Unbreakable Enterprise kernel security and bugfix update

2.6.39-400.21.1 - SPEC: v2.6.39-400.21.1 Maxim Uvarov - xen/mmu: On early bootup, flush the TLB when changing RO-RW bits Xen provided pagetables. Konrad Rzeszutek Wilk 2.6.39-400.20.1 - SPEC: v2.6.39-400.20.1 Maxim Uvarov - PCI: Set device power state to PCID0 for device without native PM support...

SuSE 10 Security Update : ofed (ZYPP Patch Number 8386)

This update of ofed fixed multiple issues including security related flaws : - sdp: move histogram allocation from stack to heap. bnc706175 - cma: Fix crash in request handlers. bnc678795, CVE-2011-0695 - rds: set correct msgnamelen. bnc773383, CVE-2012-3430 - cm: Bump reference count on cmid...

CVE-2009-5115

McAfee Common Management Agent CMA 3.5.5 through 3.5.5.588 and 3.6.0 through 3.6.0.608, and McAfee Agent 4.0 before Patch 3, allows remote authenticated users to overwrite arbitrary files by accessing a report-writing ActiveX control COM object...

CVE-2009-5115

CVE-2009-5115 affects McAfee CMA 3.5.5 (3.5.5.588) and 3.6.0 (3.6.0.608), and McAfee Agent 4.0 prior to Patch 3. An authenticated remote attacker could overwrite arbitrary files by accessing a report-writing ActiveX control COM object. Remediation: apply Patch 3 for McAfee Agent 4.0 (and correspo...

kernel: panic in ib_cm:cm_work_handler

Race condition in the cmworkhandler function in the InfiniBand driver drivers/infiniband/core/cma.c in Linux kernel 2.6.x allows remote attackers to cause a denial of service panic by sending an InfiniBand request while other request handlers are still running, which triggers an invalid pointer...

Oracle Linux 6 Unbreakable Enterprise kernel security fix update

2.6.32-100.28.11.el6 - fs/partitions: Validate mapcount in Mac partition tables CVE-2011-1010 - nfs4: Ensure that ACL pages sent over NFS were not allocated from the slab v3 CVE-2011-1090 2.6.32-100.28.10.el6 - Use cciss for some Smart Array controller for OL5 orabug 11899706 - CVEs from...

Security feature bypass

FrameworkService.exe in McAfee Common Management Agent CMA 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestrator ePO and ProtectionPilot PrP, allows remote attackers to corrupt memory and cause a denial of service CMA Framework service crash via a long invalid method in requests for the...

CVE-2008-1855

FrameworkService.exe in McAfee Common Management Agent CMA 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestrator ePO and ProtectionPilot PrP, allows remote attackers to corrupt memory and cause a denial of service CMA Framework service crash via a long invalid method in requests for the...

CVE-2008-1855

FrameworkService.exe in McAfee Common Management Agent CMA 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestrator ePO and ProtectionPilot PrP, allows remote attackers to corrupt memory and cause a denial of service CMA Framework service crash via a long invalid method in requests for the...

CVE-2008-1855

CVE-2008-1855 affects McAfee Common Management Agent (CMA) FrameworkService.exe in CMA 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestrator (ePO) and ProtectionPilot. The vulnerability allows an unauthenticated, remote attacker to trigger a memory corruption in CMA FrameworkService via ...

CVE-2008-1357

CVE-2008-1357 affects McAfee CMA 3.6.0.574 (Patch 3) and earlier, used with ePolicy Orchestrator 4.0.0 build 1015. The vulnerability is in the logDetail function of applib.dll and stems from a format string issue in the UDP AgentWakeup handling (port 8082) that can leak into the format string spe...

CVE-2008-1357: Use of Externally-Controlled Format String

Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent CMA 3.6.0.574 Patch 3 and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service crash or execute arbitrary code via format string...

McAfee Common Management Agent (CMA)多个内存破坏漏洞

McAfee Common Management Agent是一款安全管理客户端工具，帮助简化网管的防病毒管理任务。 McAfee Common Management Agent存在多个内存破坏问题，远程攻击者可以利用漏洞以系统进程权限执行任意指令。 漏洞包括如下： -不正确的边界检查可引起整数下溢，攻击者可以利用漏洞在系统上执行任意代码。 -发送特殊构建的报文会由于不正确的边界检查而造成基于堆栈的缓冲区溢出。 -发送特殊构建的报文会由于不正确的边界检查而造成基于堆的溢出，可导致任意代码执行。 -不正确的边界检查可引起整数溢出，攻击者可以利用漏洞在系统上执行任意代码。 0 McAfee...

CVE-2006-5272: Undefined Security Weakness

Stack-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent CMA 3.6.0.453 and earlier allows remote attackers to execute arbitrary code via a crafted ping packet...

McAfee Common Management Agent Traversal Arbitrary File Write

According to its banner, the McAfee Common Management Agent CMA running on the remote host is affected by a directory traversal vulnerability in the Framework Service component due to improper sanitization of user-supplied input. An unauthenticated, remote attacker can exploit this, via a special...

CVE-2005-4505: Undefined Security Weakness

Unquoted Windows search path vulnerability in McAfee VirusScan Enterprise 8.0i patch 11 and CMA 3.5 patch 5 might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, which is run by naPrdMgr.exe when it attempts to execute EntVUtil.EXE under an unquoted...