MySQL特权提升和安全绕过漏洞

MySQL是一款开放源代码的数据库程序。 MySQL存在特权提升和安全绕过问题，远程攻击者可以利用漏洞以高特权执行任意命令并绕过限制建立新的数据库。 验证用户可以通过如下方法建立新的数据： $ mysql -u root -p -S /path/to/socket Enter password: mysql create database 'sample'; mysql grant all on sample. to 'sample'@'%' identified by 'password'; mysql \q $ mysql -h my.mysql.server -u sample -...

Linux Kernel IBMTR.C远程远程拒绝服务漏洞

Linux Kernel是一款开放源代码的操作系统。 Linux Kernel IBMTR.C存在内存破坏问题，远程攻击者可以利用漏洞对系统进行拒绝服务攻击，存在执行任意指令可能。 问题存在于'drivers/net/tokenring/ibmtr.c'文件中，由于对-csum缺少正确处理，可能导致内存破坏而造成拒绝服务攻击。 Linux kernel 2.6.19 -rc4 + Trustix Secure Enterprise Linux 2.0 + Trustix Secure Linux 2.2 + Trustix Secure Linux 2.1 + Trustix Secur...

GNU BinUtils GAS缓冲区溢出漏洞

GNU BinUtils GAS是GNU的汇编器。 GNU BinUtils GAS存在缓冲区溢出，本地攻击者可以利用漏洞以用户进程权限执行任意指令。 通过诱使用户或自动系统使用gcc或gas构建恶意源文件，可导致触发漏洞，可能以用户进程权限执行任意指令。 Ubuntu Ubuntu Linux 5.10 sparc Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64 Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu...

Apache Mod_Rewrite单字节缓冲区溢出漏洞

Apache是一款流行的开放源代码的HTTPD服务程序。 Apache modrewrite模块中LDAP机制处理存在单字节溢出错误，远程攻击者可以利用漏洞以WEB进程权限执行任意指令。 Apache modrewrite模块提供了一个基于规则的使用正则表达式分析器的实时转向URL请求的引擎。modrewrite模块在转义绝对URI机制时存在单字节错误，当分离LDAP URL的数据时escapeabsoluteuri 函数中会触发此漏洞。触发此漏洞可导致指向用户提供数据的指针写入字符指针数组边界之外，可用于控制程序，以WEB权限执行任意指令。...

Linux Kernel PPC970 本地拒绝服务系统漏洞

Linux Kernel PPC970 本地拒绝服务系统漏洞. 攻击者可以利用这个漏洞来了坠毁的内核,进一步否定合法用户的服务. Trustix Secure Linux 3.0 Trustix Secure Linux 2.2 Trustix Secure Enterprise Linux 2.0 S.u.S.E. UnitedLinux 1.0 S.u.S.E. SuSE Linux Standard Server 8.0 S.u.S.E. SuSE Linux School Server for i386 S.u.S.E. SUSE LINUX Retail Solution 8....

Linux Kernel ATM SkBuff Dereference Remote Denial of Service Vulnerability

这个问题是在Kernel处理输入ATM（异步传输模式）数据时被触发。 利用这个漏洞，攻击者可以目标Kernel死机，导致拒绝服务的发生。 本问题只影响那些具有ATM硬件并且配置成支持ATM的Kernel的系统。 Kernel版本从2.6.0到2.6.17（包括2.6.17）都受到该漏洞影响。 PHP 5 受此漏洞影响。 Trustix Secure Linux 3.0 Trustix Secure Linux 2.2 Trustix Operating System Enterprise Server 2.0 RedHat Enterprise Linux WS 4 RedHat...

Linux Kernel ATM SkBuff Dereference 远程拒绝服务漏洞

利用这种脆弱性可能允许远程攻击者以受影响的内核拒绝服务,造成拒绝服务条件. 只能影响到系统硬件和配置有自动柜员机提款为内核的支持.从2.6.0版本内核直至并包括2.6.17对这个问题是多么漏洞 Trustix Secure Linux 3.0 Trustix Secure Linux 2.2 Trustix Operating System Enterprise Server 2.0 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux WS 3 RedHat Enterprise Linux ES 4 RedHat Enterpris...

PHP Apache 2 本地拒绝服务漏洞

'sapiapache2.c', 这个问题最终会影响PHP的5.1.0和4.4.1之前版本 Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64 Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 amd64 Trustix Secure Linux 3.0 Trustix Secure Linux 2.2 Trustix...

TSLSA-2006-0059 - postgresql

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Trustix Secure Linux Security Advisory 2006-0059 Package names: postgresql Summary: Multiple vulnerabilities Date: 2006-10-27 Affected versions: Trustix Secure Linux 2.2...

Linux Kernel may fail to properly handle SNMP packets

Overview A memory freeing vulnerability in the Linux kernel module ipnatsnmpbasic can be exploited to create a denial-of-service condition. Description ipnatsnmpbasic The ipnatsnmpbasic IP NAT module is intended for use with SNMP network discovery and monitoring applications where target networks...

Clam AntiVirus vulnerable to memory corruption via specially crafted UPX packed file

Overview A vulnerability in the ClamAV antivirus toolkit may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Clam AntiVirus is an antivirus toolkit for Unix-like systems that is commonly integrated with mail servers for email attachment scanning. It supports ...

Ubuntu 4.10 : Standard C library script vulnerabilities (USN-4-1)

Recently, Trustix Secure Linux discovered some vulnerabilities in the libc6 package. The utilities 'catchsegv' and 'glibcbug' created temporary files in an insecure way, which allowed a symlink attack to create or overwrite arbitrary files with the privileges of the user invoking the program. Not...

Ubuntu 4.10 : lvm10 vulnerability (USN-15-1)

Recently, Trustix Secure Linux discovered a vulnerability in a supplemental script of the lvm10 package. The program 'lvmcreateinitrd' created a temporary directory in an insecure way, which could allow a symlink attack to create or overwrite arbitrary files with the privileges of the user invoki...

Ubuntu 4.10 : GhostScript utility script vulnerabilities (USN-3-1)

Recently, Trustix Secure Linux discovered some vulnerabilities in the gs-common package. The utilities 'pv.sh' and 'ps2epsi' created temporary files in an insecure way, which allowed a symlink attack to create or overwrite arbitrary files with the privileges of the user invoking the program. Note...

Ubuntu 4.10 : gettext vulnerabilities (USN-5-1)

Recently, Trustix Secure Linux discovered some vulnerabilities in the gettext package. The programs 'autopoint' and 'gettextize' created temporary files in an insecure way, which allowed a symlink attack to create or overwrite arbitrary files with the privileges of the user invoking the program...

Ubuntu 4.10 : perl vulnerabilities (USN-16-1)

Recently, Trustix Secure Linux discovered some vulnerabilities in the perl package. The utility 'instmodsh', the Perl package 'PPPort.pm', and several test scripts which are not shipped and only used during build created temporary files in an insecure way, which could allow a symlink attack to...

Ubuntu 4.10 : groff utility vulnerability (USN-13-1)

Recently, Trustix Secure Linux discovered a vulnerability in the groff package. The utility 'groffer' created a temporary directory in an insecure way, which allowed exploitation of a race condition to create or overwrite files with the privileges of the user invoking the program. Note that Tenab...

Ubuntu 4.10 : postgresql contributed script vulnerability (USN-6-1)

Recently, Trustix Secure Linux discovered a vulnerability in the postgresql-contrib package. The script 'makeoidjoinscheck' created temporary files in an insecure way, which allowed a symlink attack to create or overwrite arbitrary files with the privileges of the user invoking the script. Note...

temporary file vulnerabilities in various ghostscript scripts.

The 1 pj-gs.sh, 2 ps2epsi, 3 pv.sh, and 4 sysvlp.sh scripts in the ESP Ghostscript espgs package in Trustix Secure Linux 1.5 through 2.1, and other operating systems, allow local users to overwrite files via a symlink attack on temporary files...

security flaw

The derchop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files...