CVE-2005-0839

Linux kernel 2.6 before 2.6.11 does not restrict access to the NMOUSE line discipline for a TTY, which allows local users to gain privileges by injecting mouse or keyboard events into other user sessions...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 9 August 2005 The advisory text has been updated to show that this update fixed...

security flaw

Linux kernel 2.6 before 2.6.11 does not restrict access to the NMOUSE line discipline for a TTY, which allows local users to gain privileges by injecting mouse or keyboard events into other user sessions...

USN-95-1: Linux kernel vulnerabilities

A remote Denial of Service vulnerability was discovered in the Netfilter IP packet handler. This allowed a remote attacker to crash the machine by sending specially crafted IP packet fragments. CAN-2005-0209 The Netfilter code also contained a memory leak. Certain locally generated packet fragmen...

security flaw

Race condition in the setsid function in Linux before 2.6.8.1 allows local users to cause a denial of service crash and possibly access portions of kernel memory, related to TTY changes, locking, and semaphores...

CVE-2005-0178

CVE-2005-0178 describes a race condition in the setsid() handling of the Linux kernel before 2.6.8.1. Local users could crash the kernel and potentially access portions of kernel memory related to TTY changes, locking, and semaphores. Affected software: Linux kernel versions prior to 2.6.8.1 (per...

Mandrake Linux Security Advisory : kernel (MDKSA-2003:074)

Multiple vulnerabilities were discovered and fixed in the Linux kernel. - CVE-2003-0001: Multiple ethernet network card drivers do not pad frames with null bytes which allows remote attackers to obtain information from previous packets or kernel memory by using special malformed packets. -...

DSA-442 linux-kernel-2.4.17-s390 - several vulnerabilities

Bulletin has no description...

CVE-2003-1474

slashem-tty in the FreeBSD Ports Collection is installed with write permissions for the games group, which allows local users with group games privileges to modify slashem-tty and execute arbitrary code as other users, as demonstrated using a separate vulnerability in LTris...

Multiple bugs in linux kernel

new kernel version fixes DoS in TCP/IP stack by isuing amount of packets with same hash value and privelege escalation in ioperm call. mxcsr CPU state modification, TTY level DoS, multiple etherleaks...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages for Red Hat Enterprise Linux are now available which address several security vulnerabilities. The Linux kernel handles the basic functions of the operating system. Several security issues have been found that affect the Linux kernel: Al Viro found a security issue in the...

CVE-2003-0247

Unknown vulnerability in the TTY layer of the Linux kernel 2.4 allows attackers to cause a denial of service "kernel oops"...

CVE-2003-0247

Unknown vulnerability in the TTY layer of the Linux kernel 2.4 allows attackers to cause a denial of service "kernel oops"...

CVE-2003-0247

CVE-2003-0247: Affects the Linux kernel 2.4 series in the TTY layer, enabling a denial-of-service via a kernel oops. Public docs reference Debian/Red Hat advisories and OpenVAS entries noting missing updates to kernel patches (e.g., 2.4.18-powerpc, 2.4.17-mips) as remediation. The connected docs ...

CVE-2002-0824

CVE-2002-0824 affects BSD pppd, where a symlink attack on a file specified as a tty device allows local users to change permissions of arbitrary files. The description states this is a local privilege/subversion of permissions vulnerability, but the connected documents do not provide additional t...

Solaris 2.x /usr/sbin/wall Advisory

Affected Operating Systems: Solaris 2.x-9 Possibly others derived from AT&T source code. Affected Program: /usr/sbin/wall Synopsis: Wall is a setgid tty program that broadcasts a message to every user currently logged into the system. It can also receive messages from remote hosts, via RPC...

Symbolic link problem in pppd

It's possible to change file permisions via symbolic link by using it as a tty device...

CVE-2002-0333

Directory traversal vulnerability in xtell xtelld 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to read files with short names, and local users to read more files using a symlink with a short name, via a .. in the TTY argument...

CVE-2002-0327

Buffer overflow in Century Software TERM allows local users to gain root privileges via a long tty argument to the callin program...

CVE-2002-0333

Directory traversal vulnerability in xtell xtelld 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to read files with short names, and local users to read more files using a symlink with a short name, via a .. in the TTY argument...