FreeBSD Security Advisory (FreeBSD-SA-09:07.libc.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-09:07.libc.asc ADV FreeBSD-SA-09:07.libc.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-09:07.libc.asc Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

FreeBSD Security Advisory (FreeBSD-SA-09:07.libc.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-09:07.libc.asc SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2009-1436

The db interface in libc in FreeBSD 6.3, 6.4, 7.0, 7.1, and 7.2-PRERELEASE does not properly initialize memory for Berkeley DB 1.85 database structures, which allows local users to obtain sensitive information by reading a database file...

CVE-2009-1436

The CVE-2009-1436 entry concerns the FreeBSD libc db interface (Berkeley DB 1.85) where memory was not properly initialized, enabling local attackers to read sensitive information from Berkeley DB database files. Affected are FreeBSD releases 6.3, 6.4, 7.0, 7.1, and 7.2-PRERELEASE. The root cause...

FreeBSD libc Berkley DB接口未初始化内存本地信息泄露漏洞

BUGTRAQ ID: 34666 FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 FreeBSD的C库（libc）包含有用于创建和访问Berkeley DB 1.85数据库文件的代码。由于Berkeley DB向数据库文件中写入了从malloc3获得的未初始化内存，使用db3接口创建Berkeley数据库文件的程序可能向数据库文件泄露敏感信息。如果其他用户可以读取这些文件，就会导致泄漏敏感信息，如登录凭据。 FreeBSD FreeBSD 7.1 FreeBSD FreeBSD 7.0 FreeBSD FreeBSD 6.4 FreeBSD...

Solaris 9 (x86) : 113988-07

SunOS 5.9x86: libc Patch. Date this patch was last updated by Sun : Jan/26/04 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

FreeBSD libc Berkley DB接口未初始化内存本地信息泄漏漏洞

BUGTRAQ ID: 34666 CNCAN ID：CNCAN-2009042302 FreeBSD是一款开放源代码的BSD操作系统。 FreeBSD libc Berkeley DB接口写malloc3中获得的未初始化内存到数据库文件，本地攻击者可以利用漏洞获得敏感信息。 FreeBSD FreeBSD 7.1-STABLE FreeBSD FreeBSD 7.1-RELEASE-p4 FreeBSD FreeBSD 7.1 -RELEASE-p2 FreeBSD FreeBSD 7.1 -RELEASE-p1 FreeBSD FreeBSD 7.1 -PRE-RELEASE...

FreeBSD libc db functions information leak

Uninitialized memory data can be written to database file...

FreeBSD-SA-09:07.libc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-09:07.libc Security Advisory The FreeBSD Project Topic: Information leak in db3 Category: core Module: libc Announced: 2009-04-22 Credits: Jaakko Heinonen, Xin LI...

FreeBSD Security Advisory FreeBSD-SA-09:07.libc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-09:07.libc Security Advisory The FreeBSD Project Topic: Information leak in db3 Category: core Module: libc Announced: 2009-04-22 Credits: Jaakko Heinonen, Xin LI...

Integer overflow

Integer overflow in the ftsbuild function in fts.c in libc in 1 OpenBSD 4.4 and earlier and 2 Microsoft Interix 6.0 build 10.0.6030.0 allows context-dependent attackers to cause a denial of service application crash via a deep directory tree, related to the ftslevel structure member, as...

CVE-2009-0537

CVE-2009-0537 involves an integer overflow in libc’s fts_build() within the fts.c implementation. The root cause is a signed short (fts_level) overflow when traversing very deep directory trees, which can crash an affected program (e.g., du, rm, chmod, chgrp on OpenBSD; SearchIndexer.exe on Windo...

CVE-2009-0537

Integer overflow in the ftsbuild function in fts.c in libc in 1 OpenBSD 4.4 and earlier and 2 Microsoft Interix 6.0 build 10.0.6030.0 allows context-dependent attackers to cause a denial of service application crash via a deep directory tree, related to the ftslevel structure member, as...

libc fts_* functions vulnerabilities

Invalid exceptional conditions processing on long path...

Multiple Vendors libc:fts_*() Local Denial of Service Exploit

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 libc:fts:multiple vendors, Denial-of-service Author: Maksymilian Arciemowicz SecurityReason.com Date: - - Dis.: 21.10.2008 - - Pub.: 04.03.2009 CVE: CVE-2009-0537 We are going informing all vendors, about this proble...

Multiple Vendors libc:fts_*() Local Denial of Service Exploit

Exploit for bsd platform in category dos / poc ============================================================= Multiple Vendors libc:fts Local Denial of Service Exploit ============================================================= -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 libc:fts:multiple...

Fedora Update for galeon FEDORA-2008-2682

Check for the Version of galeon OpenVAS Vulnerability Test Fedora Update for galeon FEDORA-2008-2682 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

FreeBSD 7.1 - libc Berkley DB Interface Uninitialized Memory Local Information Disclosure

FreeBSD 7.1 - libc Berkley DB Interface Uninitialized Memory Local Information Disclosure // source: https://www.securityfocus.com/bid/34666/info FreeBSD is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead ...

Sun Solaris C库未明权限提升漏洞

BUGTRAQ ID: 13856 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Sun Solaris C库中存在未经的权限提升漏洞，起因是C库libc3LIB和libproject3LIB中的未明安全问题。本地攻击者可以利用这个漏洞提升权限，完全控制受影响的系统。 Sun Solaris 10 Sun --- Sun已经为此发布了一个安全公告（Sun-Alert-101740）以及相应补丁: Sun-Alert-101740：Solaris 10 Security Issue With C Library libc3LIB and libproject3LIB...

FreeBSD Security Advisory (FreeBSD-SA-08:02.libc.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-08:02.libc.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...