Ubuntu Update for libvirt vulnerabilities USN-1008-1

Ubuntu Update for Linux kernel vulnerabilities USN-1008-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10081.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for libvirt vulnerabilities USN-1008-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu 10.04 LTS : virtinst update (USN-1008-2)

Libvirt in Ubuntu 10.04 LTS now no longer probes qemu disks for the image format and defaults to 'raw' when the format is not specified in the XML. This change in behavior breaks virt-install --import because virtinst in Ubuntu 10.04 LTS did not allow for specifying a disk format and does not...

USN-1008-1: libvirt vulnerabilities

It was discovered that libvirt would probe disk backing stores without consulting the defined format for the disk. A privileged attacker in the guest could exploit this to read arbitrary files on the host. This issue only affected Ubuntu 10.04 LTS. By default, guests are confined by an AppArmor...

CVE-2010-2242

Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree...

CVE-2010-2242

Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree...

Design/Logic Flaw

Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree...

CVE-2010-2242

Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree...

CVE-2010-2242

Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree...

CVE-2010-2242

CVE-2010-2242 relates to Red Hat/libvirt 0.2.0–0.8.2, where libvirt creates iptables rules with improper mappings of privileged source ports. This could allow a guest OS user to bypass host access restrictions by manipulating IP address and source-port values, as demonstrated by an NFS operation....

CVE-2010-2242

Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree...

CentOS 5 : libvirt (CESA-2010:0615)

Updated libvirt packages that fix two security issues and three bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

libvirt security update

CentOS Errata and Security Advisory CESA-2010:0615 Updated libvirt packages that fix two security issues and three bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVS...

libvirt: improperly mapped source privileged ports may allow for obtaining privileged resources on the host

Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree...

Low: Red Hat Security Advisory: libvirt security and bug fix update

Updated libvirt packages that fix two security issues and three bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

MDVA-2010:104 : iptables

This update adds missing header files which are necessary to compile third-party applications based on iptables. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This...

Fedora 13 : libvirt-0.8.2-1.fc13 (2010-10960)

A reboot is required to update the iptables rules for the default virtual network to address the CVE-2010-2242 All disk format probing is now disabled in a default installation of libvirt. This change may prevent KVM guests using qcow2 disks from booting successfully. If this occurs verify that t...

Fedora 12 : libvirt-0.8.2-1.fc12 (2010-11021)

A reboot is required to update the iptables rules for the default virtual network to address the CVE-2010-2242 All disk format probing is now disabled in a default installation of libvirt. This change may prevent KVM guests using qcow2 disks from booting successfully. If this occurs verify that t...

Linux/x86-64 - execve("/sbin/iptables", ["/sbin/iptables", "-F"], NULL) - 49 bytes

No description provided by source. / Title: Linux/x86-64 - execve"/sbin/iptables", "/sbin/iptables", "-F", NULL - 49 bytes Author: 10n1z3d 10n1z3datwdotcn Date: Fri 09 Jul 2010 03:26:12 PM EEST Source Code NASM: section .text global start start: xor rax, rax push rax push word 0x462d mov rcx, rsp...

linux/x86-64 execve ("/sbin/iptables", ["/sbin/iptables", "-F"], NULL)

Exploit for linux/x86-64 platform in category shellcode ================================================================================= linux/x86-64 execve "/sbin/iptables", "/sbin/iptables", "-F", NULL - 49 bytes =================================================================================...

Linux/x86-64 - execve"/sbin/iptables", "/sbin/iptables", "-F", NULL 49 bytes

Linux/x86-64 - execve"/sbin/iptables", "/sbin/iptables", "-F", NULL - 49 bytes. Shellcode exploit for linux platform / Title: Linux/x86-64 - execve"/sbin/iptables", "/sbin/iptables", "-F", NULL - 49 bytes Author: 10n1z3d Date: Fri 09 Jul 2010 03:26:12 PM EEST Source Code NASM: section .text globa...