7484 matches found
[SECURITY] [DSA 1706-1] New amarok packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1706-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 15, 2009 http://www.debian.org/security/faq -...
[SECURITY] Fedora 9 Update: am-utils-6.1.5-8.1.fc9
Am-utils includes an updated version of Amd, the popular BSD automounter. An automounter is a program which maintains a cache of mounted filesystems. Filesystems are mounted when they are first referenced by the user and unmounted after a certain period of inactivity. Amd supports a variety of...
FreeBSD/amd64 'swapgs'本地特权提升漏洞
BUGTRAQ ID: 31003 CVE ID：CVE-2008-3890 CNCVE ID：CNCVE-20083890 FreeBSD/amd64是一款用于AMD和INTEL CPU上的64位操作系统。 FreeBSD/amd64内核存在一个安全问题，本地攻击者可以利用漏洞使swapgs CPU执行不正确执行，以内核权限执行任意指令。 当从一个中断，TRAP或系统调用上返回时，如果FreeBSD/amd64系统发生一般性保护错误。swapgs指令可能会被多执行一次，导致用户态和核心态的混合。...
FreeBSD Security Advisory (FreeBSD-SA-06:14.fpu.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:14.fpu.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
kernel: ptrace: Unprivileged crash on x86_64 %cs corruption
Linux kernel 2.6.18, and possibly other versions, when running on AMD64 architectures, allows local users to cause a denial of service crash via certain ptrace calls...
MPlayer sdpplin_parse()函数RTSP整数溢出漏洞
BUGTRAQ ID: 28851 CVECAN ID: CVE-2008-1558 MPlayer是一款基于Linux的媒体播放程序，支持多种媒体格式。 MPlayer的stream/realrtsp/sdpplin.c文件中的sdpplinparse函数存在整数溢出漏洞： sdpplinparsestream desc-streamid=atoibuf; spplinparse desc-streamstream-streamid=stream; 如果用户所打开的媒体文件中包含有超长的StreamCount SDP参数的话，就可以触发这个溢出，导致执行任意指令。 MPlayer 1....
[SECURITY] [DSA 1448-1] New eggdrop packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1448-1 [email protected] http://www.debian.org/security/ Steve Kemp January 05, 2008 http://www.debian.org/security/faq -...
RHEL 4 : kernel (RHSA-2007:1104)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2007:1104 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. These updated packages fix the following security...
CentOS 4 : kernel (CESA-2007:1104)
Updated kernel packages that fix various security issues and several bugs in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any...
kernel security update
CentOS Errata and Security Advisory CESA-2007:1104 Updated kernel packages that fix various security issues and several bugs in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel...
Important: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix various security issues and several bugs in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any...
Fedora 7 : kernel-2.6.22.4-65.fc7 (2007-1785)
Update to kernel 2.6.22.2, 2.6.22.3 and 2.6.22.4: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.2 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.3 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.4 - Fix failure to find serial ports on some machines. -...
EM64T local DoS
Unspecified vulnerability in the "stack unwinder fixes" in kernel in Red Hat Enterprise Linux 5, when running on AMD64 and Intel 64, allows local users to cause a denial of service via unknown vectors...
[SECURITY] [DSA 1361-1] New postfix-policyd packages fix arbitrary code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1361 [email protected] http://www.debian.org/security/ Steve Kemp August 29th, 2007 http://www.debian.org/security/faq -...
AMD ATI ATIDSMXX.SYS驱动本地权限提升漏洞
BUGTRAQ ID: 25265 ATIDSMXX.SYS是很多ATI显卡都在使用的驱动程序。 ATIDSMXX.SYS驱动中存在设计问题，本地攻击者可能利用此漏洞获取系统权限。 本地攻击者可以利用一个名为Purple Pill的工具将未签名的驱动写入Vista驱动层，这样包括anti-rootkit/anti-DRM等模块都可以写入Windows Vista受保护的内核，导致完全入侵操作系统。 AMD atidsmxx.sys 3.0.502.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
Memory corruption
The AMD ATI atidsmxx.sys 3.0.502.0 driver on Windows Vista allows local users to bypass the driver signing policy, write to arbitrary kernel memory locations, and thereby gain privileges via unspecified vectors, as demonstrated by "Purple Pill"...
CVE-2007-4315
The AMD ATI atidsmxx.sys 3.0.502.0 driver on Windows Vista allows local users to bypass the driver signing policy, write to arbitrary kernel memory locations, and thereby gain privileges via unspecified vectors, as demonstrated by "Purple Pill"...
CVE-2007-4315
The CVE-2007-4315 entry concerns the AMD ATI atidsmxx.sys driver (Windows Vista, version 3.0.502.0). The vulnerability description states a local privilege escalation via bypassing driver signing and writing to arbitrary kernel memory locations, enabling privilege gain through unspecified vectors...
CVE-2007-4315
The AMD ATI atidsmxx.sys 3.0.502.0 driver on Windows Vista allows local users to bypass the driver signing policy, write to arbitrary kernel memory locations, and thereby gain privileges via unspecified vectors, as demonstrated by "Purple Pill"...
GNU Emacs GIF图形处理远程拒绝服务漏洞
Emacs是一个可扩展的实时显示编辑器。 Emacs在处理畸形GIF图形时存在漏洞，远程攻击者可能利用此漏洞导致用户Emacs崩溃。 Emacs没有正确地计算某些GIF图形的大小，如果用户受骗打开了恶意的GIF图形的话，就会导致Emacs出现分段错误而崩溃。 GNU Emacs Debian ------ Debian已经为此发布了一个安全公告（DSA-1316-1）以及相应补丁: DSA-1316-1：New emacs21 packages fix denial of service 链接：http://www.debian.org/security/2007/dsa-1316...