CVE-2007-2465

CVE-2007-2465 affects Sun Solaris 9 (Solaris 9 SPARC and x86) when Solaris Auditing (BSM) is enabled for file read, write, attribute modify, create, or delete audit classes. The vulnerability reportedly allows local users to cause a denial of service (panic) via unknown vectors, possibly related ...

RHEL 4 : gdm (RHSA-2007:0286)

An updated gdm package that fixes a security issue and a bug is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Gdm the GNOME Display Manager is a highly configurable reimplementation of xdm, the X Display Manager. Gdm allows you to l...

Low: Red Hat Security Advisory: gdm security and bug fix update

An updated gdm package that fixes a security issue and a bug is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Gdm the GNOME Display Manager is a highly configurable reimplementation of xdm, the X Display Manager. Gdm allows you to l...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix security issues and bugs in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. These n...

MOPB-44-2007:PHP 5.2.0 Memory Manager Signed Comparision Vulnerability

Summary The new Zend Memory Manager that shipped with PHP 5.2.0 contains a comparison that wrongly casts some numbers to signed integers. Therefore a request for a very large amount of memory will be handled as a negative number and therefore result in only a minimum sized memory block being...

myspeach-inclusion.txt

/=======================================\ | Advisory :: MySpeach = 5.0.0, registerglobals = On, allowurlfopen = On | | Vuln 2 : registerglobals = On | | Risk level : High | | | +-------------------------------------------------------------------------------------------------------+ | | | Program...

Linux Security Auditing Tool不安全临时文件建立漏洞

Linux Security Auditing Tool是一款安全审核工具。 Linux Security Auditing Tool不安全建立临时文件，本地攻击者可以利用漏洞覆盖敏感文件，造成拒绝服务攻击。 攻击者可以利用符号链接进行攻击。目前没有详细漏洞细节提供。 Linux Security Auditing Tool 0.9.2 Gentoo Linux 目前没有解决方案提供： http://usat.sourceforge.net/...

LSAT: Insecure temporary file creation

Background The Linux Security Auditing Tool LSAT is a post install security auditor which checks many system configurations and local network settings on the system for common security or configuration errors and for packages that are not needed. Description LSAT insecurely writes in /tmp with a...

[Argeniss] Practical 10 minutes security audit: Oracle Case (Paper)

Hi. Abstract: This paper will show a extremely simple technique to quickly audit a software product in order to infer how trustable and secure it is. I will show you step by step how to identify half dozen of local 0day vulnerabilities in few minutes just making a couple of clicks on very easy to...

Code injection

The file watch implementation in the audit subsystem auditctl -w in the Red Hat Enterprise Linux RHEL 4 kernel 2.6.9 allows local users to cause a denial of service kernel panic by replacing a watched file, which does not cause the watch on the old inode to be dropped...

RedHat linux DoS through audit subsystem

Replcaing of watched file causes system crash...

Important: kernel security update

2.6.9-42.0.10.0.1 -Fix bonding primary=ethX so it picks correct network Bert Barbe IT 101532 ORA 5136660 2.6.9-42.0.10 -fix key serial number collision problem David Howells 227495 CVE-2007-0006 -fix audit panic on watched files Eric Paris 223129 CVE-2007-0001 2.6.9-42.0.9 -fix icmp oops in sctp...

kernel security update

CentOS Errata and Security Advisory CESA-2007:0085 Updated kernel packages that fix two security issues and a bug in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel...

security flaw

The file watch implementation in the audit subsystem auditctl -w in the Red Hat Enterprise Linux RHEL 4 kernel 2.6.9 allows local users to cause a denial of service kernel panic by replacing a watched file, which does not cause the watch on the old inode to be dropped...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix two security issues and a bug in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system...

Linux Kernel 2.6.x - Audit Subsystems Local Denial of Service

Linux Kernel 2.6.x - Audit Subsystems Local Denial of Service source: https://www.securityfocus.com/bid/22737/info The Linux Kernel is prone to a denial-of-service vulnerability. A local attacker can exploit this issue to crash the kernel. Linux kernel versions 2.6.x are vulnerable to this issue...

Linux Kernel 2.6.x - Audit Subsystems Local Denial of Service

source: https://www.securityfocus.com/bid/22737/info The Linux Kernel is prone to a denial-of-service vulnerability. A local attacker can exploit this issue to crash the kernel. Linux kernel versions 2.6.x are vulnerable to this issue. 1. auditctl -w /etc/shadow 2. useradd userb...

SUSE-SA:2006:044: libtiff

The remote host is missing the patch for the advisory SUSE-SA:2006:044 libtiff. This update of libtiff is the result of a source-code audit done by Tavis Ormandy, Google Security Team. It fixes various bugs that can lead to denial-of-service conditions as well as to remote code execution while...

phpmyvisites-xss.txt

Multiple vulnerabilities in phpMyVisites Application : phpMyVisites prior to 2.2 stable Release Date : 11 February 2007 Author : Nicob Abstract : ========== Several vulnerabilities were identified in phpMyVisites. This software is "a free and powerful open source GNU/GPL software for websites...

php web portail [remote file include & local file include]

php web portail remote file include & local file include download site: https://sourceforge.net/project/showfiles.php?groupid=178400 product:php web portail bug: remote file include & local file include risk : high local file include :...