AMD Bulldozer Linux ASLR weakness: Reducing entropy by 87.5%

A security issue in Linux ASLR implementation which affects some AMD processors has been found. The issue affects to all Linux process even if they are not using shared libraries statically compiled. The problem appears because some mmapped objects VDSO, libraries, etc. are poorly randomized in a...

There is an unspecified vulnerability in pax

pax is a set of archiving tools developed by Debian's QA group that can read and write tar and cpio formats. A security vulnerability exists in pax version 1:20140703. A remote attacker can exploit this vulnerability to write arbitrary files by performing a symlink attack on the archive file...

CVE-2015-1194

pax 1:20140703 allows remote attackers to write to arbitrary files via a symlink attack in an archive...

CVE-2015-1194

pax 1:20140703 allows remote attackers to write to arbitrary files via a symlink attack in an archive...

CVE-2015-1193

Multiple directory traversal vulnerabilities in pax 1:20140703 allow remote attackers to write to arbitrary files via a 1 full pathname or 2 .. dot dot in an archive...

CVE-2015-1193

Multiple directory traversal vulnerabilities in pax 1:20140703 allow remote attackers to write to arbitrary files via a 1 full pathname or 2 .. dot dot in an archive...

DEBIAN-CVE-2015-1193

Multiple directory traversal vulnerabilities in pax 1:20140703 allow remote attackers to write to arbitrary files via a 1 full pathname or 2 .. dot dot in an archive...

UBUNTU-CVE-2015-1193

Multiple directory traversal vulnerabilities in pax 1:20140703 allow remote attackers to write to arbitrary files via a 1 full pathname or 2 .. dot dot in an archive...

CVE-2015-1193

Multiple directory traversal vulnerabilities in pax 1:20140703 allow remote attackers to write to arbitrary files via a 1 full pathname or 2 .. dot dot in an archive...

CVE-2015-1194

pax 1:20140703 allows remote attackers to write to arbitrary files via a symlink attack in an archive...

CVE-2015-1194

pax 1:20140703 allows remote attackers to write to arbitrary files via a symlink attack in an archive...

CVE-2015-1194

CVE-2015-1194 affects pax 1:20140703. The vulnerability allows remote attackers to write arbitrary files via a symlink attack in an archive. Documents do not provide exploitation status, affected platforms beyond pax, or remediation details. No further technical specifics are given in the connect...

CVE-2015-1193

CVE-2015-1193 affects pax 1:20140703. The vulnerability is a set of directory traversal flaws that allow remote attackers to write to arbitrary files via a full pathname or ".." in an archive. The provided documents do not specify affected platforms, versions beyond 1:20140703, exploit status, or...

CVE-2015-1193

Multiple directory traversal vulnerabilities in pax 1:20140703 allow remote attackers to write to arbitrary files via a 1 full pathname or 2 .. dot dot in an archive...

CVE-2015-1193

Multiple directory traversal vulnerabilities in pax 1:20140703 allow remote attackers to write to arbitrary files via a 1 full pathname or 2 .. dot dot in an archive...

CVE-2015-1194

pax 1:20140703 allows remote attackers to write to arbitrary files via a symlink attack in an archive...

Oracle Solaris Critical Patch Update : apr2013_SRU5

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Utility/pax. Supported versions that are affected are 8, 9, 10 and 11. Difficult to exploit vulnerability...

Grsecurity Kernel PaX Local Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22014/info Grsecurity Kernel PaX is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to obtain superuser privileges. A successful attack can result in the complete compromise of the...

PaX 2.6 Kernel Patch Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10264/info PaX for 2.6 series Linux kernels has been reported prone to a local denial of service vulnerability. The issue is reported to present itself when PaX Address Space Layout Randomization Layout ASLR is enabled. T...

Joomla Component PAX Gallery 0.1 - Blind SQL Injection Vulnerability

No description provided by source. ■ Joomla Component PAX Gallery v 0.1 gid = Blind SQL Injection Vulnerability --------------------------------------- AuToR: XaDoS SecurityCode Team Contact M&: xados at hotmail dot it B§g: Blind $ql inJection Note: safe mode = ON Autor script: Tobias Floery...