CVE-2008-3525: Undefined Security Weakness

The sbniioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAPNETADMIN capability before processing a 1 SIOCDEVRESINSTATS, 2 SIOCDEVSHWSTATE, 3 SIOCDEVENSLAVE, or 4 SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass...

DSA-1630-1 fai-kernels linux-2.6 user-mode-linux - several vulnerabilities

Bulletin has no description...

ESET Smart Security 3.0.667.0 - Privilege Escalation (PoC)

ESET Smart Security 3.0.667.0 - Privilege Escalation PoC -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - Orange Bat advisory - Name : ESET Smart Security 3.0.667.0 Class : Privilage escalation Published : 2008-08-14 Credit : g g orange-bat com - - Details - File: easdrv.sys .text:00012B92...

CVE-2008-3496

CVE-2008-3496 affects the Linux kernel uvcvideo (V4L) in drivers/media/video/uvc/uvc_driver.c, where a buffer overflow in format descriptor parsing occurs in uvc_parse_format. Affected are kernels older than 2.6.26.1; the ChangeLog indicates this version contains the fix. Public disclosures in SU...

CVE-2008-3496: Buffer Copy without Checking Size of Input

Buffer overflow in format descriptor parsing in the uvcparseformat function in drivers/media/video/uvc/uvcdriver.c in uvcvideo in the video4linux V4L implementation in the Linux kernel before 2.6.26.1 has unknown impact and attack vectors...

kernel: NULL ptr dereference in multiple network drivers due to missing checks in tty code

The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service system crash or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in 1 hamradio/6pack.c, 2 hamradio/mkiss.c, 3...

[SECURITY] Fedora 9 Update: libetpan-0.54-1.fc9

The purpose of this mail library is to provide a portable, efficient middle ware for different kinds of mail access. When using the drivers interface, the interface is the same for all kinds of mail access, remote and local mailbo xes...

minix-panic.txt

Hello again, another day.. kokanin@gmail 20080724 minix 3.1.2a remote tty panic trunk/src/drivers/tty/tty.c 14965 if status = sendreplyee, &ttymess != OK 14966 panic"TTY","ttyreply failed, status\n", status; $ while true ; do sleep 1 && killall nc 2/dev/null; done & $ while true ; do cat...

Moderate: Red Hat Security Advisory: Updated kernel packages for Red Hat Enterprise Linux 4.7

Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux 4. This is the seventh regular update. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel...

kernel: NULL ptr dereference in multiple network drivers due to missing checks in tty code

The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service system crash or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in 1 hamradio/6pack.c, 2 hamradio/mkiss.c, 3...

minix 3.1.2a tty panic Local Denial of Service Vulnerability

Exploit for minix platform in category dos / poc ============================================================ minix 3.1.2a tty panic Local Denial of Service Vulnerability ============================================================ email protected 20080723 minix 3.1.2a tty panic...

CVE-2008-2812

The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service system crash or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in 1 hamradio/6pack.c, 2 hamradio/mkiss.c, 3...

CVE-2008-2812

The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service system crash or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in 1 hamradio/6pack.c, 2 hamradio/mkiss.c, 3...

PT-2008-4251 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.25.10 Description: The issue allows local users to cause a denial of service, potentially leading to a system crash, or possibly gain privileges. This is achieved through vectors involving NULL pointer...

CVE-2008-2812: NULL Pointer Dereference

The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service system crash or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in 1 hamradio/6pack.c, 2 hamradio/mkiss.c, 3...

[SECURITY] Fedora 8 Update: libetpan-0.54-1.fc8

The purpose of this mail library is to provide a portable, efficient middle ware for different kinds of mail access. When using the drivers interface, the interface is the same for all kinds of mail access, remote and local mailbo xes...

Ubuntu 6.06 LTS / 7.04 / 7.10 : linux-source-2.6.15/20/22 vulnerabilities (USN-618-1)

It was discovered that the ALSA /proc interface did not write the correct number of bytes when reporting memory allocations. A local attacker might be able to access sensitive kernel memory, leading to a loss of privacy. CVE-2007-4571 Multiple buffer overflows were discovered in the handling of...

Realtek HD Audio Codec Drivers Multiple Local Privilege Escalation Vulnerabilities

The remote host has Realtek HD Audio drivers for Windows Vista installed. The audio driver 'RTKVHDA.sys' is affected by multiple local privilege escalation issues. An attacker with local interactive access to the system may be able to exploit this issue and execute arbitrary code with SYSTEM leve...

Integer overflow

Integer overflow in Realtek HD Audio Codec Drivers RTKVHDA.sys and RTKVHDA64.sys before 6.0.1.5605 on Windows Vista allows local users to execute arbitrary code via a crafted IOCTL request...

Server side request forgery (ssrf)

Realtek HD Audio Codec Drivers RTKVHDA.sys and RTKVHDA64.sys before 6.0.1.5605 on Windows Vista allow local users to create, write, and read registry keys via a crafted IOCTL request...