Oracle Linux 6 : glibc (ELSA-2014-1391)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1391 advisory. - Remove gconv transliteration loadable modules support CVE-2014-5119, - nlfindlocale: Improve handling of crafted locale names CVE-2014-0475, - Fix...

RHEL 6 : glibc (RHSA-2014:1391)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:1391 advisory. The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the Name Serv...

CVE-2006-6418

CVE-2006-6418 refers to a buffer overflow in the POSIX Threads library (libpthread) on HP Tru64 UNIX, affecting 4.0F PK8, 4.0G PK4, and 5.1A PK6. The vulnerability arises from a long PTHREAD_CONFIG environment variable and allows local users to gain root privileges. This is a local-privilege-esca...

HP Tru64 UNIX libpthread本地缓冲区溢出漏洞

HP Tru64 UNIX是惠普公司开发和维护的商业性质UNIX操作系统。 HP Tru64 UNIX的libpthread库存在缓冲区溢出漏洞，本地攻击者可能利用此漏洞提升权限。 如果攻击者能够创建特制的缓冲区并将其注入到PTHREADCONFIG变量中的话，就会触发这个漏洞，导致以root用户权限执行任意代码。 HP Tru64 UNIX 5.1A PK6 HP Tru64 UNIX 4.0G PK4 HP Tru64 UNIX 4.0F PK8 HP已经为此发布了一个安全公告（HPSBTU02171）以及相应补丁: HPSBTU02171：SSRT061222 rev.1 - HP...

HP Tru64 Unix libpthread buffer overflow

Buffer overflow on parsing PTHREADCONFIG environment variable...