[PRE-SA-2011-06] Linux kernel: ZERO_SIZE_PTR dereference for long symlinks in Be FS

PRE-CERT Security Advisory ========================== Advisory: PRE-SA-2011-06 Released on: 19 August 2011 Last updated on: 19 August 2011 Affected product: Linux Kernel 2.4, 2.6, and 3.0 Impact: denial-of-service Origin: Be file system Credit: Timo Warns PRESENSE Technologies GmbH CVE Identifier...

Null pointer dereference

The befsfollowlink function in fs/befs/linuxvfs.c in the Linux kernel before 3.1-rc3 does not validate the length attribute of long symlinks, which allows local users to cause a denial of service incorrect pointer dereference and OOPS by accessing a long symlink on a malformed Be filesystem...

CVE-2011-2928

The befsfollowlink function in fs/befs/linuxvfs.c in the Linux kernel before 3.1-rc3 does not validate the length attribute of long symlinks, which allows local users to cause a denial of service incorrect pointer dereference and OOPS by accessing a long symlink on a malformed Be filesystem...

CVE-2011-2928

CVE-2011-2928 affects the Linux kernel prior to 3.1-rc3, specifically the befs_follow_link function in fs/befs/linuxvfs.c. The flaw does not validate the length attribute of long symlinks on a malformed Be filesystem, enabling a local attacker to trigger an incorrect pointer dereference and OOPS,...

PT-2011-4187 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.1-rc3 Description: The issue is related to the befs follow link function in fs/befs/linuxvfs.c, which does not validate the length attribute of long symlinks. This allows local users to cause a denial of servi...

CVE-2011-2928

The befsfollowlink function in fs/befs/linuxvfs.c in the Linux kernel before 3.1-rc3 does not validate the length attribute of long symlinks, which allows local users to cause a denial of service incorrect pointer dereference and OOPS by accessing a long symlink on a malformed Be filesystem...

Pakcyberarmy database hacked and Leaked by Indian Hacker - Lucky

Pakcyberarmy database hacked and Leaked by Indian Hacker - Lucky Indian Hacker - Lucky Indishell crack the 1500+ user's passwords from Pakcyberarmy.net database. Pakcyberarmy.net is the hub of most of the Pakistani hackers. Indian hacker group "Indishell" leader "Lucky" leaks all info via a excel...

AR Infotech SQL Injection Vulnerability

Exploit for php platform in category web applications ---- /\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\- -/ --------------------------------|-------------------------------------------------------| -/ + Exploit Title : AR Infotech SQL injection Vulnerability | -/ + Date :...

Originsoftech Web Portal SQL Injection

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ Title : Originsoftech Web Portal SQL Injection Vulnerability Author: eXeSoul Home : 1337day.com or www.indishell.in /www.andhrahackers.com Email : [email protected] date : 8/04/2011 d0rk:- designed by...

Foxit PDF Reader 4.1.1 - Title Stack Buffer Overflow (Metasploit)

$Id: foxittitlebof.rb 11353 2010-12-16 20:11:01Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

ACC IMoveis 4.0 - SQL Injection

ACC IMoveis 4.0 - SQL Injection Exploit Title : iMoveis SQL Injection Vulnerability Date : 26/10/2010 Author : EraGoN Software link : http://baixar7.com/download/acc-imoveis-script-php.rar/3d1e7bf4b9 Version : 1.1 Tested on : Linux / Windows XP Dork : inurl:imoveis.php?id= Error You have an error...

Unfixed XSS vulnerability at www.vt4.be

Security researcher Perow, has submitted on 27/01/2010 a cross-site-scripting XSS vulnerability affecting www.vt4.be, which at the time of submission ranked 200871 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is currently...

CVE-2009-2410

The localhandlercallback function in server/responder/pam/pamLOCALdomain.c in sssd 0.4.1 does not properly handle blank-password accounts in the SSSD BE database, which allows context-dependent attackers to obtain access by sending the account's username, in conjunction with an arbitrary password...

CVE-2009-2410

The localhandlercallback function in server/responder/pam/pamLOCALdomain.c in sssd 0.4.1 does not properly handle blank-password accounts in the SSSD BE database, which allows context-dependent attackers to obtain access by sending the account's username, in conjunction with an arbitrary password...

HP-UX Update for X Font Server (xfs) Software HPSBUX02303

Check for the Version of X Font Server xfs Software OpenVAS Vulnerability Test HP-UX Update for X Font Server xfs Software HPSBUX02303 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

Sql injection

SQL injection vulnerability in the auto BE User Registration autobeuser extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6459

SQL injection vulnerability in the auto BE User Registration autobeuser extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6459

CVE-2008-6459 affects TYPO3’s auto BE User Registration (autobeuser) extension 0.0.2 and earlier. The issue is an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via unspecified vectors, potentially impacting confidentiality, integrity, and availability....

Joomla! Component Volunteer 2.0 - SQL Injection

Joomla Component comvolunteerjobid SQL-injection Author : boom3rang Site : www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. ---------------------------------------- ! Volunteer ! 05.04.2007 ! John Pan ! [email protected] ! 2.0 Example:...

Goople Cms 1.7 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ===================================================== Goople Cms 1.7 Insecure Cookie Handling Vulnerability ===================================================== Author : BeyazKurt Script : Goople Cms 1.7 Download :...