security flaw

Signedness error in the copyfromreadbuf function in ntty.c for Linux kernel 2.6.10 and 2.6.11rc1 allows local users to read kernel memory via a negative argument...

security flaw

Integer overflow in sysepollwait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events...

security flaw

Integer overflow in Linux kernel 2.6 allows local users to overwrite kernel memory by writing to a sysfs file...

CVE-2005-1126

CVE-2005-1126 is a kernel memory disclosure vulnerability tied to the SIOCGIFCONF (ifconf) path. In FreeBSD 4.x (4.0–4.11) and 5.x (5.0–5.4), the ifconf code may copy uninitialized kernel memory to user space because the buffer is not cleared before use, enabling local users to obtain portions of...

CVE-2005-1126

The SIOCGIFCONF ioctl ifconf function in FreeBSD 4.x through 4.11 and 5.x through 5.4 does not properly clear a buffer before using it, which allows local users to obtain portions of sensitive kernel memory...

CVE-2005-1126: Undefined Security Weakness

The SIOCGIFCONF ioctl ifconf function in FreeBSD 4.x through 4.11 and 5.x through 5.4 does not properly clear a buffer before using it, which allows local users to obtain portions of sensitive kernel memory...

CVE-2005-1126

The SIOCGIFCONF ioctl ifconf function in FreeBSD 4.x through 4.11 and 5.x through 5.4 does not properly clear a buffer before using it, which allows local users to obtain portions of sensitive kernel memory...

FreeBSD ifconf() information leak

Buffer may contain a part of kernel memory...

Kernel memory disclosure in ifconf()

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:04.ifconf Security Advisory The FreeBSD Project Topic: Kernel memory disclosure in ifconf Category: core Module: sysnet Announced: 2005-04-15 Credits: Ilja van...

FreeBSD-SA-05:04.ifconf

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:04.ifconf Security Advisory The FreeBSD Project Topic: Kernel memory disclosure in ifconf Category: core Module: sysnet Announced: 2005-04-15 Credits: Ilja van...

FreeBSD : SA-05:02.sendfile

The remote host is running a version of FreeBSD which contains a flaw in the sendfile API. There is an error in the sendfile API which may allow a local user to disclose parts of the contents of the kernel memory. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

CVE-2005-0708: Undefined Security Weakness

The sendfile system call in FreeBSD 4.8 through 4.11 and 5 through 5.4 can transfer portions of kernel memory if a file is truncated while it is being sent, which could allow remote attackers to obtain sensitive information...

FreeBSD-SA-05:02.sendfile

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:02.sendfile Security Advisory The FreeBSD Project Topic: sendfile kernel memory disclosure Category: core Module: syskern Announced: 2005-04-04 Credits: Sven...

Linux ext2 filesystem information leak

During directory creating random data from kernel memory are written to disk...

Information leak in the Linux kernel ext2 implementation

Description: Information leak in the Linux kernel ext2 implementation References: CAN-2005-0400 Authors: Mathieu Lafon [email protected] Romain Francoise [email protected] Arkoon Security Team Advisory - March 25, 2005 http://arkoon.net/advisories/ext2-make-empty-leak.txt Revision: 1.0 1...

CVE-2005-0867

Integer overflow in Linux kernel 2.6 allows local users to overwrite kernel memory by writing to a sysfs file...

CVE-2005-0867: Undefined Security Weakness

Integer overflow in Linux kernel 2.6 allows local users to overwrite kernel memory by writing to a sysfs file...

CVE-2005-0736

Integer overflow in sysepollwait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events...

CVE-2005-0736

Integer overflow in sysepollwait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events...

CVE-2005-0178

Race condition in the setsid function in Linux before 2.6.8.1 allows local users to cause a denial of service crash and possibly access portions of kernel memory, related to TTY changes, locking, and semaphores...