Fedora 7 : kernel-2.6.22.7-85.fc7 (2007-2298)

Update to official Linux 2.6.22.6 from 2.6.22.6-rc1: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.6 Update to Linux 2.6.22.7: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.7 - libata: add option to disable DMA on PATA devices libata.patadma, see kernel-parameters.tx...

Fedora Core 6 : kernel-2.6.22.7-57.fc6 (2007-712)

Update to official Linux 2.6.22.6 previously 2.6.22.6-rc1: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.6 Update to Linux 2.6.22.7: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.7 - USB: three trivial fixes - futex: fix compat list traversal - Restore ofpath...

CVE-2004-0972

The lvmcreateinitrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

Mandrake Linux Security Advisory : lvm (MDKSA-2004:144)

The Trustix developers discovered that the lvmcreateinitrd script, part of the lvm1 package, created a temporary directory in an insecure manner. This could allow for a symlink attack to create or overwrite arbitrary files with the privileges of the user running the script. The updated packages...

Davfs2, lvm-user: Insecure tempfile handling

Background Davfs2 is a file system driver that allows you to mount a WebDAV server as a local disk drive. lvm-user is a package providing userland utilities for LVM Logical Volume Management 1.x features. Description Florian Schilhabel from the Gentoo Linux Security Audit Team found that Davfs2...

lvm symbolic links

Incorrect temporary directory creation in lvmcreateinitrd и davfs2...

CVE-2004-0972

CVE-2004-0972 concerns the lvmcreate_initrd helper in the Trustix/ lvm package (lvm1) where a temporary-directory creation flaw enables a local attacker to perform a symlink-based overwrite of arbitrary files. The described root cause is insecure handling of temporary files by the script, allowin...

CVE-2004-0545

LVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack...

CVE-2004-0544

The CVE-2004-0544 issue affects LVM on AIX 5.1/5.2, with multiple buffer overflows in putlvcb and getlvcb that enable local privilege escalation. Connected Nessus entries indicate vendor patches IY55681 (AIX 5.1) and IY55682 (AIX 5.2) to mitigate the vulnerability. Practically, systems running af...

CVE-2004-0544

Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the 1 putlvcb or 2 getlvcb commands...

CVE-2004-0545

LVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack...

CVE-2004-0545

CVE-2004-0545 affects AIX 5.1 and 5.2 where the LVM component allows local users to overwrite arbitrary files via a symlink attack . The vulnerability is described as local-access, with the impact of potentially compromising file integrity via symlink tricks. Related Nessus entries for AIX 5.1/5....