[SECURITY] [DSA 2153-1] linux-2.6 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2153-1 [email protected] http://www.debian.org/security/ dann frazier January 30, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2153-1] linux-2.6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2153-1 [email protected] http://www.debian.org/security/ dann frazier January 30, 2011 http://www.debian.org/security/faq -...

DSA-2153-1 linux-2.6 - several issues

Bulletin has no description...

CVE-2010-3848

Stack-based buffer overflow in the econetsendmsg function in net/econet/afeconet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to gain privileges by providing a large number of iovec structures...

Stack overflow

Stack-based buffer overflow in the econetsendmsg function in net/econet/afeconet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to gain privileges by providing a large number of iovec structures...

Null pointer dereference

The econetsendmsg function in net/econet/afeconet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to cause a denial of service NULL pointer dereference and OOPS via a sendmsg call that specifies a NULL value for the remote address field...

Null pointer dereference

The aunincoming function in net/econet/afeconet.c in the Linux kernel before 2.6.37-rc6, when Econet is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and OOPS by sending an Acorn Universal Networking AUN packet over UDP...

CVE-2010-3850

CVE-2010-3850: In the Linux kernel, the ec_dev_ioctl function in net/econet/af_econet.c did not require CAP_NET_ADMIN, allowing local users to bypass access restrictions and configure econet addresses via an SIOCSIFADDR ioctl. Documented impact is local privilege/unauthorized configuration; fix a...

CVE-2010-3850

The ecdevioctl function in net/econet/afeconet.c in the Linux kernel before 2.6.36.2 does not require the CAPNETADMIN capability, which allows local users to bypass intended access restrictions and configure econet addresses via an SIOCSIFADDR ioctl call...

CVE-2010-4342

The aunincoming function in net/econet/afeconet.c in the Linux kernel before 2.6.37-rc6, when Econet is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and OOPS by sending an Acorn Universal Networking AUN packet over UDP...

CVE-2010-4342

Vulnerability (CVE-2010-4342) in the Linux kernel affects the AUN path when Econet is enabled. The flaw is in the aun_incoming function (net/econet/af_econet.c) and allows remote attackers to trigger a NULL pointer dereference and kernel OOPS, causing a denial of service via UDP-based Acorn Unive...

PT-2010-5117 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.36.2 Description: A stack-based buffer overflow issue exists in the econet sendmsg function, located in net/econet/af econet.c. This issue can be exploited by local users when an econet address is configured...

PT-2010-5119 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.36.2 Description: The issue allows local users to bypass intended access restrictions and configure econet addresses. This is due to the ec dev ioctl function in net/econet/af econet.c not requiring the CAP...

PT-2010-5425 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.37-rc6 Description: The issue allows remote attackers to cause a denial of service by sending a specific packet over UDP, resulting in a NULL pointer dereference and OOPS. This occurs when the Econet protoco...

CVE-2010-4342

The aunincoming function in net/econet/afeconet.c in the Linux kernel before 2.6.37-rc6, when Econet is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and OOPS by sending an Acorn Universal Networking AUN packet over UDP...

PT-2010-5118

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.36.2 Description The issue is related to the econet sendmsg function in the Linux kernel. It allows local users to cause a denial of service, resulting in a NULL pointer dereference and OOPS, by making a...

Linux Kernel <= 2.6.37 Local Privilege Escalation

No description provided by source. / Linux Kernel = 2.6.37 local privilege escalation by Dan Rosenberg @djrbliss on twitter Usage: gcc full-nelson.c -o full-nelson ./full-nelson This exploit leverages three vulnerabilities to get root, all of which were discovered by Nelson Elhage: CVE-2010-4258...

Ubuntu Update for Linux kernel vulnerabilities USN-1023-1

Ubuntu Update for Linux kernel vulnerabilities USN-1023-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10231.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for Linux kernel vulnerabilities USN-1023-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Linux kernel exploit

Hi all, I've included here a proof-of-concept local privilege escalation exploit for Linux. Please read the header for an explanation of what's going on. Without further ado, I present full-nelson.c: Happy hacking, Dan --snip-- / Linux Kernel = 2.6.37 local privilege escalation by Dan Rosenberg...

Linux Kernel <= 2.6.37 Local Privilege Escalation

Exploit for linux platform in category local exploits ================================================= Linux Kernel = 2.6.37 Local Privilege Escalation ================================================= I've included here a proof-of-concept local privilege escalation exploit for Linux. Please rea...