Linux Kernel < 2.6.36-rc6 pktcdvd Kernel Memory Disclosure

Exploit for linux platform in category local exploits ========================================================== Linux Kernel http://jon.oberheide.org Information: https://bugzilla.redhat.com/showbug.cgi?id=638085 The PKTCTRLCMDSTATUS device ioctl retrieves a pointer to a pktcdvddevice from the...

Linux Kernel 2.6.36-rc6 (RedHat Ubuntu 10.04) - pktcdvd Kernel Memory Disclosure

Linux Kernel 2.6.36-rc6 RedHat Ubuntu 10.04 - pktcdvd Kernel Memory Disclosure / cve-2010-3437.c Linux Kernel http://jon.oberheide.org Information: https://bugzilla.redhat.com/showbug.cgi?id=638085 The PKTCTRLCMDSTATUS device ioctl retrieves a pointer to a pktcdvddevice from the global pktdevs...

Linux Kernel < 2.6.36-rc6 (RedHat / Ubuntu 10.04) - 'pktcdvd' Kernel Memory Disclosure

/ cve-2010-3437.c Linux Kernel http://jon.oberheide.org Information: https://bugzilla.redhat.com/showbug.cgi?id=638085 The PKTCTRLCMDSTATUS device ioctl retrieves a pointer to a pktcdvddevice from the global pktdevs array. The index into this array is provided directly by the user and is a signed...

Linux Kernel 2.6.27 2.6.36 (RedHat x86-64) - compat Local Privilege Escalation

Linux Kernel 2.6.27 2.6.36 RedHat x86-64 - compat Local Privilege Escalation / Ac1dB1tch3z Vs Linux Kernel x8664 0day Today is a sad day.. R.I.P. Tue, 29 Apr 2008 / Tue, 7 Sep 2010 a bit of history: MCASTMSFILTER Compat mode bug found... upon commit! 2 year life on this one author David L Stevens...

Linux Kernel 2.6.27 < 2.6.36 (RedHat x86-64) - 'compat' Local Privilege Escalation

/ Ac1dB1tch3z Vs Linux Kernel x8664 0day Today is a sad day.. R.I.P. Tue, 29 Apr 2008 / Tue, 7 Sep 2010 a bit of history: MCASTMSFILTER Compat mode bug found... upon commit! 2 year life on this one author David L Stevens Tue, 29 Apr 2008 10:23:22 +0000 03:23 -0700 committer David S. Miller Tue, 2...

RedHat Update for firefox RHSA-2010:0681-01

Check for the Version of firefox OpenVAS Vulnerability Test RedHat Update for firefox RHSA-2010:0681-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora 12 : nano-2.0.9-7.fc12 (2010-13157)

CVE-2010-1160 CVE-2010-1161 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Webkit Floating Point Datatype Remote Code Execution Vulnerability

Description WebKit is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks will cause denial-of-service conditions. Versions prior to Safari 5.0.2 and Safari 4.1.2 are...

CVE-2010-2532

lxsession-logout in lxsession in LXDE, as used on SUSE openSUSE 11.3 and other platforms, does not lock the screen when the Suspend or Hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action. NOTE: there is no...

vBulletin 4.0.6 - Danial Of Service Exploit (redhat)

No description provided by source. Author : KnocKout Thanks : DaiMon,BARCOD3 Contact : [email protected] Tested on : redhat vBulletin 4.0.6 - Danial Of Service Exploit for RedHat !/usr/bin/perl use IO::Socket; print "\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n"; print "+ vBulletin 4.0.6...

Tomcat UTF-8 Directory Traversal Vulnerability

This module tests whether a directory traversal vulnerability is present in versions of Apache Tomcat 4.1.0 - 4.1.37, 5.5.0 - 5.5.26 and 6.0.0 - 6.0.16 under specific and non-default installations. The connector must have allowLinking set to true and URIEncoding set to UTF-8. Furthermore, the...

Linux kernel 2.6.x KVM Intel VT-x扩展空指针引用拒绝服务漏洞

BUGTRAQ ID: 42582 CVE ID: CVE-2010-0435 Linux Kernel是开放源码操作系统Linux所使用的内核。 主机系统上的处理器启用了Intel VT-x扩展时存在空指针引用漏洞。如果模拟器受骗模拟了mov to/from DR指令，由于没有初始化kvmx86ops-set|getdr，可能会触发这个空指针引用，导致主机崩溃。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： https://patchwork.kernel.org/patch/95725/...

CVE-2010-2531

The varexport function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certain fatal errors occur, even if displayerrors is off, which allows remote attackers to obtain sensitive information by causing the application to exceed limits for memory, execution...

Cacti 0.8.7 (RedHat High Performance Computing [HPC]) - 'utilities.php?Filter' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42575/info Cacti is prone to cross-site-scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the contex...

RedHat Update for wireshark RHSA-2010:0625-01

Check for the Version of wireshark OpenVAS Vulnerability Test RedHat Update for wireshark RHSA-2010:0625-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Linux kernel 2.6.x XDR实现缓冲区溢出漏洞

BUGTRAQ ID: 42249 CVE ID: CVE-2010-2521 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel实现NFS 4版的服务器端XDR时存在缓冲区溢出漏洞，本地网络中的攻击者可以向NFSv4服务器发送特制的超大复合请求导致内核忙碌拒绝服务或执行代码。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Linux Kernel CIFS实现CIFSSMBWrite()函数拒绝服务漏洞

BUGTRAQ ID: 42242 CVE ID: CVE-2010-2248 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel CIFS实现的CIFSSMBWrite函数中存在漏洞，远程攻击者可以通过向目标CIFS客户端发送特制的SMB响应报文导致内核忙碌拒绝服务。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

RedHat Update for kernel RHSA-2010:0606-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2010:0606-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

JBoss Seam参数化EL表达式远程代码执行漏洞

BUGTRAQ ID: 41994 CVECAN ID: CVE-2010-1871 JBoss Seam是一个Java EE5框架，把JSF与EJB3.0组件合并在一起，从而为开发基于Web的企业应用程序提供一个最新的模式。 JBoss Seam处理某些参数化JBoss EL表达式的方式存在输入过滤漏洞。如果远程攻击者能够诱骗通过认证的JBoss Seam用户访问特制的网页，就可能导致执行任意代码。 JBoss Seam 2.0.2 SP1 JBoss Seam 2.0.2 JBoss Seam 2.0 厂商补丁： RedHat ------...

RHEL 5 : pcsc-lite (RHSA-2010:0533)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0533 advisory. - pcsc-lite: Privilege escalation via specially-crafted client to PC/SC Smart Card daemon messages CVE-2009-4901, CVE-2010-0407 Note that...