2787 matches found
XFS Deleted Inode Local Information Disclosure Vulnerability
Exploit for linux platform in category local exploits ============================================================ XFS Deleted Inode Local Information Disclosure Vulnerability ============================================================ stalehandle.c - attempt to create a stale handle and open it...
CVE-2010-2943
The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assign...
CVE-2010-2943: Exposure of Sensitive Information to an Unauthorized Actor
The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assign...
kernel: xfs: validate inode numbers in file handles correctly
The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assign...
XFS - Deleted Inode Local Information Disclosure
XFS - Deleted Inode Local Information Disclosure / stalehandle.c - attempt to create a stale handle and open it Copyright C 2010 Red Hat, Inc. All Rights reserved. This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as publishe...
PT-2010-4424 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.35 Description: The issue allows remote authenticated users to read unlinked files or read and overwrite disk blocks that are currently assigned to an active file but were previously assigned to an unlinked...
XFS - Deleted Inode Local Information Disclosure
/ stalehandle.c - attempt to create a stale handle and open it Copyright C 2010 Red Hat, Inc. All Rights reserved. This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version...
SuSE9 Security Update : the Linux kernel (YOU Patch Number 12646)
This updates the SUSE Linux Enterprise Server 9 kernel to fix various security issues and some bugs. The following security bugs were fixed : - Incorrect buffer handling in the biarch-compat buffer handling could be used by local attackers to gain root privileges. This problem affects foremost...
CVE-2010-3078
The xfsiocfsgetxattr function in fs/xfs/linux-2.6/xfsioctl.c in the Linux kernel before 2.6.36-rc4 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an ioctl call...
CVE-2010-3078: Exposure of Sensitive Information to an Unauthorized Actor
The xfsiocfsgetxattr function in fs/xfs/linux-2.6/xfsioctl.c in the Linux kernel before 2.6.36-rc4 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an ioctl call...
Linux kernel multiple security vulnerabilities
DoS conditions, CIFS client privilege escalation, doanonymouspage privilege escalation, information leak in XFS, privilege escalation in compatallocuserspace...
[SECURITY] [DSA 2110-1] New Linux 2.6.26 packages fix several issues
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-2110-1 [email protected] http://www.debian.org/security/ dann frazier September 17, 2010 http://www.debian.org/security/faq -...
Debian DSA-2110-1 : linux-2.6 - privilege escalation/denial of service/information leak
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leak. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-2492 Andre Osterhues reported an issue in the eCryptfs...
DSA-2110-1 linux-2.6 - several issues
Bulletin has no description...
CVE-2010-2226
CVE-2010-2226 affects the Linux kernel: the xfs_swapext function in fs/xfs/xfs_dfrag.c does not properly validate file descriptors passed to the SWAPEXT ioctl, enabling a local user with write access to swap a file into another and gain read access. The issue is present in kernel versions before ...
CVE-2010-2226
The xfsswapext function in fs/xfs/xfsdfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file...
CVE-2010-2226: Exposure of Sensitive Information to an Unauthorized Actor
The xfsswapext function in fs/xfs/xfsdfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file...
DSA-2094-1 linux-2.6 - several issues
Bulletin has no description...
RedHat Update for kernel RHSA-2010:0610-01
Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2010:0610-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
CentOS 5 : kernel (CESA-2010:0610)
Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...