FreeBSD UIPC Socket Heap Overflow

!/bin/sh fbsd-uipcsock-heap.sh, by Shaun Colley , 29/09/11 proof-of-concept crash for the freebsd unix domain sockets heap overflow. this was tested on freebsd 8.2-RELEASE. just a PoC for now. see advisory & patches for details: http://www.securityfocus.com/archive/1/519864/30/0/threaded this PoC...

FreeBSD - UIPC socket heap Overflow (PoC)

!/bin/sh fbsd-uipcsock-heap.sh, by Shaun Colley , 29/09/11 proof-of-concept crash for the freebsd unix domain sockets heap overflow. this was tested on freebsd 8.2-RELEASE. just a PoC for now. see advisory & patches for details: http://www.securityfocus.com/archive/1/519864/30/0/threaded this PoC...

CentOS Update for kernel CESA-2009:1671 centos4 i386

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2009:1671 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

CentOS Update for kernel CESA-2009:1671 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for kernel CESA-2009:1670 centos5 i386

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2009:1670 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

CentOS 5 : kernel (CESA-2008:0612)

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

RedHat Security Advisory RHSA-2009:1670

The remote host is missing updates announced in advisory RHSA-2009:1670. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security fixes: NULL pointer dereference flaws in the r128 driver. Checks to test if the Concurrent Command Engine state was initialized...

RedHat Security Advisory RHSA-2009:1671

The remote host is missing updates announced in advisory RHSA-2009:1671. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: a flaw was found in the Realtek r8169 Ethernet driver in the Linux kernel. pciunmapsingle...

RedHat Security Advisory RHSA-2009:1671

The remote host is missing updates announced in advisory RHSA-2009:1671. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: a flaw was found in the Realtek r8169 Ethernet driver in the Linux kernel. pciunmapsingle...

kernel security update

CentOS Errata and Security Advisory CESA-2009:1671 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages...

kernel: AF_UNIX: Fix deadlock on connecting to shutdown socket

net/unix/afunix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service system hang by creating an abstract-namespace AFUNIX listening socket, performing a shutdown operation on this socket, and then performing a series of connect operations to this socket...

kernel: AF_UNIX: Fix deadlock on connecting to shutdown socket

net/unix/afunix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service system hang by creating an abstract-namespace AFUNIX listening socket, performing a shutdown operation on this socket, and then performing a series of connect operations to this socket...

Debian: Security Advisory (DSA-1929-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

kernel: fix soft lockups/OOM issues with unix socket garbage collector

Linux kernel 2.6.28 allows local users to cause a denial of service "soft lockup" and process loss via a large number of sendmsg function calls, which does not block during AFUNIX garbage collection and triggers an OOM condition, a different vulnerability than CVE-2008-5029...

kernel: Unix sockets kernel panic

The scmdestroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service panic via vectors related to sending an SCMRIGHTS message through a UNIX...

Important: Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Updated kernel-rt packages that fix several security issues, multiple bugs, and add enhancements are now available for Red Hat Enterprise MRG 1.1. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel-rt packages contain the Linux kernel,...

kernel: AF_UNIX: Fix deadlock on connecting to shutdown socket

net/unix/afunix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service system hang by creating an abstract-namespace AFUNIX listening socket, performing a shutdown operation on this socket, and then performing a series of connect operations to this socket...

PT-2009-5895 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.31.4 Description: The issue allows local users to cause a denial of service, resulting in a system hang. This occurs when an abstract-namespace AF UNIX listening socket is created, a shutdown operation is...

ProFTPd 1.3.0 (OpenSUSE) - mod_ctrls Local Stack Overflow

ProFTPd 1.3.0 OpenSUSE - modctrls Local Stack Overflow !/usr/bin/perl -w Exploit for the ProFTPd modctrls vulnerability. Stack Overflow in function int prctrlsrecvrequestprcrlsclt cl unchecked buffer for arguments of the module connects to the unix domain socket and sends a string that is longer...

ProFTPd 1.3.0 mod_ctrls Local Stack Overflow (opensuse)

Exploit for unknown platform in category local exploits ======================================================= ProFTPd 1.3.0 modctrls Local Stack Overflow opensuse ======================================================= Title: ProFTPd 1.3.0 modctrls Local Stack Overflow opensuse CVE-ID: OSVDB-ID...