3386 matches found
Code injection
Linux kernel 2.6 before 2.6.15.5 allows local users to obtain sensitive information via a crafted XFS ftruncate call, which may return stale data...
CVE-2006-0554: Undefined Security Weakness
Linux kernel 2.6 before 2.6.15.5 allows local users to obtain sensitive information via a crafted XFS ftruncate call, which may return stale data...
Mandrake Linux Security Advisory : kernel (MDKSA-2005:235)
Multiple vulnerabilities in the Linux 2.6 kernel have been discovered and corrected in this update : A stack-based buffer overflow in the sendmsg function call in versions prior to 2.6.13.1 allow local users to execute arbitrary code by calling sendmsg and modifying the message contents in anothe...
CVE-2005-3055: Improper Input Validation
Linux kernel 2.6.8 to 2.6.14-rc2 allows local users to cause a denial of service kernel OOPS via a userspace process that issues a USB Request Block URB to a USB device and terminates before the URB is finished, which leads to a stale pointer reference...
security flaw
KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files...
PT-2004-1773 · Kde · Kde
Name of the Vulnerable Software and Affected Versions: KDE versions prior to 3.3.0 Description: The issue arises from improper handling of certain symbolic links that point to 'stale' locations. This could allow local users to create or truncate arbitrary files. Recommendations: For versions prio...