Debian DSA-1128-1 : heartbeat - permission error

Yan Rong Ge discovered that wrong permissions on a shared memory page in heartbeat, the subsystem for High-Availability Linux could be exploited by a local attacker to cause a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

security flaw

Linux kernel 2.4.x and 2.6.x up to 2.6.16 allows local users to bypass IPC permissions and modify a readonly attachment of shared memory by using mprotect to give write permission to the attachment. NOTE: some original raw sources combined this issue with CVE-2006-1524, but they are different bug...

Intel® PROSet/Wireless Software Local Information Disclosure

Intel® PROSet/Wireless Software Local Information Disclosure Summary: A security vulnerability exists in the Intel® PROSet/Wireless Software PROSet application because of insecure usage of shared memory allowing a person having access to the user's computer or malicious software installed on the...

[SECURITY] [DSA 1128-1] New heartbeat packages fix local denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1128-1 [email protected] http://www.debian.org/security/ Martin Schulze July 28th, 2006 http://www.debian.org/security/faq -...

USN-326-1: heartbeat vulnerability

Yan Rong Ge discovered that heartbeat did not set proper permissions for an allocated shared memory segment. A local attacker could exploit this to render the heartbeat service unavailable Denial of Service...

[Full-disclosure] Heartbeat Shared Memory - Local Denial of Service Exploit

Hello! Follow in attachment an exploit to Heartbeat Insecure Shared Memory Vulnerability: https://vulners.com/cve/CVE-2006-3815 It?s very simple to exploit this fail. Best Regards, Nash Leon. Intruders Tiger Team Security http://www.intruders.org.br/ Novidade no Yahoo! Mail: receba alertas de nov...

Linux-HA Heartbeat 1.2.3/2.0.x - Insecure Default Permissions on Shared Memory

// source: https://www.securityfocus.com/bid/19186/info Since Linux-HA Heartbeat has insecure default permissions set on shared memory, local attackers may be able to cause a denial of service. Exploitation would most likely result in a system crash, loss of data, and resource exhaustion, leading...

Linux-HA Heartbeat 1.2.32.0.x - Insecure Default Permissions on Shared Memory

Linux-HA Heartbeat 1.2.32.0.x - Insecure Default Permissions on Shared Memory // source: https://www.securityfocus.com/bid/19186/info Since Linux-HA Heartbeat has insecure default permissions set on shared memory, local attackers may be able to cause a denial of service. Exploitation would most...

CVE-2006-3815

heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local users to cause an unspecified denial of service via unknown vectors, possibly during a short time window on startup...

DEBIAN-CVE-2006-3815

heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local users to cause an unspecified denial of service via unknown vectors, possibly during a short time window on startup...

CVE-2006-3815

heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local users to cause an unspecified denial of service via unknown vectors, possibly during a short time window on startup...

CVE-2006-3815

heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local users to cause an unspecified denial of service via unknown vectors, possibly during a short time window on startup...

CVE-2006-3815

heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local users to cause an unspecified denial of service via unknown vectors, possibly during a short time window on startup...

CVE-2006-3815

CVE-2006-3815 affects the heartbeat component used by the High-Availability Linux stack. The vulnerability arises from insecure permissions set on an allocated shared memory segment (shmget) in heartbeat.c prior to version 2.0.6, enabling a local attacker to cause a denial of service. OpenVAS, De...

Intel Wireless Service (s24evmon.exe) Shared Memory Exploit

No description provided by source. /////////////////////////////////////////////////////////////////////// //// S24EvMon.exe Intel Wireless Management Service KEY Hunter //// Rubén Santamarta //// [email protected] //// www.reversemode.com //// 28/04/2006...

Intel Wireless Service - s24evmon.exe Shared Memory

Intel Wireless Service - s24evmon.exe Shared Memory /////////////////////////////////////////////////////////////////////// //// S24EvMon.exe Intel Wireless Management Service KEY Hunter //// Rubén Santamarta //// [email protected] //// www.reversemode.com //// 28/04/2006...

Intel Wireless Service - 's24evmon.exe' Shared Memory

/////////////////////////////////////////////////////////////////////// //// S24EvMon.exe Intel Wireless Management Service KEY Hunter //// Rubén Santamarta //// [email protected] //// www.reversemode.com //// 28/04/2006 /////////////////////////////////////////////////////////////////////// ...

Intel wireless service s24evmon.exe information leak

S24EventManagerSharedMemory shared memory sections is used to store critical information, such as WEP keys and passwords without access control...

Intel wireless service s24evmon.exe confidential information disclosure.

S24EvMon.exe is a service which is part at least of the Intel PROset/Wireless software. This application is provided by Intel in order to support intel Wireless Devices based on Spectrum 24 chipsets. This service uses a shared memory section which is created without the proper security descriptor...

CVE-2006-2071

Linux kernel 2.4.x and 2.6.x up to 2.6.16 allows local users to bypass IPC permissions and modify a readonly attachment of shared memory by using mprotect to give write permission to the attachment. NOTE: some original raw sources combined this issue with CVE-2006-1524, but they are different bug...