91 matches found
CVE-2011-1017
Heap-based buffer overflow in the ldmfragadd function in fs/partitions/ldm.c in the Linux kernel 2.6.37.2 and earlier might allow local users to gain privileges or obtain sensitive information via a crafted LDM partition table...
Heap overflow
Heap-based buffer overflow in the ldmfragadd function in fs/partitions/ldm.c in the Linux kernel 2.6.37.2 and earlier might allow local users to gain privileges or obtain sensitive information via a crafted LDM partition table...
CVE-2011-1017
CVE-2011-1017 relates to a heap-based buffer overflow in the Linux kernel’s LDM code path. Affected component: fs/partitions/ldm.c (ldm_frag_add) in kernel 2.6.37.2 and earlier. Root cause cited in connected docs: bugs in evaluating LDM partitions could crash the kernel for certain corrupted LDM ...
CVE-2011-1017
Heap-based buffer overflow in the ldmfragadd function in fs/partitions/ldm.c in the Linux kernel 2.6.37.2 and earlier might allow local users to gain privileges or obtain sensitive information via a crafted LDM partition table...
PT-2011-1080 · Suse +1 · Suse Linux Enterprise +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39.1 Description: The issue is related to the ldm frag add function in fs/partitions/ldm.c, which does not properly handle memory allocation for non-initial fragments. This might allow local users to conduct...
[PRE-SA-2011-01] Multiple Linux kernel vulnerabilities in partition handling code of LDM and MAC partition tables
PRE-CERT Security Advisory Advisory: PRE-SA-2011-01 Released on: 23 Feb 2011 Last updated on: 23 Feb 2011 Affected product: Linux Kernel 2.4 and 2.6 Impact: - privilege Escalation - denial-of-service - disclosure of sensitive information Origin: storage devices CVE Identifier: - CVE-2011-1010...
Debian DSA-1561-1 : ldm - programming error
Christian Herzog discovered that within the Linux Terminal Server Project, it was possible to connect to X on any LTSP client from any host on the network, making client windows and keystrokes visible to that host. NOTE: most ldm installs are likely to be in a chroot environment exported over NFS...
Debian Security Advisory DSA 1561-1 (ldm)
The remote host is missing an update to ldm announced via advisory DSA 1561-1. OpenVAS Vulnerability Test $Id: deb15611.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1561-1 ldm Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2008-1293
ldm in Linux Terminal Server Project LTSP 0.99 and 2 passes the -ac option to the X server on each LTSP client, which allows remote attackers to connect to this server via TCP port 6006 aka display :6...
[SECURITY] [DSA 1561-1] New ldm packages fix information disclosure
------------------------------------------------------------------------ Debian Security Advisory DSA-1561-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 28, 2008 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1561-1] New ldm packages fix information disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1561-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 28, 2008 http://www.debian.org/security/faq -...