RHEL 5 : python (RHSA-2011:0027)

Updated python packages that fix multiple security issues, several bugs, and add two enhancements are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which...

Linux Kernel 2.6.37 - Unix Sockets Local Denial of Service

Linux Kernel 2.6.37 - Unix Sockets Local Denial of Service / Simple kernel attack using socketpair. easy, 100% reproductiblle, works under guest. no way to protect : Simple kernel attack using socketpair. easy, 100% reproductiblle, works under guest. no way to protect : See source attached. Proce...

CVE-2010-2226

The xfsswapext function in fs/xfs/xfsdfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file...

Fedora 13 : tar-1.22-16.fc13 (2010-4274)

CVE-2010-0624 tar, cpio: Heap-based buffer overflow by expanding a specially crafted archive 572149 - realloc within checkexclusiontags caused invalid write 570591 - not closing file descriptors for excluded files/dirs with exlude-tag... options could cause descriptor exhaustion 570591 Note that...

cups security update

CentOS Errata and Security Advisory CESA-2010:0129 Updated cups packages that fix one security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides...

South River Technologies WebDrive Local Privilege Escalation Vulnerability

This host is installed with South River Technologies WebDrive and is prone to Local Privilege Escalation Vulnerability. OpenVAS Vulnerability Test $Id: gbsouthriverwebdrivelocprivescvuln.nasl 5373 2017-02-20 16:27:48Z teissa $ South River Technologies WebDrive Local Privilege Escalation...

South River Technologies WebDrive Local Privilege Escalation Vulnerability

South River Technologies WebDrive is prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

DEBIAN-CVE-2010-0385

Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, when functioning as a bridge directory authority, allows remote attackers to obtain sensitive information about bridge identities and bridge descriptors via a dbg-stability.txt directory query...

Fedora Core 12 FEDORA-2009-11314 (cups)

The remote host is missing an update to cups announced via advisory FEDORA-2009-11314. OpenVAS Vulnerability Test $Id: fcore200911314.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-11314 cups Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

Fedora Core 12 FEDORA-2009-11314 (cups)

The remote host is missing an update to cups announced via advisory FEDORA-2009-11314. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

cups security update

CentOS Errata and Security Advisory CESA-2009:1595 Updated cups packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 12th January 2010 The packages...

proc File - Descriptors Directory Permissions Bypass

Hi! This is forward from lkml, so no, I did not invent this hole. Unfortunately, I do not think lkml sees this as a security hole, so... Jamie Lokier said: a the current permission model under /proc/PID/fd has a security hole which Jamie is worried about I believe its bugtraq time. Being able to...

proc File Descriptors Directory Permissions bypass

No description provided by source. Hi! This is forward from lkml, so no, I did not invent this hole. Unfortunately, I do not think lkml sees this as a security hole, so... Jamie Lokier said: a the current permission model under /proc/PID/fd has a security hole which Jamie is worried about I belie...

CVE-2009-2194

Apple Mac OS X 10.5 before 10.5.8 does not properly share file descriptors over local sockets, which allows local users to cause a denial of service system crash by placing file descriptors in messages sent to a socket that has no receiver, related to a "synchronization issue."...

Design/Logic Flaw

Apple Mac OS X 10.5 before 10.5.8 does not properly share file descriptors over local sockets, which allows local users to cause a denial of service system crash by placing file descriptors in messages sent to a socket that has no receiver, related to a "synchronization issue."...

CVE-2009-2194

CVE-2009-2194 affects Mac OS X v10.5 prior to 10.5.8. A synchronization issue in how local sockets share file descriptors allows a local user to trigger a denial of service (system crash) by placing file descriptors in messages sent to a socket with no receiver. The issue is addressed in Security...

Mandriva Update for clamav MDKSA-2007:043 (clamav)

Check for the Version of clamav OpenVAS Vulnerability Test Mandriva Update for clamav MDKSA-2007:043 clamav Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Ubuntu Update for postfix vulnerabilities USN-642-1

Ubuntu Update for Linux kernel vulnerabilities USN-642-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6421.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for postfix vulnerabilities USN-642-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for krb5 vulnerabilities USN-587-1

Ubuntu Update for Linux kernel vulnerabilities USN-587-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5871.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for krb5 vulnerabilities USN-587-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

kernel: Unix sockets kernel panic

The scmdestroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service panic via vectors related to sending an SCMRIGHTS message through a UNIX...