Ubuntu 10.04 LTS / 10.10 / 11.04 : usb-creator vulnerability (USN-1127-1)

Evan Broder discovered that usb-creator did not properly enforce restrictions when performing privileged disk operations. A local attacker could use this flaw to perform certain disk operations, such as unmount arbitrary mountpoints. Note that Tenable Network Security has extracted the preceding...

Ubuntu 6.06 LTS : linux-source-2.6.15 vulnerabilities (USN-1111-1)

Dan Rosenberg discovered multiple flaws in the X.25 facilities parsing. If a system was using X.25, a remote attacker could exploit this to crash the system, leading to a denial of service. CVE-2010-4164 Vegard Nossum discovered that memory garbage collection was not handled correctly for active...

CVE-2011-2178

The virSecurityManagerGetPrivateData function in security/securitymanager.c in libvirt 0.8.8 through 0.9.1 uses the wrong argument for a sizeof call, which causes incorrect processing of "security manager private data" that "reopens disk probing" and might allow guest OS users to read arbitrary...

USN-1146-1: Linux kernel vulnerabilities

Kees Cook discovered that some ethtool functions did not correctly clear heap memory. A local attacker with CAPNETADMIN privileges could exploit this to read portions of kernel heap memory, leading to a loss of privacy. CVE-2010-4655 Kees Cook discovered that the IOWarrior USB device driver did n...

Nmap NSE net: nfs-statfs

Retrieves disk space statistics and information from a remote NFS share. The output is intended to resemble the output of 'df'. The script will provide pathconf information of the remote NFS if the version used is NFSv3. SYNTAX: nfs-statfs.human: If set to '1' or 'true', shows file sizes in a hum...

Design/Logic Flaw

Cisco IOS XR 3.6.x, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 does not properly remove sshdlock files from /tmp/, which allows remote attackers to cause a denial of service disk consumption by making many SSHv1 connections, aka Bug ID CSCtd64417...

CVE-2011-0949

Cisco IOS XR Software SSHv1 denial of service vulnerability (CVE-2011-0949) affects 3.6.x, 3.8.x before 3.8.3, and 3.9.x before 3.9.1. The root cause is that sshd_lock files in /tmp are not properly removed after SSHv1 sessions, allowing remote attackers making many SSHv1 connections to exhaust /...

Mandriva Linux Security Advisory : rdesktop (MDVSA-2011:102)

A vulnerability has been identified and fixed in rdesktop : Directory traversal vulnerability in the diskcreate function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. dot dot in a pathname CVE-2011-159...

AIX 610004 : U840276

The remote host is missing AIX PTF U840276 which is related to the security of the package devices.scsi.disk.diag.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

rdesktop directory traversal

Directory traversal in disk redirection feature...

[SECURITY] [DSA 2240-1] linux-2.6 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-2240-1 [email protected] http://www.debian.org/security/ dann frazier May 24, 2011 http://www.debian.org/security/faq -...

USN-1136-1: rdesktop vulnerability

It was discovered that rdesktop incorrectly handled specially crafted paths when using disk redirection. If a user were tricked into connecting to a malicious server, an attacker could access arbitrary files on the user's filesystem...

CVE-2011-1595

Directory traversal vulnerability in the diskcreate function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. dot dot in a pathname...

DEBIAN-CVE-2011-1595

Directory traversal vulnerability in the diskcreate function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. dot dot in a pathname...

CVE-2011-1595

Directory traversal vulnerability in the diskcreate function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. dot dot in a pathname...

CVE-2011-1595

Directory traversal vulnerability in the diskcreate function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. dot dot in a pathname...

CVE-2011-1595

CVE-2011-1595 affects rdesktop up to version 1.6.x (before 1.7.0). The vulnerability is a directory traversal in the disk_create function (disk.c) when disk redirection is enabled, allowing a remote RDP server to read or overwrite arbitrary files via a .. path element. Impact is partial confident...

DSA-2240-1 linux-2.6 - several issues

Bulletin has no description...

CVE-2011-2147

Openswan 2.2.x does not properly restrict permissions for 1 /var/run/starter.pid, related to starter.c in the IPsec starter, and 2 /var/lock/subsys/ipsec, which allows local users to kill arbitrary processes by writing a PID to a file, or possibly bypass disk quotas by writing arbitrary data to a...

CVE-2011-2147

Openswan 2.2.x does not properly restrict permissions for 1 /var/run/starter.pid, related to starter.c in the IPsec starter, and 2 /var/lock/subsys/ipsec, which allows local users to kill arbitrary processes by writing a PID to a file, or possibly bypass disk quotas by writing arbitrary data to a...