CVE-2010-2226

CVE-2010-2226 affects the Linux kernel: the xfs_swapext function in fs/xfs/xfs_dfrag.c does not properly validate file descriptors passed to the SWAPEXT ioctl, enabling a local user with write access to swap a file into another and gain read access. The issue is present in kernel versions before ...

Microsoft - SMB Server Trans2 Zero Size Pool Alloc (MS10-054)

!/usr/bin/env python import sys,struct,socket from socket import if lensys.argv=2: print '' print ' MS10-054 Proof Of Concept by Laurent Gaffie' print ' Usage: python '+sys.argv0+' TARGET SHARE-NAME No backslash' print ' Example: python '+sys.argv0+' 192.168.8.101 users' print '...

kernel security and bug fix update

2.6.18-194.11.1.0.1.el5 - xen check to see if hypervisor supports memory reservation change Chuck Anderson orabug 7556514 - Add entropy support to igb John Sobecki orabug 7607479 - nfs convert ENETUNREACH to ENOTCONN orabug 7689332 - NET Add xen pv/bonding netconsole support Tina Yang orabug...

Null pointer dereference

The cifscreate function in fs/cifs/dir.c in the Linux kernel 2.6.33.2 and earlier allows local users to cause a denial of service NULL pointer dereference and OOPS or possibly have unspecified other impact via a NULL nameidata aka nd field in a POSIX file-creation request to a server that support...

Linux kernel 2.6.x cifs_create()函数空指针引用漏洞

BUGTRAQ ID: 39186 CVE ID: CVE-2010-1148 Linux Kernel是开放源码操作系统Linux所使用的内核 Linux Kernel的fs/cifs/dir.c文件中的cifscreate函数存在空指针引用错误。在支持unix扩展（如Samba）的服务器上创建文件时，如果所创建的文件没有提供nameidata（nd为空），cifs客户端在调用cifsposixopen时就会崩溃 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2010-1088

fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown impact, related to LOOKUPFOLLOW...

Oracle Enterprise Linux 5.5 kernel security and bug fix update

2.6.18-194.el5 - net mlx4: pass attributes down to vlan interfaces Doug Ledford 573098 - block cfq-iosched: fix sequential read perf regression Jeff Moyer 571818 2.6.18-193.el5 - fs gfs2: locking fix for potential dos Steven Whitehouse 572390 CVE-2010-0727 - acpi powermeter: avoid oops on driver...

Linux Kernel nfs_lock函数本地拒绝服务漏洞

CVECAN ID: CVE-2007-6733 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的fs/nfs/file.c文件中的nfslock函数没有正确的删除对setgid未设置group-execute权限文件的 POSIX锁定，这允许本地用户通过在NSF文件系统上锁定文件然后再更改该文件的权限导致系统崩溃。 Linux kernel 2.6.9 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://lkml.org/lkml/2005/12/21/334...

Linux Kernel 64位Personality处理本地拒绝服务漏洞

BUGTRAQ ID: 38027 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在设置进程的personality时存在错误，本地用户在执行缺少ELF解释器的64位应用时可能触发分段错误，导致内核崩溃。 漏洞起因是fs/binfmtelf.c文件中的loadelfbinary函数，该函数在检查ELF解释器可用之前调用了 SETPERSONALITY，将之前的32位进程转换为了64位进程。如果execve成功，这不会导致问题，但在...

kernel: create_elf_tables can leave urandom in a bad state

Use-after-free vulnerability in the fasynchelper function in fs/fcntl.c in the Linux kernel before 2.6.33-rc4-git1 allows local users to gain privileges via vectors that include enabling OASYNC aka FASYNC or FIOASYNC on a locked file, and then closing this file...

CVE-2009-3547

Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service NULL pointer dereference and system crash or gain privileges by attempting to open an anonymous pipe via a /proc//fd/ pathname...

CVE-2009-3547

Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service NULL pointer dereference and system crash or gain privileges by attempting to open an anonymous pipe via a /proc//fd/ pathname...

Linux Kernel 'fs/proc/base.c'本地信息泄漏漏洞

Bugraq ID: 36019 CVE ID：CVE-2009-2691 Linux是一款开放源代码的操作系统。 fs/proc/base.c文件包含的"mmformaps"函数存在错误，攻击者可以利用这个漏洞在setuid进程启动时从"/proc"文件系统中获得"maps"和"smaps"文件的内容信息。造成敏感信息泄漏。 Linux kernel 2.6.31 -rc3 + Trustix Secure Enterprise Linux 2.0 + Trustix Secure Linux 2.2 + Trustix Secure Linux 2.1 + Trustix Secur...

kernel security and bug fix update

2.6.18-128.4.1.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki,Guru Anbalagane orabug 6045759 - MM shrink zone patch John Sobecki,Chris Mason orabug 6086839 - NET Add xen pv/bonding netconsole support Tina yang orabug 6993043 bz 7258 - nfs convert ENETUNREACH to ENOTCONN Guru...

Solaris Update for /usr/lib/fs/ufs/ufsrestore 109092-10

Check for the Version of /usr/lib/fs/ufs/ufsrestore OpenVAS Vulnerability Test Solaris Update for /usr/lib/fs/ufs/ufsrestore 109092-10 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

Solaris Update for /kernel/fs/hsfs 109765-06

Check for the Version of /kernel/fs/hsfs OpenVAS Vulnerability Test Solaris Update for /kernel/fs/hsfs 109765-06 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Solaris Update for /usr/kernel/fs/namefs 114984-02

Check for the Version of /usr/kernel/fs/namefs OpenVAS Vulnerability Test Solaris Update for /usr/kernel/fs/namefs 114984-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Solaris Update for /usr/lib/fs/ufs/ufsrestore 109092-10

Check for the Version of /usr/lib/fs/ufs/ufsrestore OpenVAS Vulnerability Test Solaris Update for /usr/lib/fs/ufs/ufsrestore 109092-10 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

Solaris Update for /kernel/fs/hsfs 109765-06

Check for the Version of /kernel/fs/hsfs OpenVAS Vulnerability Test Solaris Update for /kernel/fs/hsfs 109765-06 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Solaris Update for usr/kernel/fs/namefs 138570-01

Check for the Version of usr/kernel/fs/namefs OpenVAS Vulnerability Test Solaris Update for usr/kernel/fs/namefs 138570-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...