580 matches found
Ubuntu 9.10 / 10.04 LTS / 10.10 : linux, linux-ec2 vulnerabilities (USN-1041-1)
Ben Hawkes discovered that the Linux kernel did not correctly filter registers on 64bit kernels when performing 32bit system calls. On a 64bit system, a local attacker could manipulate 32bit system calls to gain root privileges. CVE-2010-3301 Dan Rosenberg discovered that the btrfs filesystem did...
kvm: emulator privilege escalation
The x86 emulator in KVM 83 does not use the Current Privilege Level CPL and I/O Privilege Level IOPL in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the guest OS by leveraging access to a 1 IO...
memcached -- memcached stats maps Information Disclosure Weakness
Secunia reports: A weakness has been reported in memcached, which can be exploited by malicious people to disclose system information. The weakness is caused due to the application disclosing the content of /proc/self/maps if a stats maps command is received. This can be exploited to disclose e.g...
Jose Nazario on botnets and DDoS defense
Few people in the world know more about the internal workings of botnets, DDoS attacks and defense than Jose Nazario, a senior security researcher at Arbor Networks. Don’t miss his thoughts on why DDoS attacks are more prevalent in some regions than others and how to react if you’re attacked...
Debian Security Advisory DSA 1588-2 (linux-2.6)
The remote host is missing an update to linux-2.6 announced via advisory DSA 1588-2. OpenVAS Vulnerability Test $Id: deb15882.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1588-2 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
[SECURITY] [DSA 1588-2] New Linux 2.6.18 packages fix several vulnerabilities
---------------------------------------------------------------------- Debian Security Advisory DSA-1588-2 [email protected] http://www.debian.org/security/ dann frazier May 30, 2008 http://www.debian.org/security/faq - ----------------------------------------------------------------------...
Debian DSA-1588-1 : linux-2.6 - denial of service
Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-6712 Johannes Bauer discovered an integer overflow condition in the hrtimer subsystem on 64-bit...
[SECURITY] [DSA 1588-1] New Linux 2.6.18 packages fix several vulnerabilities
---------------------------------------------------------------------- Debian Security Advisory DSA-1588-1 [email protected] http://www.debian.org/security/ dann frazier May 27, 2008 http://www.debian.org/security/faq - ----------------------------------------------------------------------...
Debian Security Advisory DSA 360-1 (xfstt)
The remote host is missing an update to xfstt announced via advisory DSA 360-1. OpenVAS Vulnerability Test $Id: deb3601.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 360-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
LTC36188-Don't allow the stack to grow into hugetlb reserved regions
mm/mmap.c in the hugetlb kernel, when run on PowerPC systems, does not prevent stack expansion from entering into reserved kernel page memory, which allows local users to cause a denial of service OOPS via unspecified vectors...
LTC36188-Don't allow the stack to grow into hugetlb reserved regions
mm/mmap.c in the hugetlb kernel, when run on PowerPC systems, does not prevent stack expansion from entering into reserved kernel page memory, which allows local users to cause a denial of service OOPS via unspecified vectors...
Sun Solaris FIFO filesystem information leak
Integer overflow on IOCTL processing allows large memory regions reading...
LTC36188-Don't allow the stack to grow into hugetlb reserved regions
mm/mmap.c in the hugetlb kernel, when run on PowerPC systems, does not prevent stack expansion from entering into reserved kernel page memory, which allows local users to cause a denial of service OOPS via unspecified vectors...
Apple QTJava toQTPointer() code execution
Unsafe implementation of Java method allows to overwrite memory regions...
Linux Kernel 2.4/2.6 bluez Local Root Privilege Escalation Exploit (update)
Exploit for linux platform in category local exploits =========================================================================== Linux Kernel 2.4/2.6 bluez Local Root Privilege Escalation Exploit update =========================================================================== / Due to many...
Linux Kernel 2.4/2.6 bluez Local Root Privilege Escalation Exploit (update)
No description provided by source. / Due to many responses i've improved the exploit to cover more systems! ONGBAK v0.9 october 24th 05 """""""""""""""""""""""""""""""""""" o universal "shellcode" added o try to use all possible memory regions o bugfixes qobaiashi@voyager:/w00nf/kernelsploit...
Linux Kernel 2.4.x/2.6.x - 'Bluez' BlueTooth Signed Buffer Index Privilege Escalation (2)
/ Due to many responses i've improved the exploit to cover more systems! ONGBAK v0.9 october 24th 05 """""""""""""""""""""""""""""""""""" o universal "shellcode" added o try to use all possible memory regions o bugfixes qobaiashi@voyager:/w00nf/kernelsploit ./ongbak -100222 -|-bluez local root...
Multiple xfstt bugs
Buffer overflows, memory regions reading...
Electrasoft 32Bit FTP 9.49.1 - Client Long Server Banner Buffer Overflow
source: https://www.securityfocus.com/bid/6764/info It has been reported that Electrasoft 32Bit FTP client may be prone to a buffer overflow condition. This issue is due to the client not implementing bounds checking on banner data copied into local memory buffers. It may be possible for remote...
