Linux Kernel 2.6.27 2.6.36 (RedHat x86-64) - compat Local Privilege Escalation

Linux Kernel 2.6.27 2.6.36 RedHat x86-64 - compat Local Privilege Escalation / Ac1dB1tch3z Vs Linux Kernel x8664 0day Today is a sad day.. R.I.P. Tue, 29 Apr 2008 / Tue, 7 Sep 2010 a bit of history: MCASTMSFILTER Compat mode bug found... upon commit! 2 year life on this one author David L Stevens...

[SECURITY] Fedora 12 Update: socat-1.7.1.3-1.fc12

Socat is a relay for bidirectional data transfer between two independent da ta channels. Each of these data channels may be a file, pipe, device serial l ine etc. or a pseudo terminal, a socket UNIX, IP4, IP6 - raw, UDP, TCP, an SSL socket, proxy CONNECT connection, a file descriptor stdin etc.,...

AIX 610005 : U836598

The remote host is missing AIX PTF U836598 which is related to the security of the package X11.compat.lib.X11R6motif.6.1 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

RHEL 5 : openldap (RHSA-2010:0198)

Updated openldap packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

systemtap: Crash with systemtap script using __get_argv()

Multiple integer signedness errors in the 1 getargv and 2 getcompatargv functions in tapset/auxsyscalls.stp in SystemTap 1.1 allow local users to cause a denial of service script crash, or system crash or hang via a process with a large number of arguments, leading to a buffer overflow...

openSUSE Security Update : compat-openssl097g (compat-openssl097g-1548)

The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...

openSUSE Security Update : compat-openssl097g (compat-openssl097g-1548)

The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...

SLES10: Security update for compat-openssl097g

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: compat-openssl097g More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for compat-openssl097g

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: compat-openssl097g More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SLES10: Security update for compat-openssl097g

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: compat-openssl097g More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SLES10: Security update for compat-curl2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: compat-curl2 More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText:...

SLES10: Security update for compat-openssl097g

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: compat-openssl097g More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SLES10: Security update for compat-curl2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: compat-curl2 More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/...

SLES10: Security update for compat-openssl097g

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: compat-openssl097g More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SuSE 10 Security Update : compat-curl2 (ZYPP Patch Number 6408)

This update of libcurl2 fixes the 0-character handling in the subject name of a SSL certificate. This bug could be used to execute an undetected man-in-the-middle-attack. CVE-2009-2417 Additionally the arbitrary file access problem was fixed. CVE-2009-0037 %NASLMINLEVEL 70300 C Tenable Network...

Fedora Core 10 FEDORA-2009-7763 (compat-wxGTK26)

The remote host is missing an update to compat-wxGTK26 announced via advisory FEDORA-2009-7763. OpenVAS Vulnerability Test $Id: fcore20097763.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7763 compat-wxGTK26 Authors: Thomas Reinke Copyright:...

Fedora Core 11 FEDORA-2009-7755 (compat-wxGTK26)

The remote host is missing an update to compat-wxGTK26 announced via advisory FEDORA-2009-7755. OpenVAS Vulnerability Test $Id: fcore20097755.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7755 compat-wxGTK26 Authors: Thomas Reinke Copyright:...

Fedora Core 10 FEDORA-2009-7763 (compat-wxGTK26)

The remote host is missing an update to compat-wxGTK26 announced via advisory FEDORA-2009-7763. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

Fedora Core 11 FEDORA-2009-7755 (compat-wxGTK26)

The remote host is missing an update to compat-wxGTK26 announced via advisory FEDORA-2009-7755. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

openSUSE Security Update : compat-openssl097g (compat-openssl097g-480)

This update improves the verification of return values. Prior to this udpate it was possible to bypass the certification chain checks of openssl. CVE-2008-5077 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...