NetBSD 'SMBIOC_OPENSESSION' IOCTL本地拒绝服务漏洞

Bugtraq ID: 44288 NetBSD是一款基于BSD的操作系统。 netsmb文件系统内核模块不正确检查缓冲区限制，普通用户可使内核分配过大的内部缓冲区去处理请求，导致内存耗竭。 ioctl SMBIOCOPENSESSION中的长度参数为有符号类型，没有检查负值。 NetBSD 5.0.2 NetBSD 4.0.1 NetBSD 5.0 NetBSD 4.0 厂商解决方案 已经修补的源文件可从NetBSD CVS库中获得： CVS branch file revision ------------- ---------------- ----------- HEAD...

CVE-2010-1326

perms.cpp in March Hare Software CVSNT 2.0.58, 2.5.01, 2.5.02, 2.5.03 before build 3736, 2.5.04 before build 2862; CVS Suite 2.5.03, 2008 before build 3736, and 2009 before 3729 allows remote attackers to bypass the permissions check, modify arbitrary modules and directories within CVSROOT, and...

Design/Logic Flaw

perms.cpp in March Hare Software CVSNT 2.0.58, 2.5.01, 2.5.02, 2.5.03 before build 3736, 2.5.04 before build 2862; CVS Suite 2.5.03, 2008 before build 3736, and 2009 before 3729 allows remote attackers to bypass the permissions check, modify arbitrary modules and directories within CVSROOT, and...

CVE-2010-1326

perms.cpp in March Hare Software CVSNT 2.0.58, 2.5.01, 2.5.02, 2.5.03 before build 3736, 2.5.04 before build 2862; CVS Suite 2.5.03, 2008 before build 3736, and 2009 before 3729 allows remote attackers to bypass the permissions check, modify arbitrary modules and directories within CVSROOT, and...

CVE-2010-1326

perms.cpp in March Hare Software CVSNT 2.0.58, 2.5.01, 2.5.02, 2.5.03 before build 3736, 2.5.04 before build 2862; CVS Suite 2.5.03, 2008 before build 3736, and 2009 before 3729 allows remote attackers to bypass the permissions check, modify arbitrary modules and directories within CVSROOT, and...

[SECURITY] [DSA 2092-1] New lxr-cvs packages fix cross-site scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2092-1 [email protected] http://www.debian.org/security/ Sebastien Delafond Aug 17th, 2010 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2092-1 (lxr-cvs)

The remote host is missing an update to lxr-cvs announced via advisory DSA 2092-1. OpenVAS Vulnerability Test $Id: deb20921.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2092-1 lxr-cvs Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian: Security Advisory (DSA-2092-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2092-1] New lxr-cvs packages fix cross-site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-2092-1 [email protected] http://www.debian.org/security/ Sébastien Delafond Aug 17th, 2010 http://www.debian.org/security/faq -...

DSA-2092-1 lxr-cvs - cross-site scripting

Bulletin has no description...

[SECURITY] Fedora 13 Update: kdesdk-4.4.3-1.fc13.1

A collection of applications and tools used by developers, including: cervisia: a CVS frontend kate: advanced text editor kbugbuster: a tool to manage the KDE bug report system kcachegrind: a browser for data produced by profiling tools e.g. cachegr ind kompare: diff tool kuiviewer: displays...

OpenSSL 'dtls1_retrieve_buffered_fragment()' Remote Denial of Service Vulnerability

OpenSSL is prone to a denial of service DoS vulnerability caused by a NULL-pointer dereference. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

[SECURITY] Fedora 11 Update: kdesdk-4.4.2-1.fc11

A collection of applications and tools used by developers, including: cervisia: a CVS frontend kate: advanced text editor kbugbuster: a tool to manage the KDE bug report system kcachegrind: a browser for data produced by profiling tools e.g. cachegr ind kompare: diff tool kuiviewer: displays...

[SECURITY] Fedora 12 Update: kdesdk-4.4.2-1.fc12

A collection of applications and tools used by developers, including: cervisia: a CVS frontend kate: advanced text editor kbugbuster: a tool to manage the KDE bug report system kcachegrind: a browser for data produced by profiling tools e.g. cachegr ind kompare: diff tool kuiviewer: displays...

openSUSE Security Update : viewvc (openSUSE-SU-2010:0098-1)

CVS support got broken by the previous viewvc update for CVE-2010-0132. This release fixes that again. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update viewvc-2268. The text description of this...

[SECURITY] Fedora 13 Update: viewvc-1.1.5-1.fc13

ViewVC is a browser interface for CVS and Subversion version control repositories. It generates templatized HTML to present navigable directory, revision, and change log listings. It can display specific versions of files as well as diffs between those versions. Basically, ViewVC provides the bul...

Fedora Update for viewvc FEDORA-2010-5524

Check for the Version of viewvc OpenVAS Vulnerability Test Fedora Update for viewvc FEDORA-2010-5524 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for viewvc FEDORA-2010-5507

Check for the Version of viewvc OpenVAS Vulnerability Test Fedora Update for viewvc FEDORA-2010-5507 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[SECURITY] Fedora 11 Update: viewvc-1.1.5-1.fc11

ViewVC is a browser interface for CVS and Subversion version control repositories. It generates templatized HTML to present navigable directory, revision, and change log listings. It can display specific versions of files as well as diffs between those versions. Basically, ViewVC provides the bul...

Mandriva Update for rootcerts MDVA-2010:100 (rootcerts)

Check for the Version of rootcerts OpenVAS Vulnerability Test Mandriva Update for rootcerts MDVA-2010:100 rootcerts Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...