kernel: untangle the do_mremap()

The Linux kernel before 2.6.32.4 allows local users to gain privileges or cause a denial of service panic by calling the 1 mmap or 2 mremap function, aka the "domremap mess" or "mremap/mmap mess."...

Fedora Update for sudo FEDORA-2010-3415

Check for the Version of sudo OpenVAS Vulnerability Test Fedora Update for sudo FEDORA-2010-3415 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

sudo: Fails to reset group permissions if runas_default set

sudo 1.6.x before 1.6.9p21, when the runasdefault option is used, does not properly set group memberships, which allows local users to gain privileges via a sudo command...

PT-2010-2187 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.33-rc7 Description: The issue is related to the do pages move function in mm/migrate.c, which does not validate node values. This allows local users to read arbitrary kernel memory locations, cause a denial ...

kernel: KVM: x86 emulator: limit instructions to 15 bytes

The doinsnfetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service increased scheduling...

php content management system e107 multiple cross-site scripting and SQL injection vulnerabilities-vulnerability warning-the black bar safety net

Affected version: e107 website system 0.7.16 vulnerability description: e107 is a php written content management system. e107 the following module did not sufficiently filter user-submitted variable: - submitnews.php - usersettings.php. - e107admin/newpost.php. - e107admin/banlist.php. -...

Kernel BUG() in locks_remove_flock

Race condition in the dosetlk function in fs/nfs/file.c in the Linux kernel before 2.6.26 allows local users to cause a denial of service crash via vectors resulting in an interrupted RPC call that leads to a stray FLPOSIX lock, related to improper handling of a race between fcntl and close in th...

Recently that IE7 0day shellcode decryption-bug warning-the black bar safety net

One, use freshow tool to decrypt Original link http://bbs.kafan.cn/viewthread.php?tid=383769&page=1&extra=page%3D1pid5736829 Need to extract the shellcode decryption 1 dadong replace to % u for once esc decrypt--up 2 esc next fill in 2 1 decode should appear. ! Second, The do-it-yourself it, writ...

RHEL 5 : sudo (RHSA-2009:0267)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2009:0267 advisory. The sudo superuser do utility allows system administrators to give certain users the ability to run commands as root with logging. A flaw was...

Sql injection

SQL injection vulnerability in index.php in EACOMM DO-CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the p parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6019

SQL injection vulnerability in index.php in EACOMM DO-CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the p parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6019

SQL injection vulnerability in index.php in EACOMM DO-CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the p parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6019

CVE-2008-6019 describes a SQL injection in the Web app EACOMM DO-CMS 3.0. The vulnerability is in index.php, exploitable via the p parameter to remotely execute arbitrary SQL commands. The documents do not provide remediation, affected versions beyond 3.0, or exploit details. No further public te...

kernel: don't allow splice() to files opened with O_APPEND

The dosplicefrom function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the OAPPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file...

PT-2009-1235 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.26 Description: A race condition exists in the do setlk function, allowing local users to cause a denial of service by interrupting an RPC call, resulting in a stray FL POSIX lock. This issue is related to t...

DO-CMS 3.0 - p Multiple SQL Injections

DO-CMS 3.0 - p Multiple SQL Injections source: https://www.securityfocus.com/bid/32906/info DO-CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

DEBIAN-CVE-2008-4575

Buffer overflow in the DoCommand function in jhead before 2.84 might allow context-dependent attackers to cause a denial of service crash via 1 a long -cmd argument and 2 unspecified vectors related to "a bunch of potential string overflows."...

CVE-2008-4575

Buffer overflow in the DoCommand function in jhead before 2.84 might allow context-dependent attackers to cause a denial of service crash via 1 a long -cmd argument and 2 unspecified vectors related to "a bunch of potential string overflows."...

CVE-2008-4554

The dosplicefrom function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the OAPPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file...

kernel: missing check before setting mount propagation

The dochangetype function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the CAPSYSADMIN capability, which allows local users to gain privileges or cause a denial of service by modifying the properties of a mountpoint...