8962 matches found
Samba NMBD登录请求远程溢出漏洞
BUGTRAQ ID: 26454 CVECAN ID: CVE-2007-4572 Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 Samba的nmbd在处理GETDC登录服务器请求时存在缓冲器溢出漏洞，可能导致非预期的服务器行为。 如果远程攻击者发送了畸形的GETDC请求的话就可以触发这个漏洞，但无法利用这个溢出执行任意指令，在大多数情况下也不会导致Samba服务器崩溃。仅在将Samba服务器配置为主或备份域控制器时才会出现这个漏洞。 Samba 3.0.0 - 3.0.26a 临时解决方法：...
openssh security update
CentOS Errata and Security Advisory CESA-2007:0703 Updated openssh packages that fix two security issues and various bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol...
Perl Unicode规则表达式缓冲区溢出漏洞
Perl是一款功能强大的编程语言。 Perl的规则表达式引擎存在一个缺陷，远程攻击者可以利用漏洞以Perl进程权限执行任意指令。 在处理Unicode规则表达式时存在一个缓冲区溢出，攻击者构建特殊的输入到规则表达式，可导致Perl不正确分配内存，导致以运行Perl进程的用户进程权限执行任意指令。 RedHat Enterprise Linux Desktop v.5 client RedHat Enterprise Linux WS 4 RedHat Enterprise Linux WS 3 RedHat Enterprise Linux v. 5 server RedHat...
Ubuntu 6.06 LTS : redhat-cluster-suite vulnerability (USN-489-2)
USN-489-1 fixed vulnerabilities in the Linux kernel. This update provides the corresponding fixes for the redhat cluster suite kernel sources. A flaw was discovered in the cluster manager. A remote attacker could connect to the DLM port and block further DLM operations. CVE-2007-3380. Note that...
Ubuntu 7.04 : redhat-cluster-suite vulnerability (USN-476-1)
Fabio Massimo Di Nitto discovered that cman did not correctly validate the size of client messages. A local user could send a specially crafted message and execute arbitrary code with cluster manager privileges or crash the manager, leading to a denial of service. Note that Tenable Network Securi...
xpdf security update
CentOS Errata and Security Advisory CESA-2007:1029 Updated xpdf packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System-based viewer...
CUPS IPP标签远程栈溢出漏洞
BUGTRAQ ID: 26268 CVECAN ID: CVE-2007-4351 Common Unix Printing System CUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS的cups/ipp.c文件中的ippReadIO函数在处理IPP（Internet打印协议）标签时存在栈溢出漏洞，远程攻击者可能利用此漏洞控制服务器。...
RHEL 5 : cups (RHSA-2007:1020)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:1020 advisory. - cups boundary error CVE-2007-4351 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...
IE和Firefox浏览器Digest认证请求拆分漏洞
BUGTRAQ ID: 23668 CVECAN ID: CVE-2007-2292 IE和Firefox都是流行的WEB浏览器。 IE和Firefox在处理Digest认证方式时存在漏洞，可能导致验证失败。 如果用户使用Digest认证通过HTTP请求登录到网站的话，Firefox和IE可能无法正确地验证用户ID。恶意的网页可能在用户ID中包含有换行字符（%0a）注入头数据，如果用户通过代理进行连接的话代理就可能将认证请求解释为两个独立的请求，导致注入任意HTTP头。 Microsoft Internet Explorer 7.0.5730.11 Mozilla Thunderbird...
Mozilla Firefox 2.0.0.7多个远程安全漏洞
BUGTRAQ ID: 26132 CVECAN ID: CVE-2007-5338,CVE-2007-5337,CVE-2007-5334,CVE-2007-5340,CVE-2007-5339 Mozilla Firefox是开放源码的WEB浏览器。 Firefox处理某些畸形Web内容的方式存在几个漏洞，包含有恶意内容的网页可能导致Firefox崩溃或以运行Firefox用户的权限执行任意代码。 使用XUL标记语言所编写的网页可能会隐藏窗口的标题栏，攻击者可以利用这个特性创建诱骗网页执行钓鱼攻击。 在支持gnome-vfs的Linux机器上，Firefox可以使用smb:和sftp...
Linux Kernel eHCA驱动物理地址空间信息泄露漏洞
Linux是一款开放源代码的操作系统。 Linux包含的eHCA驱动在映射用户空间资源时存在问题，本地攻击者可以利用漏洞获得物理地址等敏感信息。 部分驱动包含的资源映射到用户空间的大小为4K，如果内核配置使用64K的页，那么在映射过程中会超过60K大小的物理地址空间映射到用户空间，导致敏感信息泄露。 RedHat Enterprise Linux Desktop v.5 client RedHat Enterprise Linux v. 5 server Linux kernel 2.6.18 .4 Linux kernel 2.6.18 .3 Linux kernel 2.6.18 ....
OpenSSH LINUX_AUDIT_RECORD_EVENT远程记录注入漏洞
OpenSSH是一款开放源码的SSH协议的实现。 OpenSSH存在设计问题，远程攻击者可以利用漏洞注入非法数据到日志条目中，导致攻击被隐藏。 目前没有详细漏洞细节提供。 RedHat Fedora Core6 OpenSSH OpenSSH 4.3p2 Fedora发布了安全公告并修补了此漏洞： http://www.openssh.org/...
OpenSSL DTLS远程堆溢出漏洞
BUGTRAQ ID: 26055 CVECAN ID: CVE-2007-4995 OpenSSL是一种开放源码的SSL实现，用来实现网络通信的高强度加密，现在被广泛地用于各种网络应用程序中。 OpenSSL的DTLS支持中存在漏洞，攻击者可以创建能够触发堆溢出的恶意客户端或服务器，导致执行任意指令。 请注意这个漏洞仅影响使用DTLS的应用程序。 OpenSSL Project OpenSSL 0.9.8f OpenSSL Project OpenSSL 0.9.8 RedHat Linux 5.0 OpenSSL Project ---------------...
RHEL 4 : kernel (RHSA-2007:0937)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:0937 advisory. - x8664 syscall vulnerability CVE-2007-4573 Note that Nessus has not tested for this issue but has instead relied only on the application's...
CheckPoint Secure Platform Multiple Buffer Overflows
Hi all, we have published a paper about CheckPoint Firewall-1 vulnerabilities. The platform tested is the Secure Platform R60. We have found many buffer overflows. Most of them are located in command line utilities that can be exploited locally. A very few of them maybe can be exploited remotely,...
RHEL 4 / 5 : php (RHSA-2007:0890)
The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2007:0890 advisory. - gd / php-gd ImageCreateFromPng infinite loop caused by truncated PNG CVE-2007-2756 - php chunksplit integer overflow CVE-2007-2872 - p...
CVE-2007-0004
The NFS client implementation in the kernel in Red Hat Enterprise Linux RHEL 3, when a filesystem is mounted with the noacl option, checks permissions for the open system call via vfspermission mode bits data rather than an NFS ACCESS call to the server, which allows local client processes to...
Linux Kernel CIFS本地特权提升漏洞
Linux是一款开放源代码的操作系统。 Linux包含的CIFS文件系统不正确处理某个进程的umask值，本地攻击者可以利用漏洞提升特权。 目前没有详细漏洞细节提供。 RedHat Enterprise Linux Desktop v.5 client RedHat Enterprise Linux v. 5 server Linux kernel 2.6.23 -rc2 Linux kernel 2.6.23 -rc1 Linux kernel 2.6.22 1 Linux kernel 2.6.22 .6 Linux kernel 2.6.22 .5 Linux kernel...
OpenOffice TIFF文件解析缓冲区溢出漏洞
OpenOffice是一款开放源代码的文字处理应用程序。 OpenOffice处理TIFF文件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 构建恶意的TIFF文件，诱使用户打开可触发漏洞，目前没有详细漏洞细节提供。 OpenOffice OpenOffice 2.3 OpenOffice OpenOffice 2.2.1 OpenOffice OpenOffice 2.0.4 OpenOffice OpenOffice 1.1.3 + Gentoo Linux + RedHat Fedora Core3 + Ubuntu Ubuntu Linux 5.0 4...