CVE-2013-2851

Format string vulnerability in the registerdisk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/mdmod/parameters/newarray in order to create a crafted /dev/md device nam...

CVE-2013-2851

CVE-2013-2851 is a concrete vulnerability in the Linux kernel: a format-string flaw in the register_disk function (block/genhd.c) that affects kernels up to 3.9.4. It enables a local attacker with root access to gain privileges by writing format specifiers to /sys/module/md_mod/parameters/new_arr...

CVE-2013-2852

Format string vulnerability in the b43requestfirmware function in drivers/net/wireless/b43/main.c in the Broadcom B43 wireless driver in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and including format string specifiers in an fwpostfix modprobe...

UBUNTU-CVE-2013-2851

Format string vulnerability in the registerdisk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/mdmod/parameters/newarray in order to create a crafted /dev/md device nam...

CVE-2013-2851

Format string vulnerability in the registerdisk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/mdmod/parameters/newarray in order to create a crafted /dev/md device nam...

UBUNTU-CVE-2013-2852

Format string vulnerability in the b43requestfirmware function in drivers/net/wireless/b43/main.c in the Broadcom B43 wireless driver in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and including format string specifiers in an fwpostfix modprobe...

Fedora 19 : FlightGear-2.10.0-5.fc19 (2013-8622)

This update adds a fix to an uncontrolled format string vulnerability discovered in the cloud layers handling code. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format ...

Fedora 17 : FlightGear-2.6.0-3.fc17 (2013-8721)

This update adds a fix to an uncontrolled format string vulnerability discovered in the cloud layers handling code. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format ...

Fedora 18 : FlightGear-2.8.0-2.fc18 (2013-8703)

This update adds a fix to an uncontrolled format string vulnerability discovered in the cloud layers handling code. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format ...

DEBIAN-CVE-2013-3560

The dissectdsmccundownload function in epan/dissectors/packet-mpeg-dsmcc.c in the MPEG DSM-CC dissector in Wireshark 1.8.x before 1.8.7 uses an incorrect format string, which allows remote attackers to cause a denial of service application crash via a malformed packet...

Format string

The dissectdsmccundownload function in epan/dissectors/packet-mpeg-dsmcc.c in the MPEG DSM-CC dissector in Wireshark 1.8.x before 1.8.7 uses an incorrect format string, which allows remote attackers to cause a denial of service application crash via a malformed packet...

UBUNTU-CVE-2013-3560

The dissectdsmccundownload function in epan/dissectors/packet-mpeg-dsmcc.c in the MPEG DSM-CC dissector in Wireshark 1.8.x before 1.8.7 uses an incorrect format string, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-3560

CVE-2013-3560 affects Wireshark 1.8.x before 1.8.7, where the MPEG DSM-CC dissector in epan/dissectors/packet-mpeg-dsmcc.c uses an incorrect format string in the dissect_dsmcc_un_download function. This flaw can allow remote attackers to trigger a denial of service (application crash) by sending ...

CVE-2013-3560

The dissectdsmccundownload function in epan/dissectors/packet-mpeg-dsmcc.c in the MPEG DSM-CC dissector in Wireshark 1.8.x before 1.8.7 uses an incorrect format string, which allows remote attackers to cause a denial of service application crash via a malformed packet...

Important: Red Hat Security Advisory: pki-tps security update

An updated pki-tps package that fixes two security issues is now available for Red Hat Certificate System 8.1. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...

System: pki-tps format string injection

Format string vulnerability in the token processing system pki-tps in Red Hat Certificate System RHCS 8.1 and possibly Dogtag Certificate System 9 and 10 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in...

kernel: ext3: format string issues

fs/ext3/super.c in the Linux kernel before 3.8.4 uses incorrect arguments to functions in certain circumstances related to printk input, which allows local users to conduct format-string attacks and possibly gain privileges via a crafted application...

Python RRDtool Module - Function Format String

Python RRDtool Module - Function Format String / source: https://www.securityfocus.com/bid/60004/info The RRDtool module for Python is prone to a format-string vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to execute arbitrary code...

Python RRDtool Module - Function Format String

/ source: https://www.securityfocus.com/bid/60004/info The RRDtool module for Python is prone to a format-string vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to execute arbitrary code within the context of the affected application or ...

Flightgear 2.0 / 2.4 Format String Vulnerability

Flightgear versions 2.0 and 2.4 suffer from a remote format string vulnerability. / Exploit Title: Flightgear remote format string Date: 21/04/2013 Exploit Author: Kurono email: email protected Vendor Homepage: http://www.flightgear.org/ Software Link: http://www.flightgear.org/download/ Version:...