RedHat Security Advisory RHSA-2009:0264

The remote host is missing updates announced in advisory RHSA-2009:0264. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update addresses the following security issues: a memory leak in keyctl handling. A local user could use this flaw to deplete kernel...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that resolve several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux operating system...

RedHat Security Advisory RHSA-2009:0053

The remote host is missing kernel updates announced in advisory RHSA-2009:0053. These updated packages address the following security issues: a flaw was found in the Asynchronous Transfer Mode ATM subsystem. A local, unprivileged user could use the flaw to listen on the same socket more than once...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise MRG 1.1. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Privilege escalation via PR_SET_PDEATHSIG

Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-controlled parent process death signal PRSETPDEATHSIG...

Unfixed XSS vulnerability at pr-cy.ru

Security researcher MEFISTO, has submitted on 08/09/2007 a cross-site-scripting XSS vulnerability affecting pr-cy.ru, which at the time of submission ranked 100356 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/09/2007. It is currently...

FreeBSD : cvsbug -- race condition (c5c17ead-8f23-11da-8c1d-000e0c2e438a)

Problem description A temporary file is created, used, deleted, and then re-created with the same name. This creates a window during which an attacker could replace the file with a link to another file. While cvsbug1 is based on the send-pr1 utility, this problem does not exist in the version of...

ask_rave <= 0.9 PR (end.php footfile) Remote File Include Vulnerability

No description provided by source. ================================================================== askrave RFI ================================================================== Info:- Scripts: askrave Download: http://rave.jk-digital.com/site/scripts/files/ask09PR.zip Version : 0.9 PR Dork &...

ask_rave <= 0.9 PR (end.php footfile) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ======================================================================= askrave = 0.9 PR end.php footfile Remote File Include Vulnerability =======================================================================...

ask_rave 0.9 PR - 'end.php?footfile' Remote File Inclusion

================================================================== askrave RFI ================================================================== Info:- Scripts: askrave Download: http://rave.jk-digital.com/site/scripts/files/ask09PR.zip Version : 0.9 PR Dork & vuln : download scripts and think :...

JVN#63999575 NEC MultiWriter 1700C web server authentication bypass vulnerability

Impact A remote attacker could change the system configuration of the printer's built-in web server. Solution Products Affected NEC MultiWriter 1700C model number: PR-L1700C Network Expansion Card PR-L1700C-MC For more information, refer to the vendor's website...

cvsbug -- race condition

Problem description A temporary file is created, used, deleted, and then re-created with the same name. This creates a window during which an attacker could replace the file with a link to another file. While cvsbug1 is based on the send-pr1 utility, this problem does not exist in the version of...

CVE-2004-0971

The krb5-send-pr script in the kerberos5 krb5 package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

security flaw

The krb5-send-pr script in the kerberos5 krb5 package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

CVE-2004-0971

The krb5-send-pr script in the kerberos5 krb5 package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

CVE-2004-0971

The krb5-send-pr script in the kerberos5 krb5 package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

CVE-2004-0971: Undefined Security Weakness

The krb5-send-pr script in the kerberos5 krb5 package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

GNU GNATS 3.113.1_6 - Queue-PR Database Command Line Option Buffer Overflow

GNU GNATS 3.113.16 - Queue-PR Database Command Line Option Buffer Overflow source: https://www.securityfocus.com/bid/8232/info A stack overflow vulnerability has been reported for the queue-pr utility of GNATS. The vulnerability occurs due to insufficient checks performed on the arguments to the...

GNU GNATS 3.113.1_6 - Queue-PR Database Command Line Option Buffer Overflow

source: https://www.securityfocus.com/bid/8232/info A stack overflow vulnerability has been reported for the queue-pr utility of GNATS. The vulnerability occurs due to insufficient checks performed on the arguments to the '-d' commandline option. Successful exploitation may result in the executio...

GNU GNATS 3.0 02 - PR-Edit Command Line Option Heap Corruption

GNU GNATS 3.0 02 - PR-Edit Command Line Option Heap Corruption source: https://www.securityfocus.com/bid/8003/info A heap overflow vulnerability has been reported for the pr-edit utility of GNATS. The vulnerability occurs due to insufficient checks performed on the arguments to the '-d' commandli...