8660 matches found
CVE-2005-2370
Removed by vendor...
CVE-2005-0201
D-BUS dbus before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket...
CVE-2005-0201
D-BUS dbus before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket...
CVE-2005-0201
D-BUS dbus before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket...
DEBIAN-CVE-2005-0201
D-BUS dbus before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket...
CVE-2005-0201
D-BUS dbus before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket...
CVE-2005-0201
CVE-2005-0201 affects D-BUS (dbus) before 0.22, where insufficient socket access restriction allows a local user to listen to or send arbitrary messages on another user’s per-user session bus if the socket address is known. This is a local-privilege/confidentiality issue. Connected advisories ind...
USN-144-1: dbus vulnerability
Besides providing the global system-wide communication bus, dbus also offers per-user "session" buses which applications in an user's session can create and use to communicate with each other. Daniel Reed discovered that the default configuration of the session dbus allowed a local user to connec...
Mandrake Linux Security Advisory : dbus (MDKSA-2005:105)
Dan Reed discovered a vulnerability in the D-BUS system for sending messages between applications. He found that a user can send and listen to messages on another user's per-user session bus if they knew the address of the socket. The updated packages have been patched to correct this problem...
dbus security update
CentOS Errata and Security Advisory CESA-2005:102 Updated dbus packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. D-BUS is a system for sending messages between...
security flaw
D-BUS dbus before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket...
Low: Red Hat Security Advisory: dbus security update.
Updated dbus packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. D-BUS is a system for sending messages between applications. It is used both for the systemwide message...
D-BUS message bus system session hijack
Malicious local user can connect to another user's session bus...
[SA14119] D-BUS Session Bus Hijack Vulnerability
TITLE: D-BUS Session Bus Hijack Vulnerability SECUNIA ADVISORY ID: SA14119 VERIFY ADVISORY: http://secunia.com/advisories/14119/ CRITICAL: Less critical IMPACT: Hijacking WHERE: Local system SOFTWARE: D-BUS 0.x http://secunia.com/product/4599/ DESCRIPTION: Daniel Reed has reported a vulnerability...
linux kernel IEEE1394(Firewire) driver integer overflow vulnerabilities
Linux kernel IEEE 1394Firewire driver - integer overflows ----------------------------------------------------------- Link: http://www.linux1394.org/index.php Driver Description: IEEE 1394 is a standard defining a high speed serial bus. This bus is also named FireWire by Apple or i.Link by Sony...
xploit_dbg.cpp.txt
/ Discovered and coded Jan 25, 2004 Copyright C2004 [email protected] / include include typedef int NTSTATUS; define NTAPI stdcall const IA32SYSENTERCS = 0x174; const IA32SYSENTERESP = 0x175; const IA32SYSENTEREIP = 0x176; const SelCodeKernel = 0x8; const CmosIndx = 0x0E; // CMOS Diagnostic...
Apple OSX sliplogin overflow
side note ... isn't it odd that I can run gdb on a suid binary? Osx version 10.1.3 localhost: elguapo ls -al /usr/sbin/sliplogin -r-sr-xr-x 1 root wheel 14700 Dec 8 10:49 /usr/sbin/sliplogin localhost: elguapo sliplogin perl -e 'print "A" x 9000' Bus error localhost: elguapo uname -a Darwin...
Service Bus for Windows Server 1.1
Service Bus for Windows Server 1.1...
Security Update for Service Bus for Windows Server 1.1 (KB2972621)
Security Update for Service Bus for Windows Server 1.1. This update fixes a security vulnerability related to usage of the AMPQ protocol. It also contains a few other bug fixes to the product...
