VFAT compat ioctls DoS on 64-bit

The VFAT compat ioctls in the Linux kernel before 2.6.21.2, when run on a 64-bit system, allow local users to corrupt a kerneldirent struct and cause a denial of service system crash via unknown vectors...

openSUSE 10 Security Update : compat-openssl097g (compat-openssl097g-2171)

A buffer overflow condition within the SSLgetsharedciphers function and a DoS condition known as 'parasitic public keys' have been fixed. The later problem allowed attackers to trick the OpenSSL engine to spend an extraordinary amount of time to process public keys. The following CAN numbers have...

USN-489-1: Linux kernel vulnerabilities

A flaw was discovered in dvb ULE decapsulation. A remote attacker could send a specially crafted message and cause a denial of service. CVE-2006-4623 The compatsysmount function allowed local users to cause a denial of service when mounting a smbfs filesystem in compatibility mode. CVE-2006-7203...

USN-486-1: Linux kernel vulnerabilities

The compatsysmount function allowed local users to cause a denial of service when mounting a smbfs filesystem in compatibility mode. CVE-2006-7203 The Omnikey CardMan 4040 driver cm4040cs did not limit the size of buffers passed to read and write. A local attacker could exploit this to execute...

CVE-2007-2878

The VFAT compat ioctls in the Linux kernel before 2.6.21.2, when run on a 64-bit system, allow local users to corrupt a kerneldirent struct and cause a denial of service system crash via unknown vectors...

Code injection

The VFAT compat ioctls in the Linux kernel before 2.6.21.2, when run on a 64-bit system, allow local users to corrupt a kerneldirent struct and cause a denial of service system crash via unknown vectors...

CVE-2007-2878: Undefined Security Weakness

The VFAT compat ioctls in the Linux kernel before 2.6.21.2, when run on a 64-bit system, allow local users to corrupt a kerneldirent struct and cause a denial of service system crash via unknown vectors...

Linux Kernel VFat Compat IOCTLS本地拒绝服务漏洞

Linux是一款开放源代码的操作系统。 Linux内核处理VFAT compat ioctls存在问题，本地攻击者可以利用漏洞对系统进行拒绝服务攻击。 在x86-64系统下，如果使用-m32参数在msdos或者vfat目录中编译运行，可导致kerneldirent结构中出现垃圾数据而造成SIGSEGV，导致系统崩溃。 Linux kernel 2.6.21 .1 Linux kernel 2.6.21 Linux kernel 2.6.20 .9 Linux kernel 2.6.20 .8 Linux kernel 2.6.20 .5 Linux kernel 2.6.20 .4...

Linux Kernel 2.6.x - VFat Compat IOCTLS Local Denial of Service

/ source: https://www.securityfocus.com/bid/24134/info The Linux Kernel is prone to a denial-of-service vulnerability. A local attacker can exploit this issue to cause the kernel to crash, effectively denying service to legitimate users. / include include include include include include struct...

Solaris 5.8 (x86) : 109414-09

Solstice AdminSuite 3.0.1x86: NIS+ compat passwd autohome rights. Date this patch was last updated by Sun : May/08/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

CentOS 4 : kernel (CESA-2006:0101)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

nss_db security update

CentOS Errata and Security Advisory CESA-2005:483-5 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2006-March/074943.html Affected packages: nssdb nssdb-compat...

RHEL 4 : kernel (RHSA-2006:0101)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

CVE-2004-1323: Undefined Security Weakness

Multiple syscalls in the compat subsystem for NetBSD before 2.0 allow local users to cause a denial of service kernel crash via a large signal number to 1 xxxsyskill, 2 xxxsyssigaction, and possibly other translation functions...

NetBSD Security Advisory 2004-010: Insufficient argument validation in compat code

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2004-010 ================================= Topic: Insufficient argument validation in compat code Version: NetBSD-current: source prior to Oct 27, 2004 NetBSD 2.0: not affected NetBSD 1.6.2: affected NetBSD 1.6.1: affected NetBSD 1.6:...

Mandrake Linux Security Advisory : glibc (MDKSA-2002:050)

A buffer overflow vulnerability was found in the way that the glibc resolver handles the resolution of network names and addresses via DNS in glibc versions 2.2.5 and earlier. Only systems using the 'dns' entry in the 'networks' database in /etc/nsswitch.conf are vulnerable to this issue. By...

[SECURITY] New versions of termcap-compat fixes buffer overflow

We have received a report that former versions of libtermcap contained an exploitable buffer overflow. Debian itself is not exploitable by this bug since termcap was abandoned in favour of terminfo long ago. However, if you have compiled your own programs using termcap or have installed third par...