Trend Micro Office Scan本地权限提升漏洞

Trend OfficeScan是一款企业级反病毒程序。 Trend OfficeScan TMTDI模块实现存在问题，本地攻击者可以利用此漏洞以高权限执行任意代码，从而实现权限的提升。 在版本10.0 Service Pack 1 Patch 2及版本10.5中发现此漏洞，其他版本也同样受到影响。 Trend Micro OfficeScan 10.x 厂商补丁： Trend Micro ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.antivirus.com/...

Linux Kernel "hdsp.c" IOCTL本地信息泄露漏洞

BUGTRAQ ID: 45063 CVE ID: CVE-2010-4081 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在实现上存在漏洞，本地攻击者可利用此漏洞获取敏感信息，可能有利于执行其他攻击。 hdspm.c和hdsp.c中的SNDRVHDSPIOCTLGETCONFIGINFO和 SNDRVHDSPIOCTLGETCONFIGINFO允许未授权用户读取未初始化内核栈内存，因为栈上公布的 hdspmconfiginfo的几个字段在复制给用户之前未改变或清零。 Linux kernel 2.6.0 - 2.6.37 厂商补丁：...

Linux Kernel "FBIOGET_VBLANK" IOCTL本地信息泄露漏洞

BUGTRAQ ID: 45062 CVE ID: CVE-2010-4079 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在实现上存在漏洞，本地攻击者可利用此漏洞获取敏感信息，从而有利于执行其他攻击。 V4L/DVB: ivtvfb: 防止读取未始化栈内存。FBIOGETVBLANK device ioctl允许未授权用户读取16字节的未始化栈内存，因为在栈上公布的fbvblank结构的“保留”的成员在复制给用户之前没有变更或清零。 Linux kernel 2.6.0 - 2.6.37 厂商补丁： Linux -----...

VSR Advisories: Linux RDS Protocol Local Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 VSR Security Advisory http://www.vsecurity.com/ - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: Linux RDS Protocol Local Privilege Escalation Release Date: 2010-10-19 Application: Linux Kernel Versions:...

kernel: tty: release_one_tty() forgets to put pids

The releaseonetty function in drivers/char/ttyio.c in the Linux kernel before 2.6.34-rc4 omits certain required calls to the putpid function, which has unspecified impact and local attack vectors...

[Bkis-03-2010] Vulnerability in Flash Slideshow Maker Vulnerability

Bkis-03-2010 Vulnerability in Flash Slideshow Maker Vulnerability 1. General Information Flash Slideshow Maker is a Flash album creator to make animated photo slide show with SWF file as the output format. Bkis has just detected a vulnerability in the software related to the processing of Flash...

[SECURITY] [DSA 2063-1] New pmount packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-2063-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano June 17, 2010 http://www.debian.org/security/faq -...

Design/Logic Flaw

The releaseonetty function in drivers/char/ttyio.c in the Linux kernel before 2.6.34-rc4 omits certain required calls to the putpid function, which has unspecified impact and local attack vectors...

CVE-2010-1162

CVE-2010-1162 affects the Linux kernel before 2.6.34-rc4, in which release_one_tty() in drivers/char/tty_io.c omits certain required put_pid() calls. The impact is described as unspecified, with local attack vectors. The available connected documents confirm the vulnerability and reference the af...

CVE-2010-1162

The releaseonetty function in drivers/char/ttyio.c in the Linux kernel before 2.6.34-rc4 omits certain required calls to the putpid function, which has unspecified impact and local attack vectors...

CVE-2010-1162

The releaseonetty function in drivers/char/ttyio.c in the Linux kernel before 2.6.34-rc4 omits certain required calls to the putpid function, which has unspecified impact and local attack vectors...

Dualis 20.4 - '.bin' Local Denial of Service

Site: http://www.nullbyte.org.il Dualis 20.4 is vulnerable to local denial of service attack. When we try to open a file by 'Load and ExecuteCTRL+R' that contains 9999 chars 'A', so dualis should crash. PoC / Code: $buffer = strrepeat'A', 9999; Create 9999 chars'A'.. iffileputcontents'crash.bin',...

CmsFaethon 2.2.0 (ultimate.7z) - Multiple Vulnerabilities

CmsFaethon 2.2.0 ultimate.7z - Multiple Vulnerabilities cmsfaethon-2.2.0-ultimate.7z Multiple Vulnerability +Vendor: CMS Faethon +Version: 2.2.0-ultimate.7z +License: GNU GENERAL PUBLIC LICENSE +Download: http://sourceforge.net/projects/cmsfaethon/files/ +Risk: High +Remote: Yes +Local: Yes...

Debian Lintian多个本地安全漏洞

Bugraq ID: 37975 CVE ID：CVE-2009-4013 CVE-2009-4014 CVE-2009-4015 Debian Lintian是一款软件包检查程序。 Debian Lintian存在多个安全漏洞，本地攻击者可以利用这些漏洞执行任意代码或者提升特权或获得敏感信息。 CVE-2009-4013：控制文件过滤缺失 CNCVE ID：CNCVE-20094013 CNCVE-20094014 CNCVE-20094015 CNCVE-20094013 控制字段名称和值在使用前没有充分过滤，在部分操作下可导致目录遍历。 Patch...

TheGreenBow VPN Client Local Stack Overflow Vulnerability - Security Advisory - SOS-10-001

TheGreenBow VPN Client Local Stack Overflow Vulnerability - Security Advisory - SOS-10-001 Release Date. 21-Jan-2010 Vendor Notification Date. 11-Dec-2009 Product. TheGreenBow VPN Client Platform. Microsoft Windows Affected versions. 4.65.003, 4.51.001 verified and possibly others. Severity Ratin...

Linux Kernel 'drivers/firewire/ohci.c'空指针引用拒绝服务漏洞

Bugraq ID: 37339 CVE ID：CVE-2009-4138 Linux是一款开放源代码的操作系统。 ohci接口在处理数据长度为零的报文时存在问题，本地攻击者可以利用漏洞对系统进行拒绝服务攻击。 可以打开新1394栈新版本中的任意/dev/fw文件的用户，发送部分ioctls可导致使用ohci 1.0控制器或由于硬件缺陷ohci 1.0模式中使用ohci 1.1控制器的机器崩溃。这可导致fw-,ohci.c中引用空指针。 在那些使用不被列入黑名单的ohci1.1控制器的机器，调用不会发生任何事情，虽然是个缺陷，但不会导致崩溃。 在Red Hat Enterprise...

Design/Logic Flaw

Unspecified vulnerability in db2licm in the Engine Utilities component in IBM DB2 9.5 before FP5 has unknown impact and local attack vectors...

CVE-2009-4331

The Install component in IBM DB2 9.5 before FP5 and 9.7 before FP1 configures the High Availability HA scripts with incorrect file-permission and authorization settings, which has unknown impact and local attack vectors...

CVE-2009-4330

Unspecified vulnerability in db2licm in the Engine Utilities component in IBM DB2 9.5 before FP5 has unknown impact and local attack vectors...

Authorization

The Install component in IBM DB2 9.5 before FP5 and 9.7 before FP1 configures the High Availability HA scripts with incorrect file-permission and authorization settings, which has unknown impact and local attack vectors...