been reported that there is a locally exploitable vulnerability in BSDI. It is allegedly possible for a userland process to cause the kernel to halt. This may be due to a bad system call. / / BSDiv3.0/3.1 system failure, by...

BSDI 3.03.1 - Local Kernel Denial of Service

BSDI 3.03.1 - Local Kernel Denial of Service / source: https://www.securityfocus.com/bid/3220/info It has been reported that there is a locally exploitable vulnerability in BSDI. It is allegedly possible for a userland process to cause the kernel to halt. This may be due to a bad system call. / /...

Security Advisory 2001-009: Race condition between sugid-exec and ptrace(2)

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2001-009 ================================= Topic: Race condition between sugid-exec and ptrace2 Version: All official releases up to and including 1.5 Severity: Local user may gain superuser privileges Fixed: NetBSD-current: June 15, 200...