Zope ZClass Permission Mapping Bug

The remote web server contains an application server that is prone to a privilege escalation flaw. Description : The remote web server uses a version of Zope which is older than version 2.3.3. In such versions, any user can visit a ZClass declaration and change the ZClass permission mappings for...

Super dove gray vip2005 detector detection principle of a simple analysis-vulnerability warning-the black bar safety net

The Preface of the new gray pigeons always give people everywhere the feeling, own it worked in the friend of the host met several times,each time can only be manually determined and clear. Looking at this detector for a little test. The effect is very good, it creates a want to know how she...

Linux kernel console keyboard mapping commands execution

User can set keyboard mapping which will impact next users on this console...

RHEL 4 : binutils (RHSA-2005:673)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:673 advisory. Binutils is a collection of utilities used for the creation of executable code. A number of bugs were found in various binutils tools. If a user is...

binutils security update

CentOS Errata and Security Advisory CESA-2005:673 An updated binutils package that fixes several bugs and minor security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Binutils is a collection of utilities used for the...

security flaw

The mmap function in the Linux Kernel 2.6.10 can be used to create memory maps with a start address beyond the end address, which allows local users to cause a denial of service kernel crash...

Low: Red Hat Security Advisory: binutils security update

An updated binutils package that fixes several bugs and minor security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Binutils is a collection of utilities used for the creation of executable code. A number of bugs were fou...

CVE-2005-3106

Race condition in Linux 2.6, when threads are sharing memory mapping via CLONEVM such as linuxthreads and vfork, might allow local users to cause a denial of service deadlock by triggering a core dump while waiting for a thread that has just performed an exec...

CVE-2005-3106

CVE-2005-3106 is a Linux kernel race condition affecting thread management when memory mappings are shared (CLONE_VM). The issue can lead to a local denial of service via deadlock, e.g., by triggering a core dump or waiting-for-exec scenarios. Connected advisories confirm this CVE across multiple...

CVE-2005-3106

Race condition in Linux 2.6, when threads are sharing memory mapping via CLONEVM such as linuxthreads and vfork, might allow local users to cause a denial of service deadlock by triggering a core dump while waiting for a thread that has just performed an exec...

CVE-2005-2144

Prevx Pro 2005 1.0 is affected by CVE-2005-2144, which enables local users to bypass file protections and modify files by using MapViewOfFile to memory-map the target file. The description from CVE records states the issue is a local elevation/ tampering risk within Prevx Pro 2005. There is no pu...

CVE-2005-2144

Prevx Pro 2005 1.0 allows local users to bypass file protection and modify files by using MapViewOfFile to perform memory mapping on the file...

CVE-2005-2144

Prevx Pro 2005 1.0 allows local users to bypass file protection and modify files by using MapViewOfFile to perform memory mapping on the file...

PrevX Pro Intrusion Prevension System multiple vulnerabilities

Protection bypass be using memory mapping and internal syscalls, DoS...

CVE-2004-2134

Oracle toplink mapping workBench uses a weak encryption algorithm for passwords, which allows local users to decrypt the passwords...

CVE-2004-2134

CVE-2004-2134 affects Oracle TopLink Mapping Workbench. The vulnerability is a weak encryption of passwords, enabling local users to decrypt them. The CVSS shows local access with low complexity and partial confidentiality/integrity/availability impact. No remediation/version details are provided...

DSA-715-1 cvs - several

Bulletin has no description...

CVE-2004-1343

CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, which allows remote attackers to cause a denial of service server crash...

DEBIAN-CVE-2004-1343

CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, which allows remote attackers to cause a denial of service server crash...

Linux Kernel 2.6.x - AIO_Free_Ring Local Denial of Service

Linux Kernel 2.6.x - AIOFreeRing Local Denial of Service / source: https://www.securityfocus.com/bid/11842/info The Linux Kernel is reported prone to a local denial of service vulnerability. It is reported that the vulnerability exists due to a failure by 'aiofreering' to handle exceptional...