DSA-1017-1 kernel-source-2.6.8 - several

Bulletin has no description...

CVE-2006-0646

CVE-2006-0646 affects SUSE Linux 9.1–10.0 and SLES 9. In certain circumstances when linking binaries, the dynamic linker/loader (ld) can leave an empty RPATH or RUNPATH, allowing a local attacker to cause arbitrary code execution by running an ld-linked application from the current directory that...

CVE-2006-0096

CVE-2006-0096 affects the SDLA driver in Linux kernels 2.6.x before 2.6.11 and 2.4.x before 2.4.29, describing lax capability checks for firmware upgrades. The description notes local attack vectors and an unclear impact; later investigation mentions that exploitation may require root privileges ...

GLSA-200510-22 : SELinux PAM: Local password guessing attack

The remote host is affected by the vulnerability described in GLSA-200510-22 SELinux PAM: Local password guessing attack The SELinux patches for PAM introduce a vulnerability allowing a password to be checked with the unixchkpwd utility without delay or logging. This vulnerability doesn't affect...

PBLang465.txt

Class: Input Validation Error CVE: CVE-MAP-NOMATCH Remote: Yes Local: Yes Credit: Abducter [email protected] Or [email protected] Vulnerable: File Including In PBLang 4.65 ALL VERSION info PBLang IS POWER PHP SITES SUPPORT HERE http://pblang.drmartinus.de/ expliot...

[Full-disclosure] [ GLSA 200510-22 ] SELinux PAM: Local password guessing attack

Gentoo Linux Security Advisory GLSA 200510-22 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2005-2120

Stack-based buffer overflow in the Plug and Play PnP service UMPNPMGR.DLL in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "" backslash characters in a registry key name, which triggers the overflow i...

CVE-2005-3146

StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files...

CVE-2005-2449

Race condition in sandbox before 1.2.11 allows local users to create or overwrite arbitrary files via symlink attack on sandboxpids.tmp...

CVE-2005-2425

CVE-2005-2425 describes a stack-based buffer overflow in Ares FileShare 1.1 . An attacker can trigger the overflow via a (1) long history parameter in the configuration file (ares.conf) or (2) a long search string, potentially allowing remote code execution or elevation of privileges for local us...

security flaw

Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpio after the decompression is complete...

Qpopper: Multiple Vulnerabilities

Background Qpopper is a widely used server for the POP3 protocol. Description Jens Steube discovered that Qpopper doesn't drop privileges to process local files from normal users CAN-2005-1151. The upstream developers discovered that Qpopper can be forced to create group or world writeable files...

Microsoft Object Management DoS Vulnerability

Overview Microsoft Object Management code has a buffer overflow vulnerability that can cause a system to reboot. Description A buffer overflow vulnerability in Microsoft Object Management code exists that could be attacked by sending specially crafted requests locally on an affected operating...

Linux Kernel 2.4.x2.6.x - BlueTooth Signed Buffer Index Privilege Escalation (1)

Linux Kernel 2.4.x2.6.x - BlueTooth Signed Buffer Index Privilege Escalation 1 / EDB Note: Update can be found here https://www.exploit-db.com/exploits/926/ source: https://www.securityfocus.com/bid/12911/info A local signed-buffer-index vulnerability affects the Linux kernel because it fails to...

[SECURITY] [DSA 692-1] New kppp packages fix privileged file descriptor leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 692-1 [email protected] http://www.debian.org/security/ Martin Schulze March 8th, 2005 http://www.debian.org/security/faq -...

GLSA-200503-01 : Qt: Untrusted library search path

The remote host is affected by the vulnerability described in GLSA-200503-01 Qt: Untrusted library search path Tavis Ormandy of the Gentoo Linux Security Audit Team has discovered that Qt searches for shared libraries in an untrusted, world-writable directory. Impact : A local attacker could crea...

Mandrake Linux Security Advisory : uim (MDKSA-2005:046)

Takumi ASAKI discovered that uim always trusts environment variables which can allow a local attacker to obtain elevated privileges when libuim is linked against an suid/sgid application. This problem is only exploitable in 'immodule for Qt' enabled Qt applications. The updated packages are patch...

[SECURITY] [DSA 684-1] New typespeed packages fix arbitrary group games code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 684-1 [email protected] http://www.debian.org/security/ Martin Schulze February 16th, 2005 http://www.debian.org/security/faq -...

Debian DSA-684-1 : typespeed - format string

Ulf Harnhammar from the Debian Security Audit Project discovered a problem in typespeed, a touch-typist trainer disguised as game. This could lead to a local attacker executing arbitrary code as group games. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

HP-UX PHCO_29382 : HP-UX uucp(1) and uusub(1), Local Increase in Privilege (HPSBUX00262 SSRT3461 rev.2)

s700800 11.11 uucp1 cumulative patch : uusub1 and uucp1 have potential buffer overflows. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO29382. The text itself is copyright C Hewlett-Packard Development...