XFS - Deleted Inode Local Information Disclosure

/ stalehandle.c - attempt to create a stale handle and open it Copyright C 2010 Red Hat, Inc. All Rights reserved. This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version...

SuSE9 Security Update : the Linux kernel (YOU Patch Number 12646)

This updates the SUSE Linux Enterprise Server 9 kernel to fix various security issues and some bugs. The following security bugs were fixed : - Incorrect buffer handling in the biarch-compat buffer handling could be used by local attackers to gain root privileges. This problem affects foremost...

CVE-2010-3078

The xfsiocfsgetxattr function in fs/xfs/linux-2.6/xfsioctl.c in the Linux kernel before 2.6.36-rc4 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an ioctl call...

DSA-2094-1 linux-2.6 - several issues

Bulletin has no description...

Mandriva Update for gnome-vfs2 MDKA-2007:060 (gnome-vfs2)

Check for the Version of gnome-vfs2 OpenVAS Vulnerability Test Mandriva Update for gnome-vfs2 MDKA-2007:060 gnome-vfs2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Mandriva Update for evolution MDKA-2007:061 (evolution)

Check for the Version of evolution OpenVAS Vulnerability Test Mandriva Update for evolution MDKA-2007:061 evolution Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for evolution MDKA-2007:061 (evolution)

Check for the Version of evolution OpenVAS Vulnerability Test Mandriva Update for evolution MDKA-2007:061 evolution Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for gnome-vfs2 MDKA-2007:060 (gnome-vfs2)

Check for the Version of gnome-vfs2 OpenVAS Vulnerability Test Mandriva Update for gnome-vfs2 MDKA-2007:060 gnome-vfs2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Debian DSA-283-1 : xfsdump - insecure file creation

Ethan Benson discovered a problem in xfsdump, that contains administrative utilities for the XFS filesystem. When filesystem quotas are enabled xfsdump runs xfsdq to save the quota information into a file at the root of the filesystem being dumped. The manner in which this file is created is...

Mandrake Linux Security Advisory : xfsdump (MDKSA-2003:047)

A vulnerability was discovered in xfsdump by Ethan Benson related to filesystem quotas on the XFS filesystem. When xfsdump runs xfsdq to save the quota information into a file at the root of the filesystem being dumped, the file is created in an unsafe manner. A new option to xfsdq was added when...

CVE-2002-0356

Vulnerability in XFS filesystem reorganizer fsrxfs in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files...

CVE-2002-0356

CVE-2002-0356 concerns SGI IRIX affected by the fsr_xfs (XFS filesystem reorganizer) vulnerability. The issue allows a local user to gain root privileges by overwriting critical system files in IRIX 6.5.10 and earlier. SGI’s advisory notes this can lead to a root exploit, with a workaround and a ...

SGI IRIX rpc.xfsmd does not filter shell metacharacters from user input before invoking popen() function

Overview The XFS journaling filesystem daemon uses a call to popen3 with unfiltered client-controlled input. This will lead to arbitrary command execution on remote systems. Description XFS is a 64-bit compliant journaling file system. The XFS journaling filesystem daemon xfsmd on SGI systems use...

CVE-2002-0356

Vulnerability in XFS filesystem reorganizer fsrxfs in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files...

IRIX XFS filesystem denial of service attack

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: IRIX XFS filesystem denial of service attack Number: 20020402-01-P Date: April 15, 2002 Reference: CAN-2002-0042 - ----------------------- - --- Issue Specifics --- - ----------------------- It has been reported that there is a...