CVE-2006-5461

Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi...

USN-380-1: Avahi vulnerability

Steve Grubb discovered that netlink messages were not being checked for their sender identity. This could lead to local users manipulating the Avahi service...

[Full-disclosure] [USN-380-1] Avahi vulnerability

=========================================================== Ubuntu Security Notice USN-380-1 November 11, 2006 avahi vulnerability CVE-2006-5461 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 5.10 Ubuntu 6.06 LTS Ubuntu...

Avahi privilege escalation

Insufficient Netlink parameters validation allow to manipulate server parameters...

Solaris 9 (sparc) : 121332-01

PC NetLink 2.0 Server Adm fixes. Date this patch was last updated by Sun : Dec/02/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 6 (sparc) : 113531-10

PC NetLink 2.0 server fixes. Date this patch was last updated by Sun : Feb/24/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 9 (sparc) : 113531-10

PC NetLink 2.0 server fixes. Date this patch was last updated by Sun : Feb/24/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 7 (sparc) : 121209-01

PC NetLink 2.0 Client GUI fixes. Date this patch was last updated by Sun : Dec/02/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 8 (sparc) : 121332-01

PC NetLink 2.0 Server Adm fixes. Date this patch was last updated by Sun : Dec/02/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 7 (sparc) : 121332-01

PC NetLink 2.0 Server Adm fixes. Date this patch was last updated by Sun : Dec/02/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 8 (sparc) : 113531-10

PC NetLink 2.0 server fixes. Date this patch was last updated by Sun : Feb/24/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 9 (sparc) : 121209-01

PC NetLink 2.0 Client GUI fixes. Date this patch was last updated by Sun : Dec/02/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Code injection

The netlinkrcvskb function in afnetlink.c in Linux kernel 2.6.14 and 2.6.15 allows local users to cause a denial of service infinite loop via a nlmsglen field of 0...

CVE-2005-4635

The nlfibinput function in fibfrontend.c in the Linux kernel before 2.6.15 does not check for valid lengths of the header and payload, which allows remote attackers to cause a denial of service invalid memory reference via malformed fiblookup netlink messages...

Linux kernel multiple vulnerabilities

TwinHan DST Frontend/Card buffer overflow,kernel/sysctl.c off-by-one, fiblookup netlink message memory corruption, setmempolicy DoS...

CVE-2005-4635

The nlfibinput function in fibfrontend.c in the Linux kernel before 2.6.15 does not check for valid lengths of the header and payload, which allows remote attackers to cause a denial of service invalid memory reference via malformed fiblookup netlink messages...

CVE-2005-4635

The nlfibinput function in fibfrontend.c in the Linux kernel before 2.6.15 does not check for valid lengths of the header and payload, which allows remote attackers to cause a denial of service invalid memory reference via malformed fiblookup netlink messages...

CVE-2005-4552

The 1 slsmgr and 2 slsadmin programs in Sun Solaris PC NetLink 2.0 create temporary files insecurely, which allows local users to gain privileges...

CVE-2005-4552

The CVE-2005-4552 entry applies to Sun Solaris PC NetLink 2.0, affecting the (1) slsmgr and (2) slsadmin programs. The root issue is insecure handling of temporary files, which allows local users to gain privileges. The description does not specify version ranges beyond PC NetLink 2.0, nor provid...

Sun Solaris PC Netlink symbolic links problem

"/opt/lanman/sbin/slsmgr" and "/etc/init.d/slsadmin" symbolic links problem...