701 matches found
Linux <= 2.6.37-rc1 serial_multiport_struct Local Info Leak Exploit
Exploit for linux platform in category local exploits / Linux include include include include include define DEVICE "/dev/ttyS1" int mainint argc, char argv int ret = 0; int i, fd, reservedsize; char buf; struct serialmultiportstruct buffer; printf"\m/ Linux \n", argv0; exit-1; if argc 2 if...
kernel: fs/partitions: Corrupted OSF partition table infoleak
The osfpartition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of partitions, which might allow local users to obtain potentially sensitive information from kernel heap memory via vectors related to partition-table parsing...
kernel: ipv6: netfilter: ip6_tables: fix infoleak to userspace
net/ipv6/netfilter/ip6tables.c in the IPv6 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by...
kernel: ebtables stack infoleak
The doreplace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does not ensure that a certain name field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAPNETADMIN capability ...
PHP 5.3.x<5.3.3 Mysqlnd扩展mysqlnd_wireprotocol.c信息泄露漏洞
No description provided by source...
kernel: s390 task_show_regs infoleak
The taskshowregs function in arch/s390/kernel/traps.c in the Linux kernel before 2.6.38-rc4-next-20110216 on the s390 platform allows local users to obtain the values of the registers of an arbitrary process by reading a status file under /proc/...
Important: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...
HP Discovery &amp; Dependency Mapping Inventory information leak
public community has SNMP read access by default...
Linux Kernel "kvm_vcpu_events.interrupt.pad"字段本地信息泄露漏洞
BUGTRAQ ID: 45676 CVE ID: CVE-2010-4525 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在实现上存在漏洞，本地攻击者可利用此漏洞获取敏感信息。 某些版本的内核没有初始化kvmvcpuevents.interrupt.pad字段就将其拷贝到了用户态，导致内核信息泄露。 Linux kernel 2.6.33-rc4 - 2.6.34 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...
kernel: drivers/sound/pci/rme9652/hdsp.c: reading uninitialized stack memory
The sndhdsphwdepioctl function in sound/pci/rme9652/hdsp.c in the Linux kernel before 2.6.36-rc6 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via an SNDRVHDSPIOCTLGETCONFIGINFO ioctl call...
kernel: net/sched/act_police.c infoleak
The tcfactpolicedump function in net/sched/actpolice.c in the actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc4 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel...
JBossEAP status servlet info leak
JBoss Enterprise Application Platform aka JBossEAP or EAP before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string...
kernel: tcf_fill_node() infoleak due to typo in 9ef1d4c7
The tcffillnode function in net/sched/clsapi.c in the netlink subsystem in the Linux kernel 2.6.x before 2.6.32-rc5, and 2.4.37.6 and earlier, does not initialize a certain tcmpad2 structure member, which might allow local users to obtain sensitive information from kernel memory via unspecified...
kernel: tcf_fill_node() infoleak due to typo in 9ef1d4c7
The tcffillnode function in net/sched/clsapi.c in the netlink subsystem in the Linux kernel 2.6.x before 2.6.32-rc5, and 2.4.37.6 and earlier, does not initialize a certain tcmpad2 structure member, which might allow local users to obtain sensitive information from kernel memory via unspecified...
kernel: ecryptfs file header infoleak
The ecryptfswritemetadatatocontents function in the eCryptfs functionality in the Linux kernel 2.6.28 before 2.6.28.9 uses an incorrect size when writing kernel memory to an eCryptfs file header, which triggers an out-of-bounds read and allows local users to obtain portions of kernel memory...
Memcached / MemcacheDB information leak
Unauthorized user can obtain information about process memory layout, making code execution protection techniques ineffective...
FreeBSD libc Berkley DB接口未初始化内存本地信息泄露漏洞
BUGTRAQ ID: 34666 FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 FreeBSD的C库（libc）包含有用于创建和访问Berkeley DB 1.85数据库文件的代码。由于Berkeley DB向数据库文件中写入了从malloc3获得的未初始化内存，使用db3接口创建Berkeley数据库文件的程序可能向数据库文件泄露敏感信息。如果其他用户可以读取这些文件，就会导致泄漏敏感信息，如登录凭据。 FreeBSD FreeBSD 7.1 FreeBSD FreeBSD 7.0 FreeBSD FreeBSD 6.4 FreeBSD...
krb5: buffer over-read in SPNEGO GSS-API mechanism (MITKRB5-SA-2009-001)
The getinputtoken function in the SPNEGO implementation in MIT Kerberos 5 aka krb5 1.5 through 1.6.3 allows remote attackers to cause a denial of service daemon crash and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read...
Trend Micro InterScan Web Security Appliance / Trend Micro InterScan Web Security Suite information leak
Proxy-Authorization header is not removed from client request, leaking proxy username/password...
kernel snd_seq_oss_synth_make_info leak
The sndseqosssynthmakeinfo function in sound/core/seq/oss/seqosssynth.c in the sound subsystem in the Linux kernel before 2.6.27-rc2 does not verify that the device number is within the range defined by maxsynthdev before returning certain data to the caller, which allows local users to obtain...