Grub, DiskCryptor, LILO, DriveCrypt, TrueCRYPT and Intel, IBM, HP BIOS disk ebcryption utilities information leak

Cleartext password is not erased from BIOS data buffer...

A step-by-step teach you to use the U disk into password of system-vulnerability warning-the black bar safety net

U disk is now very popular, however, if you just take it to store data, perhaps a little pity. In fact, we also can make U disk to play a greater energy! For example, today xiaobian teach you a trick that will allow your USB disk instead of the login system The password only when you plug in the ...

[IVIZ-08-006] DiskCryptor Security Model bypass exploiting wrong BIOS API usage

----------------------------------------------------------------------- iViZ Security Advisory 08-006 25/08/2008 ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com...

[IVIZ-08-009] Grub Legacy Security Model bypass exploiting wrong BIOS API usage

----------------------------------------------------------------------- iViZ Security Advisory 08-009 25/08/2008 ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com...

FreeBSD : opera -- multiple vulnerabilities (73ec1008-72f0-11dd-874b-0030843d3802)

The Opera Team reports : Scripts are able to change the addresses of framed pages that come from the same site. Due to a flaw in the way that Opera checks what frames can be changed, a site can change the address of frames on other sites inside any window that it has opened. This allows sites to...

USN-637-1: Linux kernel vulnerabilities

It was discovered that there were multiple NULL-pointer function dereferences in the Linux kernel terminal handling code. A local attacker could exploit this to execute arbitrary code as root, or crash the system, leading to a denial of service. CVE-2008-2812 The dochangetype routine did not...

AIX 610000 : U818907

The remote host is missing AIX PTF U818907 which is related to the security of the package devices.fcp.disk.array.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Opera < 9.52 Multiple Vulnerabilities

Binary data 4634.prm...

QEMU安全绕过漏洞

BUGTRAQ ID: 30604 CVE ID：CVE-2008-1945 CNCVE ID：CNCVE-20081945 QEMU是一款面向完整PC系统的开源仿真器。 QEMU不正确限制对部分功能的访问，本地攻击者可以利用漏洞绕过安全限制，执行未授权攻击。 QEMU没有正确处理针对可移动媒介的更改，允许客户操作系统用户通过使用diskformat读取宿主OS上的任意文件。通过在-usbdevice选项的参数可修改磁盘映像头字段数据而识别为不同的格式来读取文件。 MandrakeSoft Linux Mandrake 2008.1 x8664 MandrakeSoft Linux...

CVE-2008-1945

QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using the diskformat: parameter in the -usbdevice option to modify the disk-image header to identify a different format, a related issue to CVE-2008-2004...

CVE-2008-1945

QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using the diskformat: parameter in the -usbdevice option to modify the disk-image header to identify a different format, a related issue to CVE-2008-2004...

CVE-2008-2324

The Repair Permissions tool in Disk Utility in Apple Mac OS X 10.4.11 adds the setuid bit to the emacs executable file, which allows local users to gain privileges by executing commands within emacs...

Design/Logic Flaw

The Repair Permissions tool in Disk Utility in Apple Mac OS X 10.4.11 adds the setuid bit to the emacs executable file, which allows local users to gain privileges by executing commands within emacs...

CVE-2008-2324

The Repair Permissions tool in Disk Utility in Apple Mac OS X 10.4.11 adds the setuid bit to the emacs executable file, which allows local users to gain privileges by executing commands within emacs...

CVE-2008-2324

CVE-2008-2324 affects Apple Mac OS X (Disk Utility’s Repair Permissions tool). The vulnerability arises when Repair Permissions runs and incorrectly adds the setuid bit to /usr/bin/emacs, enabling a local attacker to execute commands as root by invoking emacs. This is a local privilege-escalation...

Apple Mac OS X 2008-005更新修复多个安全漏洞

BUGTRAQ ID: 30487,30488,30489,30490,30492,30493 CVECAN ID: CVE-2008-2320,CVE-2008-2321,CVE-2008-2322,CVE-2008-2323,CVE-2008-2324,CVE-2008-2325 Mac OS X是苹果家族机器所使用的操作系统。 Apple 2008-005安全更新修复了Mac OS X中的多个安全漏洞，本地或远程攻击者可能利用这些漏洞造成多种威胁。 CVE-2008-2320 处理超长文件名时的栈溢出漏洞可能导致应用意外终止或执行任意指令。 CVE-2008-2321...

CVE-2008-2324: Undefined Security Weakness

The Repair Permissions tool in Disk Utility in Apple Mac OS X 10.4.11 adds the setuid bit to the emacs executable file, which allows local users to gain privileges by executing commands within emacs...

AIX 530006 : U819385

The remote host is missing AIX PTF U819385 which is related to the security of the package devices.common.IBM.disk.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

AIX 530006 : U819392

The remote host is missing AIX PTF U819392 which is related to the security of the package devices.fcp.disk.array.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

UDF truncating issue

The Universal Disk Format UDF filesystem driver in Linux kernel 2.6.17 and earlier allows local users to cause a denial of service hang and crash via certain operations involving truncated files, as demonstrated via the dd command...