[PT-2009-05] CA Internet Security Suite Denial of Service Vulnerability

---------------------------------------------------------------------- PT-2009-05 Positive Technologies Security Advisory CA Internet Security Suite Denial of Service Vulnerability ---------------------------------------------------------------------- --- Affected Software CA Internet Security...

Mandriva 'initscripts'本地信息泄漏漏洞

Bugraq ID: 35854 Mandriva是一款基于linux内核的发行版本。 Mandriva 'initscripts'存在安全问题，本地攻击者可以利用漏洞获得敏感信息。 在使用'initscripts'脚本启动服务时，如执行service network restart，会记录部分敏感信息，如部分无线密钥的部分数据。 MandrakeSoft Linux Mandrake 2009.1 x8664 MandrakeSoft Linux Mandrake 2009.1 MandrakeSoft Linux Mandrake 2009.0 x8664 MandrakeSoft...

CVE-2009-2461

mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors...

Design/Logic Flaw

mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors...

DEBIAN-CVE-2009-2461

mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors...

CVE-2009-2461

mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors...

CVE-2009-2461

mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors...

CVE-2009-2461

The CVE-2009-2461 entry concerns mathtex.cgi in mathTeX, where, for downloads prior to 20090713, temporary file creation is not done securely. Multiple connected sources (NVD, OSV, Veracode, OSV Debian, Ubuntu, CVE list) corroborate the issue as a local-attack–vector vulnerability with unspecifie...

CVE-2009-2461

mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors...

FreeBSD 7.0/7.1 vfs.usermount Local Privilege Escalation Exploit

Exploit for freebsd platform in category local exploits ================================================================ FreeBSD 7.0/7.1 vfs.usermount Local Privilege Escalation Exploit ================================================================ / cve-2008-3531.c -- Patroklos Argyroudis, arg...

Sun Solaris Event Port API多个本地拒绝服务漏洞

Bugraq ID: 35437 CNCAN ID：CNCAN-2009062203 Sun Solaris是一款商业性质的操作系统。 Solaris Event Port API存在竞争条件错误，本地攻击者可以利用漏洞使系统崩溃。 目前没有详细漏洞细节提供。 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris build snv99 Sun OpenSolaris build snv96 Sun OpenSolaris build snv95 Sun OpenSolaris build snv94 Sun OpenSolaris...

FreeBSD Direct Pipe Write本地信息泄漏漏洞

Bugraq ID: 35279 CNCAN ID：CNCAN-2009061101 FreeBSD是一款开放源代码的BSD操作系统。 FreeBSD "direct pipe writes"实现存在一个整数溢出错误，本地攻击者可以利用漏洞获得部分进程的内存信息，导致敏感信息泄漏。 "direct pipe writes"实现存在的缺陷可导致虚拟到物理地址查询被遗漏，可导致未授权读取其他进程的内存分页信息，使得敏感信息泄漏。 FreeBSD FreeBSD 7.2-STABLE FreeBSD FreeBSD 7.2-RELEASE-p1 FreeBSD FreeBSD...

FreeBSD IPv6 'SIOCSIFINFO_IN6'权限检查本地安全绕过漏洞

Bugraq ID: 35285 CNCAN ID：CNCAN-2009061102 FreeBSD是一款开放源代码的BSD操作系统。 FreeBSD针对"SIOCSIFINFOIN6" IOCTL缺少正确的权限检查，本地攻击者可以利用漏洞修改网络设置导致拒绝服务等攻击。 当修改IPv6网络栈属性时缺少正确的权限检查，发送特殊构建的"SIOCSIFINFOIN6" IOCTLs可导致更改部分IPv6接口设置如MTU或禁用IPv6接口。 FreeBSD FreeBSD 7.2-STABLE FreeBSD FreeBSD 7.1-RELEASE-p6 FreeBSD FreeBSD...

VMware产品Descheduled Time Accounting Driver拒绝服务漏洞

Bugraq ID: 35141 CVE ID：CVE-2009-1805 CNCVE ID：CNCVE-20091805 VMware提供包含多个虚拟主机和服务器的解决方案。 VMware Descheduled Time Accounting driver存在一个未明的安全问题，本地攻击者可以利用漏洞对虚拟机进行拒绝服务攻击。 符合如下条件的虚拟机受此漏洞影响： -虚拟机运行在windows操作系统下。 -VMware Descheduled Time Accounting driver安装在虚拟机上。 -VMware Descheduled Time...

COWON America jetCast 2.0.4.1109 Overflow

?php / COWON America jetCast 2.0.4.1109 .mp3 local heap buffer overlow exploit xp/sp3 by Nine:Situations:Group::pyrokinesis site: http://retrogod.altervista.org/ software site: http://www.jetaudio.com/ Tested against JetAudio pack v.7.5.2...

GNOME Evolution '~/.evolution/mail/local'文件权限漏洞

Bugraq ID: 34921 CNCAN ID：CNCAN-2009051302 Evolution是一款个人和工作组信息管理解决方案，可使用在Linux和Unix操作系统下，集成Email、日历、会议安排、联系人管理等功能。 Evolution不安全建立文件权限，本地攻击者可以利用漏洞获得敏感信息。 Evolution默认本地邮件文件夹设置为755，imap mail文件夹为700，但是local,config, vfolder和view为755，可导致泄漏敏感信息 GNOME Evolution 2.24.5 + Ubuntu Ubuntu Linux 8.04 LTS spar...

FreeBSD libc Berkley DB接口未初始化内存本地信息泄漏漏洞

BUGTRAQ ID: 34666 CNCAN ID：CNCAN-2009042302 FreeBSD是一款开放源代码的BSD操作系统。 FreeBSD libc Berkeley DB接口写malloc3中获得的未初始化内存到数据库文件，本地攻击者可以利用漏洞获得敏感信息。 FreeBSD FreeBSD 7.1-STABLE FreeBSD FreeBSD 7.1-RELEASE-p4 FreeBSD FreeBSD 7.1 -RELEASE-p2 FreeBSD FreeBSD 7.1 -RELEASE-p1 FreeBSD FreeBSD 7.1 -PRE-RELEASE...

[Positive Technologies SA 2009-01] PGP Desktop Pgpdisk.sys And Pgpwded.sys Multiple Vulnerabilities

---------------------------------------------------------------------- PT-2009-01 Positive Technologies Security Advisory PGP Desktop Pgpdisk.sys And Pgpwded.sys Multiple Vulnerabilities ---------------------------------------------------------------------- --- Affected Software PGP Desktop 9.9.0...

[Positive Technologies SA 2009-09] Trend Micro Internet Security Pro 2009 tmactmon.sys Priviliege Escalation Vulnerabilities

---------------------------------------------------------------------- PT-2009-09 Positive Technologies Security Advisory Trend Micro Internet Security Pro 2009 tmactmon.sys Priviliege Escalation Vulnerabilities ---------------------------------------------------------------------- --- Affected...

Ubuntu Update for linux-source-2.6.12/2.6.15/2.6.17 vulnerabilities USN-416-1

Ubuntu Update for Linux kernel vulnerabilities USN-416-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4161.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.12/2.6.15/2.6.17 vulnerabilities USN-416-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone...