Ubuntu Update for linux-source-2.6.12/2.6.15/2.6.17 vulnerabilities USN-416-1

Ubuntu Update for Linux kernel vulnerabilities USN-416-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4161.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.12/2.6.15/2.6.17 vulnerabilities USN-416-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone...

[Suspected Spam][PT-2009-11] SlySoft Multiple Products ElbyCDIO.sys Denial of Service

---------------------------------------------------------------------- PT-2009-11 Positive Technologies Security Advisory SlySoft Multiple Products ElbyCDIO.sys Denial of Service ---------------------------------------------------------------------- --- Affected Software SlySoft AnyDVD version...

Sun Solaris加密驱动本地拒绝服务漏洞

BUGTRAQ ID: 34000 CVECAN ID: CVE-2009-0838 Solaris是一款由Sun开发和维护的商业UNIX操作系统。 Solaris的加密伪设备驱动没有正确地释放内存，本地攻击者可以通过vmemhashdelete函数导致系统忙碌。如果出现上述漏洞，系统可能出现类似于以下栈追踪的忙碌： vmemhashdelete: bad free vmemhashdelete vmemxfree objectgetattributevalue fopioctl ioctl Sun Solaris 10.0x86 Sun Solaris 10.0 Sun...

PT-2009-2783 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue arises from the improper handling of invalid pointers by the Windows kernel, allowing local users to gain privileges. This could enable an attacker to run arbitrary...

GLSA-200903-05 : PDFjam: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200903-05 PDFjam: Multiple vulnerabilities Martin Vaeth reported multiple untrusted search path vulnerabilities CVE-2008-5843. Marcus Meissner of the SUSE Security Team reported that temporary files are created with a predictable...

VUplayer 2.49 .CUE File Local Buffer Overflow Exploit

No description provided by source. / Author: Assed Edin E-mail: [email protected] GreetS : Xcracker & SimO-s0ft & Ga3 Drari Wlad MArrakech ^^ o Manssawch Lycéé Hassan2 & Str0ke / include string.h include stdlib.h include stdio.h include windows.h define OFFSET 1012 char header1=...

Code injection

The 1 modibmssl and 2 modcgid modules in IBM HTTP Server 6.0.x before 6.0.2.31 and 6.1.x before 6.1.0.19, as used in WebSphere Application Server WAS, set incorrect permissions for AFUNIX sockets, which has unknown impact and local attack vectors...

CVE-2009-0436

The 1 modibmssl and 2 modcgid modules in IBM HTTP Server 6.0.x before 6.0.2.31 and 6.1.x before 6.1.0.19, as used in WebSphere Application Server WAS, set incorrect permissions for AFUNIX sockets, which has unknown impact and local attack vectors...

Firefox Chrome privilege escalation via local .desktop files

Mozilla Firefox before 3.0.6 and SeaMonkey do not block links to the 1 about:plugins and 2 about:config URIs from .desktop files, which allows user-assisted remote attackers to bypass the Same Origin Policy and execute arbitrary code with chrome privileges via vectors involving the URL field in a...

IBM AIX rmsock及rmsock64工具日志文件本地权限提升漏洞

IBM AIX是一款商业性质的UNIX操作系统。 IBM AIX系统中的rmsock及rmsock64工具实现上存在漏洞，可能允许本地攻击者利用此漏洞提升自己的权限。 rmsock及rmsock64工具没有以安全的方式创建日志文件，本地攻击者可能利用此漏洞向任意系统文件添加数据，导致权限提升。 IBM AIX 6.x IBM AIX 5.x 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://aix.software.ibm.com/aix/efixes/security/rmsockfix.tar...

Design/Logic Flaw

Unspecified vulnerability in convlpd in Sun OpenSolaris has unknown impact and local attack vectors, related to improper handling of temporary files, aka Bug ID 6655641...

CVE-2008-5910

Unspecified vulnerability in txzonemgr in Sun OpenSolaris has unknown impact and local attack vectors, related to a "Temporary file vulnerability," aka Bug ID 6653462...

CVE-2008-5909

Unspecified vulnerability in convlpd in Sun OpenSolaris has unknown impact and local attack vectors, related to improper handling of temporary files, aka Bug ID 6655641...

CVE-2008-5909

CVE-2008-5909: vulnerability in conv_lpd of Sun OpenSolaris related to improper handling of temporary files. Local access required with low complexity; potential impact on confidentiality, integrity and availability is stated as complete. Exploitation details and concrete remediation information ...

Linux Kernel 64 Bit ABI系统调用参数特权提升漏洞

BUGTRAQ ID: 33275 CVE ID：CVE-2009-0029 Linux是一款开放源代码的操作系统。 Linux内核64位ABI系统调用参数处理存在问题，本地攻击者可以利用漏洞提升特权。 部分结构的ABI定义函数调用者必须对每个参数进行符号扩展来填满寄存器宽度，在linux系统调用处理上存在问题。 如在64位上使用这个系统调用： asmlinkage long sysexampleunsigned int index if index 5 return -EINVAL; return examplearrayindex;...

PT-2009-01: PGP Desktop Pgpdisk.sys And Pgpwded.sys Multiple Vulnerabilities

Positive Technologies Research Team has discovered several vulnerabilities in PGP Desktop. 1. The IOCTL handler in pgpdisk.sys does not properly validate buffer data associated with the Irp object, which allows local users to crash the system. Severity Rating : Severity: Medium Impact: Denial of...

Hex Workshop 5.1.4 Local Buffer Overflow

Hex Workshop 5.1.4 Color Mapping File Local Buffer Overflow Poc other versions are affected By:Encrypt3d.M!nd Merry Christmas & Happy New Year 2009 Greetz:-=Mizo=-Perra :-l,L!0N,El Mariachi,MiNi SpIder,GGY,and all my friends Just import enc.cmap From ToolsColor Mapping And See What Happen ^^ I...

ESET Smart Security epfw.sys驱动本地内核权限提升漏洞

BUGTRAQ ID: 32917 ESET Smart Security是一个集成的安全套装解决方案,适合普通个人消费者和中小型商业客户。 ESET Smart Security的epfw.sys设备驱动没有正确地验证传送给IOCTL处理器函数的地址，本地攻击者可以通过向IOCTL处理器函数提供特制的Irp用常数双字值覆盖用户提供的地址，导致以内核权限执行任意指令。 ... .text:000118DE @@ioctl0x8897229F: .text:000118DE push 4 .text:000118E0 pop eax .text:000118E1 cmp...

University of Washington IMAP 'tmail'和'dmail'本地缓冲区溢出漏洞

BUGTRAQ ID: 32072 CNCAN ID：CNCAN-2008110404 University of Washington IMAP是一款IMAP协议实现。 University of Washington IMAP包含的'tmail'和'dmail'存在缓冲区溢出，本地攻击者可以利用漏洞以应用程序权限执行任意指令。 'tmail'和'dmail'应用程序在从命令行中处理文件夹扩展参数时缺少正确的边界检查，通过提交超长文件夹名可触发基于栈的缓冲区溢出。tmail可允许以root用户权限执行任意指令。 有问题代码如下： tmail.cchar getusername char...

PHPMyAdmin明文密码存储漏洞

BUGTRAQ: 7965 phpMyAdmin以明文格式存储密码，本地攻击者可以用这个漏洞获得Cookie文件中的密码信息，控制phpMyAdmin应用系统。 phpMyAdmin没有使用任何类似BASE64/RadiX64的编码形式，只是简单的把用户数据如用户名和密码以明文方式存储在Cookie文件中，如： pmacookieusername=UserName; lang=language-iso-8859-1; pmacookiepassword=your password 任意本地用户或者远程用户通过跨站脚本执行攻击，可以Cookie信息获得敏感用户信息，从而控制系统。...