2066 matches found
proc File - Descriptors Directory Permissions Bypass
proc File - Descriptors Directory Permissions Bypass Hi! This is forward from lkml, so no, I did not invent this hole. Unfortunately, I do not think lkml sees this as a security hole, so... Jamie Lokier said: a the current permission model under /proc/PID/fd has a security hole which Jamie is...
proc File Descriptors Directory Permissions bypass
Exploit for unknown platform in category local exploits ================================================== proc File Descriptors Directory Permissions bypass ================================================== Title: proc File Descriptors Directory Permissions bypass CVE-ID: OSVDB-ID: Author: Pave...
/proc Filesystem Directory Permission Bypass
Hi! This is forward from lkml, so no, I did not invent this hole. Unfortunately, I do not think lkml sees this as a security hole, so... Jamie Lokier said: a the current permission model under /proc/PID/fd has a security hole which Jamie is worried about I believe its bugtraq time. Being able to...
proc File Descriptors Directory Permissions bypass
No description provided by source. Hi! This is forward from lkml, so no, I did not invent this hole. Unfortunately, I do not think lkml sees this as a security hole, so... Jamie Lokier said: a the current permission model under /proc/PID/fd has a security hole which Jamie is worried about I belie...
HTMLDOC 1.8.27 - .html File Handling Stack Buffer Overflow
HTMLDOC 1.8.27 - .html File Handling Stack Buffer Overflow / HTMLDOC 'html' File Handling Remote Stack Buffer Overflow Exploit Linux Reference: https://www.securityfocus.com/bid/35727 Tested on HTMLDOC 1.8.27 on Debian 5.0 +ASLR Credit: ANTHRAX666 for finding the vulnerability Coded by Pankaj Koh...
Fedora Core 11 FEDORA-2009-9044 (kernel)
The remote host is missing an update to kernel announced via advisory FEDORA-2009-9044. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
CVE-2009-2691
The mmformaps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read 1 maps and 2 smaps files under proc/ via vectors related to ELF loading, a setuid process, and a race condition...
CVE-2009-2691
The mmformaps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read 1 maps and 2 smaps files under proc/ via vectors related to ELF loading, a setuid process, and a race condition...
CVE-2009-2691
CVE-2009-2691 affects the Linux kernel (2.6.30.4 and earlier) via the mm_for_maps path in fs/proc/base.c, allowing a local attacker to read maps and smaps files under /proc during ELF loading for a setuid process, due to a race condition. Impact is information exposure (maps/smaps); exploitation ...
Linux Kernel 'fs/proc/base.c'本地信息泄漏漏洞
Bugraq ID: 36019 CVE ID：CVE-2009-2691 Linux是一款开放源代码的操作系统。 fs/proc/base.c文件包含的"mmformaps"函数存在错误，攻击者可以利用这个漏洞在setuid进程启动时从"/proc"文件系统中获得"maps"和"smaps"文件的内容信息。造成敏感信息泄漏。 Linux kernel 2.6.31 -rc3 + Trustix Secure Enterprise Linux 2.0 + Trustix Secure Linux 2.2 + Trustix Secure Linux 2.1 + Trustix Secur...
CVE-2009-2691
The mmformaps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read 1 maps and 2 smaps files under proc/ via vectors related to ELF loading, a setuid process, and a race condition...
Ordinary users by udev vulnerability to elevate to root permissions demo-vulnerability warning-the black bar safety net
Recently exposed by the udev permissions hint of vulnerability, as long as with normal user permissions, you can elevate to root privileges, the experiment a handful, really easy to upgrade. Put the following code saved as test. sh file !/ bin/sh Linux 2.6 bug found by Sebastian Krahmer lame splo...
Race Condition
Overview Affected versions of this package are vulnerable to Race Condition. Race condition in PulseAudio 0.9.9, 0.9.10, and 0.9.14 allows local users to gain privileges via vectors involving creation of a hard link, related to the application setting LDBINDNOW to 1, and then calling execv on the...
CVE-2009-2387
Unspecified vulnerability in the proc filesystem in Sun OpenSolaris snv49 through snv109 allows local users to cause a denial of service deadlock and panic via unknown vectors, related to the ldtrewritesyscall function...
Design/Logic Flaw
Unspecified vulnerability in the proc filesystem in Sun OpenSolaris snv49 through snv109 allows local users to cause a denial of service deadlock and panic via unknown vectors, related to the ldtrewritesyscall function...
CVE-2009-2387
Unspecified vulnerability in the proc filesystem in Sun OpenSolaris snv49 through snv109 allows local users to cause a denial of service deadlock and panic via unknown vectors, related to the ldtrewritesyscall function...
kernel security and bug fix update
2.6.9-89.0.3.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race avoidanc...
RHEL 5 : kernel (RHSA-2009:1106)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1106 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security fixes: several flaws were found in the way th...
kernel security and bug fix update
2.6.18-128.1.14.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki,Guru Anbalagane orabug 6045759 - MM shrink zone patch John Sobecki,Chris Mason orabug 6086839 - NET Add xen pv/bonding netconsole support Tina yang orabug 6993043 bz 7258 - nfs convert ENETUNREACH to ENOTCONN Guru...
Linux Kernel 2.6.x (Sparc64) - '/proc/iomem' Local Denial of Service
source: https://www.securityfocus.com/bid/35415/info The Linux kernel is prone to a local denial-of-service vulnerability that attackers can exploit to cause an affected computer to crash. This issue affects the Linux kernel 2.6.22-rc1 through 2.6.29 on the sparc64 architecture. The following...