622 matches found
CVE-2005-2800: Undefined Security Weakness
Memory leak in the seqfile implementation in the SCSI procfs interface sg.c in Linux kernel 2.6.13 and earlier allows local users to cause a denial of service memory consumption via certain repeated reads from the /proc/scsi/sg/devices file, which is not properly handled when the next iterator...
CVE-2002-1674
procfs on FreeBSD before 4.5 allows local users to cause a denial of service kernel panic by removing a file that the fstatfs function refers to...
CVE-2002-1674
CVE-2002-1674 affects FreeBSD procfs prior to 4.5. The vulnerability arises when a local user removes a file that the kernel’s fstatfs function refers to, potentially causing a kernel panic (local DoS). The provided documents do not include concrete exploit details or remediation steps.
CVE-2002-1674: Undefined Security Weakness
procfs on FreeBSD before 4.5 allows local users to cause a denial of service kernel panic by removing a file that the fstatfs function refers to...
CVE-2004-1066
The CVE-2004-1066 issue affects FreeBSD’s procfs (procfs(5)) and linprocfs (linprocfs(5)) on FreeBSD 4.x/5.x. The vulnerability arises from dereferencing a processor argument vector without proper validation when reading /proc/curproc/cmdline (procfs) or /proc/self/cmdline (linprocfs). Impact is ...
CVE-2004-1066: Undefined Security Weakness
The cmdline pseudofiles in 1 procfs on FreeBSD 4.8 through 5.3, and 2 linprocfs on FreeBSD 5.x through 5.3, do not properly validate a process argument vector, which allows local users to cause a denial of service panic or read portions of kernel memory. NOTE: this candidate might be SPLIT into 2...
[Full-Disclosure] FreeBSD Security Advisory FreeBSD-SA-04:17.procfs
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-04:17.procfs Security Advisory The FreeBSD Project Topic: Kernel memory disclosure in procfs and linprocfs Category: core Module: sys Announced: 2004-12-01 Credit...
FreeBSD procfs information leak
Kernel memory disclosure, DoS...
[UNIX] Linux Virtual Server/Secure Context Procfs Shared Permissions Flaw
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
OpenBSD kernel information leak
It's possible to read chunks from kernel memory via procfs...
[UNIX] OpenBSD Procfs Memory Disclosure Vulnerability
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
CVE-2004-0482
The CVE-2004-0482 issue affects OpenBSD 3.5 and earlier in procfs components (procfs_cmdline.c, procfs_fpregs.c, procfs_linux.c, procfs_regs.c, procfs_status.c, procfs_subr.c) due to multiple integer overflows. This enables local users to read sensitive kernel memory and potentially perform other...
CVE-2004-0482: Undefined Security Weakness
Multiple integer overflows in 1 procfscmdline.c, 2 procfsfpregs.c, 3 procfslinux.c, 4 procfsregs.c, 5 procfsstatus.c, and 6 procfssubr.c in procfs for OpenBSD 3.5 and earlier allow local users to read sensitive kernel memory and possibly perform other unauthorized activities...
PT-2004-1600 · Openbsd · Openbsd
Name of the Vulnerable Software and Affected Versions: OpenBSD versions 3.5 and earlier Description: The issue is related to multiple integer overflows in several procfs files for OpenBSD, including procfs cmdline.c, procfs fpregs.c, procfs linux.c, procfs regs.c, procfs status.c, and procfs...
CVE-2003-0937
SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the "as" address space file for a process ID PID by obtaining a procfs file descriptor for the file and calling execve on a setuid or setgid program, which leaves the descriptor open to the user...
CVE-2003-0937: Undefined Security Weakness
SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the "as" address space file for a process ID PID by obtaining a procfs file descriptor for the file and calling execve on a setuid or setgid program, which leaves the descriptor open to the user...
PT-2003-1958 · Sco · Open Unix +1
Name of the Vulnerable Software and Affected Versions: SCO UnixWare versions 7.1.1, 7.1.3 Open UNIX version 8.0.0 Description: The issue allows local users to bypass protections for the address space file for a process ID by obtaining a procfs file descriptor for the file and calling execve on a...
UnixWare privilege escalation
Problems with procfs lead to local privilege escalation...
Insecure handling of procfs descriptors in UnixWare 7.1.1, 7.1.3 and Open UNIX 8.0.0 can lead to local privilege escalation.
----------------------------------------------------------------------- Texonet Security Advisory 20031024 ----------------------------------------------------------------------- Advisory ID : TEXONET-20031024 Authors : Joel Soderberg and Christer Oberg Issue date : Friday, October 24, 2003 Publi...