CVE-2011-1681

CVE-2011-1681 affects vmware-hgfsmounter in VMware Open Virtual Machine Tools (open-vm-tools) 8.4.2-261024 and earlier. The issue arises when the tool attempts to append to /etc/mtab without first checking whether resource limits would interfere, enabling a local user with a small RLIMIT_FSIZE to...

CVE-2011-1678

CVE-2011-1678 involves Samba’s smbfs in 3.5.8 and earlier, where mount.cifs and umount.cifs can append to /etc/mtab (or /etc/mtab.tmp) without checking resource limits. A process with a small RLIMIT_FSIZE can trigger corruption of /etc/mtab, a related issue to CVE-2011-1089. The vulnerability is ...

CVE-2011-1678

smbfs in Samba 3.5.8 and earlier attempts to use 1 mount.cifs to append to the /etc/mtab file and 2 umount.cifs to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process wi...

CVE-2011-1675

Mode C: CVE-2011-1675 affects util-linux's mount utility (versions 2.19 and earlier). The issue arises when mount appends to /etc/mtab.tmp without first checking RLIMIT_FSIZE, allowing a local user to trigger corruption of /etc/mtab. It is linked to CVE-2011-1089 and discussed in MiracleLinux AXS...

CVE-2011-1675

mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMITFSIZE value, a related issue to CVE-2011-1089...

PT-2011-3286

Name of the Vulnerable Software and Affected Versions ncpfs versions 2.2.6 and earlier Description The issue allows local users to trigger corruption of the /etc/mtab file by exploiting a flaw in how ncpfs handles resource limits. Specifically, ncpfs attempts to use ncpmount to append to the...

CVE-2011-1675: Undefined Security Weakness

mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMITFSIZE value, a related issue to CVE-2011-1089...

CVE-2011-1678

smbfs in Samba 3.5.8 and earlier attempts to use 1 mount.cifs to append to the /etc/mtab file and 2 umount.cifs to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process wi...

libcgroup: Uncheck origin of NETLINK messages

The cgrereceivenetlinkmsg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library aka libcgroup or libcg before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted...

CVE-2010-4051

The regcomp implementation in the GNU C Library aka glibc or libc6 through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service application crash via a regular expression containing adjacent bounded repetitions that bypass the intended REDUPMAX...

CVE-2010-4052

Stack consumption vulnerability in the regcomp implementation in the GNU C Library aka glibc or libc6 through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service resource exhaustion via a regular expression containing adjacent repetition operators, a...

FreeBSD setusercontext()函数绕过安全限制漏洞

BUGTRAQ ID: 42533 FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 在以其他用户的权限运行时lib/libutil/loginclass.c文件中的setusercontext函数应用了特定的用户设置，这允许本地用户通过创建特制的/.loginconf文件并通过OpenSSH登录更改某些受限制的资源。 FreeBSD 8.0 FreeBSD 7.2 厂商补丁： FreeBSD ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Buffer overflow

The varexport function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certain fatal errors occur, even if displayerrors is off, which allows remote attackers to obtain sensitive information by causing the application to exceed limits for memory, execution...

CVE-2010-2531

The varexport function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certain fatal errors occur, even if displayerrors is off, which allows remote attackers to obtain sensitive information by causing the application to exceed limits for memory, execution...

RHEL 5 : openldap (RHSA-2010:0198)

Updated openldap packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

DSA-2040-1 squidguard - several vulnerabilities

Bulletin has no description...

IT-Grundschutz M4.305: Einsatz von Speicherbeschränkungen (Quotas)

IT-Grundschutz M4.305: Einsatz von Speicherbeschränkungen Quotas. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94230 Diese Prüfung bezieht sich auf die 10...

RedHat Update for openldap RHSA-2010:0198-04

Check for the Version of openldap OpenVAS Vulnerability Test RedHat Update for openldap RHSA-2010:0198-04 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

libpng stalls on highly compressed ancillary chunks

Overview Libpng stalls and consumes large quantities of memory while processing certain Portable Network Graphics PNG files. Description When processing PNG files containing highly compressed ancillary chunks, the pngdecompresschunk function in libpng can consume large amounts of CPU time and...

OpenJDK: DoS (disk consumption) via handling of temporary font files

Multiple unspecified vulnerabilities in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allow remote attackers to cause a denial of service disk consumption via vectors related to temporary font files and 1 "limits on Font...