UBUNTU-CVE-2011-1676

mount in util-linux 2.19 and earlier does not remove the /etc/mtab.tmp file after a failed attempt to add a mount entry, which allows local users to trigger corruption of the /etc/mtab file via multiple invocations...

Sql injection

mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMITFSIZE value, a related issue to CVE-2011-1089...

[SECURITY] [DSA 2213-1] x11-xserver-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2213-1 [email protected] http://www.debian.org/security/ Nico Golde April 8, 2011 http://www.debian.org/security/faq - -------------------------------------------------------------------------...

Distribution Release : SystemRescueCd 2.1.0 Download

François Dupoux has released an updated version of SystemRescueCd, a Gentoo-based live CD containing a collection of utilities for disk management and data rescue tasks. What's new in version 2.1.0? "Updated standard kernels to 2.6.35.12 long-term kernel: rescuecd + rescue64; alternative kernels...

USN-1107-1: x11-xserver-utils vulnerability

Sebastian Krahmer discovered that the xrdb utility incorrectly filtered crafted hostnames. An attacker could use this flaw with a malicious DHCP server or with a remote xdmcp login and execute arbitrary code, resulting in root privilege escalation...

[SECURITY] Fedora 15 Update: rubygem-activesupport-3.0.5-1.fc15

Utility library which carries commonly used classes and goodies from the Rails framework...

Children, the New Hot Commodity in the Business of Identity Theft?

Evidently the kids are not alright. At least, that is when it comes to the increasingly lucrative identity theft black market. A study carried out by a researcher at Carnegie Mellon University’s Cylab found that as many as 10 percent were victims of identity theft – even years before they are old...

Linux PolicyKit Race Condition Privilege Escalation

A race condition flaw was found in the PolicyKit pkexec utility and polkitd daemon. A local user could use this flaw to appear as a privileged user to pkexec, allowing them to execute arbitrary commands as root by running those commands with pkexec. Those vulnerable include RHEL6 prior to...

[SECURITY] Fedora 15 Update: logrotate-3.7.9-8.fc15

The logrotate utility is designed to simplify the administration of log files on a system which generates a lot of log files. Logrotate allows for the automatic rotation compression, removal and mailing of log files. Logrotate can be set to handle a log file daily, weekly, monthly or when the log...

VMware vmrun utility local privilege escalation

a. VMware Linux based vmrun utility local privilege escalationVMware vmrun is a utility that is used to perform various tasks on virtual machines. The vmrun utility runs on any platform with VIX libraries installed. It is installed in VMware Workstation by default.In non-standard filesystem...

Основы написания Win-шеллкода

В этой статье речь пойдет о написании простого шеллкода под Windows платформу. Статья является начальным этапом цикла статей, которые я, опираясь на материалы и труды зарубежных специалистов в данной области, планирую написать. Эта статья не насыщена всеобъемлющей информацией, однако её цель -...

CVE-2011-0442

The service utility in EMC Avamar 5.x before 5.0.4 uses cleartext to transmit event details in 1 service requests and 2 e-mail messages, which might allow remote attackers to obtain sensitive information by sniffing the network...

Code injection

The service utility in EMC Avamar 5.x before 5.0.4 uses cleartext to transmit event details in 1 service requests and 2 e-mail messages, which might allow remote attackers to obtain sensitive information by sniffing the network...

CVE-2011-0442

The service utility in EMC Avamar 5.x before 5.0.4 uses cleartext to transmit event details in 1 service requests and 2 e-mail messages, which might allow remote attackers to obtain sensitive information by sniffing the network...

[SECURITY] Fedora 14 Update: whatsup-1.12-1.fc14

Whatsup is a cluster node up/down detection utility. Whatsup can quickly calculate and output the up and down nodes of a cluster. Whatsup allows some tools, such as Pdsh, to operate more quickly by not operating on down nodes. Whatsup calculates the up and down nodes of a cluster through one of...

[SECURITY] Fedora 13 Update: whatsup-1.12-1.fc13

Whatsup is a cluster node up/down detection utility. Whatsup can quickly calculate and output the up and down nodes of a cluster. Whatsup allows some tools, such as Pdsh, to operate more quickly by not operating on down nodes. Whatsup calculates the up and down nodes of a cluster through one of...

Linux NTP query client v4.2.6p1 Heap Overflow Vulnerability

Exploit for linux platform in category dos / poc Linux NTP query client v4.2.6p1 Heap Overflow vulnerability vendor: http://www.ntp.org/ software: http://www.eecis.udel.edu/ntp/ntpspool/ntp4/ntp-4.2/ntp-4.2.6p1.tar.gz impact: minor/informational There is a local heap overflow in the ntpq utility...

Linux NTP query client 4.2.6p1 - Heap Overflow

Linux NTP query client 4.2.6p1 - Heap Overflow Linux NTP query client v4.2.6p1 Heap Overflow vulnerability vendor: http://www.ntp.org/ software: http://www.eecis.udel.edu/ntp/ntpspool/ntp4/ntp-4.2/ntp-4.2.6p1.tar.gz impact: minor/informational There is a local heap overflow in the ntpq utility...

Two men charged for Hacking into AT&T Website !

Two men were arrested on Tuesday and are facing charges of fraud and conspiracy to access a computer without authorization, following an investigation that started with last year's much publicized harvesting of e-mails and AT&T authentication IDs of 114,000 early-adopters of Apple's iPad. Accordi...

CVE-2010-3598

Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect integrity via unknown vectors related to Import Export Utility...