Linux Kernel 2.6.32 (Ubuntu 10.04) - proc Handling SUID Privilege Escalation

Linux Kernel 2.6.32 Ubuntu 10.04 - proc Handling SUID Privilege Escalation Source: http://www.halfdog.net/Security/2011/SuidBinariesAndProcInterface/ proc Handling of Already Opened Files: Subvert The Stack Base Address Randomization With Suid-Binaries Problem description: Latest ubuntu lucid sto...

SuSE 11 Security Update : OpenSSL (SAT Patch Number 2214)

This update adds support for RFC5746 TLS renegotiations to address vulnerabilities tracked as CVE-2009-3555. It also fixes a mishandling of OOM conditions in bnwexpand. CVE-2009-3245 Installation notes This update is provided as RPM packages that can easily be installed onto a running system by...

Linux Kernel 'setup_arg_pages()' Denial of Service Vulnerability

Exploit for linux platform in category dos / poc ================================================================ Linux Kernel 'setupargpages' Denial of Service Vulnerability ================================================================ / known for over a year, fixed in grsec bug is due to a b...

SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 6944)

This update adds support for RFC5746 TLS renegotiations to address vulnerabilities tracked as CVE-2009-3555. It also fixes a mishandling of OOM conditions in bnwexpand. CVE-2009-3245 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : XFree86-server (YOU Patch Number 12638)

The X.Org X11 Server was updated to fix 2 security issues : - This fix adds a workaround for overlapping stacks and heaps in case of OOM conditions.This workaround is necessary if the kernel is not properly adding guard or gap-pages below the stack. CVE-2010-2240 - The fbComposite function in...

CVE-2010-1488

The procoomscore function in fs/proc/base.c in the Linux kernel before 2.6.34-rc4 uses inappropriate data structures during selection of a candidate for the OOM killer, which might allow local users to cause a denial of service via unspecified patterns of task creation...

Code injection

The procoomscore function in fs/proc/base.c in the Linux kernel before 2.6.34-rc4 uses inappropriate data structures during selection of a candidate for the OOM killer, which might allow local users to cause a denial of service via unspecified patterns of task creation...

CVE-2010-1488

The CVE-2010-1488 issue affects the Linux kernel prior to 2.6.34-rc4, where proc_oom_score in fs/proc/base.c selects a candidate for the OOM killer using inappropriate data structures. This could allow local users to trigger a denial of service via certain task-creation patterns. The vulnerabilit...

openSUSE Security Update : libopenssl-devel (libopenssl-devel-2232)

This openssl update adds support for RFC5746 TLS renegotiations to address vulnerabilities tracked as CVE-2009-3555. It also fixes a mishandling of OOM conditions in bnwexpand CVE-2009-3245. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

openSUSE Security Update : libopenssl-devel (libopenssl-devel-2232)

This openssl update adds support for RFC5746 TLS renegotiations to address vulnerabilities tracked as CVE-2009-3555. It also fixes a mishandling of OOM conditions in bnwexpand CVE-2009-3245. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

SuSE9 Security Update : OpenSSL (YOU Patch Number 12606)

This update adds support for RFC5746 TLS renegotiations to address vulnerabilities tracked as CVE-2009-3555. It also fixes a mishandling of OOM conditions in bnwexpand. CVE-2009-3245 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

openSUSE Security Update : kernel (kernel-2050)

The openSUSE 11.1 Kernel was updated to 2.6.27.42 fixing various bugs and security issues. CVE-2010-0622: The wakefutexpi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly handle certain unlock operations for a Priority Inheritance PI futex, which allows local use...

Kojoney (SSH honeypot) remote DoS

= Affected software : Name : Kojoney Description : Low interaction SSH honeypot Version : 0.0.4.2 Service : TCP/22 = Patched version : http://sourceforge.net/projects/kojoney/files/kojoney-0.0.4.2.tar.gz/download = Technical details : Emulation of the wget and curl commands is made via calls to...

Kojoney versions prior <= v0.0.4.2 denial of service vulnerability

Exploit for unknown platform in category dos / poc ================================================================== Kojoney versions prior returned value is "HelloWorld" data:text;base64,WDVPIVAlQEFQWzRcUFpYNTQoUF4pN0NDKTd9JEVJQ0FSLVNUQU5EQVJELUFOVElWSVJVUy1URVNULUZJTEUhJEgrSCo=://a = returned...

Safari 4.0.4 Denial Of Service

function DoS var buffer = 'A'; for i =0;i'+buffer+buffer;...

CentOS 5 : rgmanager (CESA-2009:1339)

An updated rgmanager package that fixes multiple security issues, various bugs, and adds enhancements is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. The rgmanager package contains the Red Hat Resourc...

kernel security and bug fix update

2.4.21-63.0.0.0.1.EL - add directio support for qla drivers herb ora 6346849 - support PT Quad card ora 5751043 - io to nfs partition hangs ora 5088963 - add entropy for bnx2 nic ora 5931647 - avoid large allocation-fragmentation in MTU zab - fix clear highpage wli 2.4.21-63.EL - fs: fix pipe nul...

rgmanager security update

CentOS Errata and Security Advisory CESA-2009:1339 An updated rgmanager package that fixes multiple security issues, various bugs, and adds enhancements is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team...

rgmanager security, bug fix, and enhancement update

2.0.52-1.0.1 - Update summary and description to be vendor neutral 2.0.52-1 - When vm.sh does a status check and gets 'no state' it is now treated as a running state. - Resolves: rhb514044 2.0.51-1 - In some cases virtual machines will be restarted after a successful migration when the cluster...

Low: Red Hat Security Advisory: rgmanager security, bug fix, and enhancement update

An updated rgmanager package that fixes multiple security issues, various bugs, and adds enhancements is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. The rgmanager package contains the Red Hat Resourc...