Mandriva Update for kvm MDVA-2010:092 (kvm)

Check for the Version of kvm OpenVAS Vulnerability Test Mandriva Update for kvm MDVA-2010:092 kvm Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Debian DSA-1833-1 : dhcp3 - several vulnerabilities

Several remote vulnerabilities have been discovered in ISC's DHCP implementation : - CVE-2009-0692 It was discovered that dhclient does not properly handle overlong subnet mask options, leading to a stack-based buffer overflow and possible arbitrary code execution. - CVE-2009-1892 Christoph Biedl...

BIOS and Hardware Information Detection (Linux/Unix SSH Login)

SSH login-based gathering of various BIOS and Hardware related information. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

Mandriva Update for pciutils MDVA-2010:043 (pciutils)

Check for the Version of pciutils OpenVAS Vulnerability Test Mandriva Update for pciutils MDVA-2010:043 pciutils Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CVE-2009-3556

A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux RHEL 5, when NPort ID Virtualization NPIV hardware is used, sets world-writable permissions for the 1 vportcreate and 2 vportdelete files under /sys/class/scsihost/, which allows loc...

Inside the PlayStation 3 Exploit

The recent attack on the PlayStation 3 hypervisor has gotten a tremendous amount of attention, but there has not been much in the way of detailed analysis of the actual exploit itself. However, a prominent cryptographer and security researcher has looked at the exploit and found that it is a...

Red Hat Linux Kernel qla2xxx驱动完全可写文件漏洞

BUGTRAQ ID: 37876 CVE ID: CVE-2009-3556 Linux Kernel是开放源码操作系统Linux所使用的内核。 对于使用qla2xxx驱动且支持NPIV硬件的Red Hat版本的Linux Kernel系统，驱动向SCSI主机属性中添加了两个新的sysfs伪文件： w--w--w- root root /sys/class/scsihost/host1/vportcreate w--w--w- root root /sys/class/scsihost/host1/vportdelete w--w--w- root root...

Red Hat Linux内核'qla2xxx'驱动安全绕过漏洞

Bugraq ID: 37876 CVE ID：CVE-2009-3556 Red Hat是一款流行的Linux发行版本。 qla2xxx驱动支持NPort ID Virtualization NPIV，它增加了两个新的sysfs pseudo文件:"/sys/class/scsihost/a qla2xxx host/vportcreate"和"vportdelete"，这两个文件默认全局可写，允许本地用户更改SCSI主机属性。 此漏洞仅影响使用qla2xxx驱动和NPIV硬件。 RedHat Enterprise Linux EUS 5.4.z server RedHat...

CVE-2010-0271

hald in Sun OpenSolaris snv51 through snv130 does not have the procaudit privilege during unspecified attempts to write to the auditing log, which makes it easier for physically proximate attackers to avoid detection of changes to the set of connected hardware devices supporting the Hardware...

Design/Logic Flaw

hald in Sun OpenSolaris snv51 through snv130 does not have the procaudit privilege during unspecified attempts to write to the auditing log, which makes it easier for physically proximate attackers to avoid detection of changes to the set of connected hardware devices supporting the Hardware...

CVE-2010-0271

Affected software : Sun OpenSolaris hald (SNV_51 to SNV_130). Vulnerability details : The hald process does not have the proc_audit privilege during unspecified attempts to write to the auditing log, enabling an attacker in physical proximity to evade detection of changes to the set of Hardware A...

CVE-2010-0271

hald in Sun OpenSolaris snv51 through snv130 does not have the procaudit privilege during unspecified attempts to write to the auditing log, which makes it easier for physically proximate attackers to avoid detection of changes to the set of connected hardware devices supporting the Hardware...

Design/Logic Flaw

Kingston DataTraveler BlackBox DTBB, DataTraveler Secure Privacy Edition DTSP, and DataTraveler Elite Privacy Edition DTEP USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the...

CVE-2010-0224

SanDisk Cruzer Enterprise USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the cleartext drive contents via a modified program...

CentOS 5 : kernel (CESA-2008:1017)

Updated kernel packages that resolve several security issues and fix various bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any...

CentOS 4 / 5 : kernel (CESA-2008:0154)

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

CentOS 5 : kernel (CESA-2008:0612)

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Barracuda Web Firewall 660 Firmware 7.3.1.007 Input Validation

Pentest Information: ==================== GESEC Team remove discover a input validation vulnerability on Barracuda - Web Application Firewall 660 Appliance. A remote attacker is able to get sensitive customer sessions hijackor can implement script routines & malicious codesserver-side|persistent...

Barracuda Web Firewall 660 Firmware 7.3.1.007 - Multiple Vulnerabilities

Barracuda Web Firewall 660 Firmware 7.3.1.007 - Multiple Vulnerabilities Pentest Information: ==================== GESEC Team remove discover a input validation vulnerability on Barracuda - Web Application Firewall 660 Appliance. A remote attacker is able to get sensitive customer sessions hijack...

Barracuda Web Firewall 660 Firmware 7.3.1.007 - Multiple Vulnerabilities

Pentest Information: ==================== GESEC Team remove discover a input validation vulnerability on Barracuda - Web Application Firewall 660 Appliance. A remote attacker is able to get sensitive customer sessions hijackor can implement script routines & malicious codesserver-side|persistent...