Linux Kernel binfmt_flat.c空指针引用拒绝服务漏洞

BUGTRAQ ID: 36037 CVECAN ID: CVE-2009-2768 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的flat子系统中fs/binfmtflat.c文件的loadflatsharedlibrary函数存在空指针应用错误。如果本地用户执行了共享的flat二进制程序的话，就可以触发这个错误，导致系统崩溃。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2009-2768

The loadflatsharedlibrary function in fs/binfmtflat.c in the flat subsystem in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by executing a shared flat binary, which triggers a...

Null pointer dereference

The loadflatsharedlibrary function in fs/binfmtflat.c in the flat subsystem in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by executing a shared flat binary, which triggers a...

CVE-2009-2768

The loadflatsharedlibrary function in fs/binfmtflat.c in the flat subsystem in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by executing a shared flat binary, which triggers a...

CVE-2009-2768

The loadflatsharedlibrary function in fs/binfmtflat.c in the flat subsystem in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by executing a shared flat binary, which triggers a...

CVE-2009-2768: NULL Pointer Dereference

The loadflatsharedlibrary function in fs/binfmtflat.c in the flat subsystem in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by executing a shared flat binary, which triggers a...

Flat Calendar Bypass / Cross Site Scripting

Flat Calendar By-Pass / Html inj / XSS Multiple Vulns. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 23.04.09 Home: yildirimordulari.com / z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : N0T: Alem Hep Hacker Olm...

Flat Calendar 1.1 - 'add.php' HTML Injection

source: https://www.securityfocus.com/bid/34688/info Flat Calendar is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker t...

Design/Logic Flaw

Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to 1 add new events via calAdd.php, as reachable from admin/add.php, or 2 delete events via admin/deleteEvent.php. NOTE: this is only a vulnerability when the administrator does not foll...

CVE-2008-6736

Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to 1 add new events via calAdd.php, as reachable from admin/add.php, or 2 delete events via admin/deleteEvent.php. NOTE: this is only a vulnerability when the administrator does not foll...

CVE-2008-6736

Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to 1 add new events via calAdd.php, as reachable from admin/add.php, or 2 delete events via admin/deleteEvent.php. NOTE: this is only a vulnerability when the administrator does not foll...

CVE-2008-6736

CVE-2008-6736 affects Flat Calendar 1.1. The issue: improper restriction of access to administrative functions, allowing remote attackers to add events via calAdd.php (reachable from admin/add.php) or delete events via admin/deleteEvent.php. Root cause described in sources as insufficient access ...

CVE-2008-6736: Undefined Security Weakness

Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to 1 add new events via calAdd.php, as reachable from admin/add.php, or 2 delete events via admin/deleteEvent.php. NOTE: this is only a vulnerability when the administrator does not foll...

CuteNews Detection (HTTP)

HTTP based detection of CuteNews. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.100105";...

CuteNews Detection

This host is running CuteNews, a powerful and easy to use news management system that uses flat files to store its database OpenVAS Vulnerability Test $Id: cutenewsdetect.nasl 5943 2017-04-12 14:44:26Z antu123 $ CuteNews Detection Authors: Michael Meyer Updated to detect UTF-8 CuteNews - By Antu...

CVE-2008-6590

LightNEasy has directory traversal flaws in version 1.2.2 (and possibly SQLite 1.2.2) where a crafted .. in the page parameter to index.php or LightNEasy.php allows remote attackers to read arbitrary files. Root cause appears to be inadequate validation of the page parameter, enabling traversal t...

Multiple vulnerabilities in TYPO3 third party extensions

Several vulnerabilities have been found in the following third party TYPO3 extensions: "Accessibility Glossary" a21glossary, "Calendar Base" cal, "Flat Manager" flatmgr Release Date: March 05, 2009 Please read first: This Collective Security Bulletin CSB is a listing of vulnerable extensions with...

myPHPscripts Login Session 2.0 XSS / Database Disclosure

START 0x01 Informations: Script : myPHPscripts Login Session 2.0 Download : http://www.hotscripts.com/jump.php?listingid=69881&jumptype=1 Vulnerability : XSS / Database Disclosure Author : Osirys Contact : osirysatlivedotit Website : http://osirys.org Notes : Proud to be Italian Greets: : XaDoS,...

myPHPscripts Login Session 2.0 XSS/Database Disclosure Vulns

No description provided by source. START 0x01 Informations: Script : myPHPscripts Login Session 2.0 Download : http://www.hotscripts.com/jump.php?listingid=69881&jumptype=1 Vulnerability : XSS / Database Disclosure Author : Osirys Contact : osirysatlivedotit Website : http://osirys.org Notes :...

myPHPscripts Login Session 2.0 XSS/Database Disclosure Vulns

Exploit for unknown platform in category web applications ============================================================ myPHPscripts Login Session 2.0 XSS/Database Disclosure Vulns ============================================================ START 0x01 Informations: Script : myPHPscripts Login...