UBUNTU-CVE-2013-1959

kernel/usernamespace.c in the Linux kernel before 3.8.9 does not have appropriate capability requirements for the uidmap and gidmap files, which allows local users to gain privileges by opening a file within an unprivileged process and then modifying the file within a privileged process...

Network Weathermap 0.97a Cross Site Scripting

Network Weathermap 0.97a - Persistent XSS Earlier versions are also possibly vulnerable. INFORMATION Product: Network Weathermap 0.97a Remote-exploit: yes Vendor-URL: http://www.network-weathermap.com/ Discovered by: Daniel Ricardo dos Santos CVE Request - 15/03/2013 CVE Assign - 18/03/2013 CVE...

DEBIAN-CVE-2013-1819

The xfsbuffind function in fs/xfs/xfsbuf.c in the Linux kernel before 3.7.6 does not validate block numbers, which allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by leveraging the ability to mount an XFS filesyst...

CVE-2013-1819

CVE-2013-1819 affects the Linux kernel prior to 3.7.6. The vulnerability resides in fs/xfs/xfs_buf.c: _xfs_buf_find does not validate block numbers, which can allow local users to mount an XFS filesystem with an invalid extent map and trigger a NULL pointer dereference, causing a denial of servic...

CVE-2013-1819

The xfsbuffind function in fs/xfs/xfsbuf.c in the Linux kernel before 3.7.6 does not validate block numbers, which allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by leveraging the ability to mount an XFS filesyst...

UBUNTU-CVE-2013-1819

The xfsbuffind function in fs/xfs/xfsbuf.c in the Linux kernel before 3.7.6 does not validate block numbers, which allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by leveraging the ability to mount an XFS filesyst...

PT-2013-3406 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.7.6 Description: The issue is related to the xfs buf find function in fs/xfs/xfs buf.c, which does not validate block numbers. This allows local users to cause a denial of service, resulting in a NULL pointer...

Design/Logic Flaw

Unspecified vulnerability in autofs, as used in Red Hat Enterprise Linux RHEL 5, allows local users to cause a denial of service autofs crash and delayed mounts or prevent "mount expiration" via unspecified vectors related to "using an LDAP-based automount map."...

CVE-2012-2697

Unspecified vulnerability in autofs, as used in Red Hat Enterprise Linux RHEL 5, allows local users to cause a denial of service autofs crash and delayed mounts or prevent "mount expiration" via unspecified vectors related to "using an LDAP-based automount map."...

CVE-2012-2697

Unspecified vulnerability in autofs, as used in Red Hat Enterprise Linux RHEL 5, allows local users to cause a denial of service autofs crash and delayed mounts or prevent "mount expiration" via unspecified vectors related to "using an LDAP-based automount map."...

CVE-2012-2697

Unspecified vulnerability in autofs, as used in Red Hat Enterprise Linux RHEL 5, allows local users to cause a denial of service autofs crash and delayed mounts or prevent "mount expiration" via unspecified vectors related to "using an LDAP-based automount map."...

CVE-2012-2697

Unspecified vulnerability in autofs, as used in Red Hat Enterprise Linux RHEL 5, allows local users to cause a denial of service autofs crash and delayed mounts or prevent "mount expiration" via unspecified vectors related to "using an LDAP-based automount map."...

CVE-2013-0894

Buffer overflow in the vorbisparsesetuphdrfloors function in the Vorbis decoder in vorbisdec.c in libavcodec in FFmpeg through 1.1.3, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial...

DEBIAN-CVE-2013-0894

Buffer overflow in the vorbisparsesetuphdrfloors function in the Vorbis decoder in vorbisdec.c in libavcodec in FFmpeg through 1.1.3, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial...

Video Beef - Get Protocols And Geolocation

How to get protocols and geo-location using BeEF Browser Exploitation Framework. This attack will require Java. In GeoLocation you will get almost full address and latitude and longitude and find the perfect location using Google Map...

autofs security, bug fix, and enhancement update

5.0.1-0.rc2.177.0.1.el5 - apply fix from NetApp to use tcp before udp http://www.mail-archive.com/[email protected]/msg07910.html Bert Barbe orabug 6827898 5.0.1-0.rc2.177.el5 - bz714766 - autofs /net maps do not refresh list of shares exported on the NFS server - disable hosts map HUP sign...

Low: Red Hat Security Advisory: autofs security, bug fix, and enhancement update

An updated autofs package that fixes one security issue, several bugs, and adds one enhancement is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which giv...

wireshark: Infinite loop in the ANSI A Interface (IS-634/IOS) dissector

Off-by-one error in the elemcellidaux function in epan/dissectors/packet-ansia.c in the ANSI MAP dissector in Wireshark 1.4.x before 1.4.8 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service infinite loop via an invalid packet...

DEBIAN-CVE-2012-3498

PHYSDEVOPmappirq in Xen 4.1 and 4.2 and Citrix XenServer 6.0.2 and earlier allows local HVM guest OS kernels to cause a denial of service host crash and possibly read hypervisor or guest memory via vectors related to a missing range check of map-index...

Integer overflow

Multiple integer overflows in operations/external/ppm-load.c in GEGL Generic Graphics Library 0.2.0 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a large 1 width or 2 height value in a Portable Pixel Map ppm image, which triggers a...