19 matches found
CentOS Update for kernel CESA-2011:0833 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
DEC Alpha Linux <= 3.0 Local Root Exploit
No description provided by source. / DEC Alpha Linux = 3.0 local root exploit by Dan Rosenberg @djrbliss Usage: $ gcc alpha-omega.c -o alpha-omega $ ./alpha-omega Notes: -Payload specific to = 2.6.28 no cred struct, modify as needed -Socket trigger tested on 2.6.28 adjust offset as needed -INETDI...
DEC Alpha Linux 3.0 Local Root Exploit
/ DEC Alpha Linux include include include include include include include include include include define SYSosfwait4 7 define SOCKOFFSET 552 / Offset of skdestruct fptr in sock struct, change for your kernel / define PAGESIZE 8192 / DEC alpha page size is 8K / define KERNELBASE 0xfffffc0000000000...
Linux Kernel 2.6.283.0 (DEC Alpha Linux) - Local Privilege Escalation
Linux Kernel 2.6.283.0 DEC Alpha Linux - Local Privilege Escalation / DEC Alpha Linux include include include include include include include include include include define SYSosfwait4 7 define SOCKOFFSET 552 / Offset of skdestruct fptr in sock struct, change for your kernel / define PAGESIZE 819...
DEC Alpha Linux <= 3.0 Local Root Exploit
Exploit for linux platform in category local exploits / DEC Alpha Linux include include include include include include include include include include define SYSosfwait4 7 define SOCKOFFSET 552 / Offset of skdestruct fptr in sock struct, change for your kernel / define PAGESIZE 8192 / DEC alpha...
Linux Kernel 2.6.28/3.0 (DEC Alpha Linux) - Local Privilege Escalation
/ DEC Alpha Linux include include include include include include include include include include define SYSosfwait4 7 define SOCKOFFSET 552 / Offset of skdestruct fptr in sock struct, change for your kernel / define PAGESIZE 8192 / DEC alpha page size is 8K / define KERNELBASE 0xfffffc0000000000...
Important: Red Hat Security Advisory: kernel-rt security and bug fix update
Updated kernel-rt packages that fix multiple security issues and various bugs are now available for Red Hat Enterprise MRG 1.3. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...
[SECURITY] [DSA-2019-1] New pango1.0 packages fix denial of service
------------------------------------------------------------------------ Debian Security Advisory DSA-2019-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano March 20, 2010 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1925-1] New proftpd-dfsg packages fix SSL certificate verification weakness
------------------------------------------------------------------------ Debian Security Advisory DSA-1925-1 [email protected] http://www.debian.org/security/ Steffen Joeris October 31, 2009 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1848-1] New znc packages fix remote code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1848-1 [email protected] http://www.debian.org/security/ Florian Weimer August 02, 2009 http://www.debian.org/security/faq -...
Debian git-core DEC Alpha & MIPS本地特权提升漏洞
BUGTRAQ ID: 34644 CNCAN ID:CNCAN-2009042201 Debian git-core是一款用于Linux内核开发的版本控制工具。 Debian git-core不正确设置权限,本地攻击者可以利用漏洞提升特权。 Git版本控制系统在部分DEC Alpha & MIPS架构上,/usr/share/git-core/templates/下的文件属主为非root用户,这允许本地系统用户写这些文件并可能导致特权提升。 Debian git-core 1.5.6 5-3 Debian git-core 1.4.4 4-4 可参考如下程序: Debian Linux...
Debian DSA-1777-1 : git-core - file permission error
Peter Palfrader discovered that in the Git revision control system, on some architectures files under /usr/share/git-core/templates/ were owned by a non-root user. This allows a user with that uid on the local system to write to these files and possibly escalate their privileges. This issue only...
[SECURITY] [DSA 1777-1] New git-core packages fix privilege escalation
------------------------------------------------------------------------ Debian Security Advisory DSA-1777-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 21, 2009 http://www.debian.org/security/faq -...
DSA-1777-1 git-core - privilege escalation
Bulletin has no description...
Linux Kernel i915驱动drivers/char/drm/i915_dma.c内存破坏漏洞
BUGTRAQ ID: 31792 CVECAN ID: CVE-2008-3831 Linux Kernel是开放源码操作系统Linux所使用的内核。 在使用Intel G33系列芯片组的机器上,非root用户可以通过ioctl调用只有root用户才可以使用的i915内核驱动的i915setstatuspage函数。本地攻击者可以通过向驱动发送特制的IOCTL清零并重新映射内存位置。 Linux kernel 2.6.x Debian ------ Debian已经为此发布了一个安全公告(DSA-1655-1)以及相应补丁: DSA-1655-1:New Linux 2.6.24...
Mozilla Firefox字符编码跨站脚本漏洞
BUGTRAQ ID: 29303 CVECAN ID: CVE-2008-0416 Firefox是一款流行的开源WEB浏览器。 Firefox及其衍生产品中的HTML解析器没有遵循HTML规范,将退格字符处理为空格,这可能在遵循了上述规范过滤输入的网站上导致跨站脚本攻击。此外Firefox没有正确的解析ShiftJIS编码的0x80控制字符,这可能允许攻击者绕过站点输入过滤执行跨站脚本攻击。 Mozilla Firefox 2.0.0.12 厂商补丁: Debian ------ Debian已经为此发布了一个安全公告(DSA-1489-1)以及相应补丁: DSA-1489-1:Ne...
[SECURITY] [DSA 1538-1] New alsaplayer packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1538-1 [email protected] http://www.debian.org/security/ Devin Carraway April 04, 2008 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1448-1] New eggdrop packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1448-1 [email protected] http://www.debian.org/security/ Steve Kemp January 05, 2008 http://www.debian.org/security/faq -...
CVE-1999-1315
CVE-1999-1315 affects DECnet/OSI on OpenVMS prior to 5.8 running on DEC Alpha AXP and VAX/VMS. The vulnerability allows local users to gain privileges or cause a denial of service. The connected documents confirm the affected environment but do not provide detailed root cause, specific vulnerable...