kernel: missing boundary checks in syscall/syscall32_nopage()

Tavis Ormandy reported missing boundary checks in the Virtual Dynamic Shared Objects vDSO implementation. This could allow a local unprivileged user to cause a denial of service or privilege escalation. CVE-2008-3527, Important...

Linux Kernel proc_do_xprt()函数本地栈溢出漏洞

BUGTRAQ ID: 31937 CVECAN ID: CVE-2008-3911 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的net/sunrpc/sysctl.c文件中的procdoxprt函数没有检查某些从用户域所获得缓冲区的长度，本地攻击者可以通过对/proc/sys/sunrpc/transports文件特制的读系统调用触发栈溢出，导致执行任意指令。 Linux kernel 2.6.26.3 Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

linux/x86 system-beep shellcode 45 bytes

Exploit for linux/x86 platform in category shellcode ======================================== linux/x86 system-beep shellcode 45 bytes ======================================== / By Thomas Rinsma 16 apr. 2008 Shellcode makes system speaker beep once, 45 bytes: ; int fd = open"/dev/tty10", ORDONLY;...

CVE-2008-3531

Stack-based buffer overflow in sys/kern/vfsmount.c in the kernel in FreeBSD 7.0 and 7.1, when vfs.usermount is enabled, allows local users to gain privileges via a crafted 1 mount or 2 nmount system call, related to copying of "user defined data" in "certain error conditions."...

CVE-2008-3911

The procdoxprt function in net/sunrpc/sysctl.c in the Linux kernel 2.6.26.3 does not check the length of a certain buffer obtained from userspace, which allows local users to overflow a stack-based buffer and have unspecified other impact via a crafted read system call for the...

CVE-2008-3911

The procdoxprt function in net/sunrpc/sysctl.c in the Linux kernel 2.6.26.3 does not check the length of a certain buffer obtained from userspace, which allows local users to overflow a stack-based buffer and have unspecified other impact via a crafted read system call for the...

CVE-2008-3911

The procdoxprt function in net/sunrpc/sysctl.c in the Linux kernel 2.6.26.3 does not check the length of a certain buffer obtained from userspace, which allows local users to overflow a stack-based buffer and have unspecified other impact via a crafted read system call for the...

FreeBSD Security Advisory (FreeBSD-SA-08:03.sendfile.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-08:03.sendfile.asc ADV FreeBSD-SA-08:03.sendfile.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008...

FreeBSD Security Advisory (FreeBSD-SA-04:03.jail.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:03.jail.asc ADV FreeBSD-SA-04:03.jail.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

FreeBSD Security Advisory (FreeBSD-SA-07:01.jail.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-07:01.jail.asc ADV FreeBSD-SA-07:01.jail.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

FreeBSD Security Advisory (FreeBSD-SA-08:08.nmount.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-08:08.nmount.asc ADV FreeBSD-SA-08:08.nmount.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-08:08.nmount.asc Authors: Thomas Reinke Copyright: Copyright c 2008...

FreeBSD Security Advisory (FreeBSD-SA-04:11.msync.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:11.msync.asc ADV FreeBSD-SA-04:11.msync.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft...

FreeBSD Security Advisory (FreeBSD-SA-08:03.sendfile.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-08:03.sendfile.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD Security Advisory (FreeBSD-SA-05:07.ldt.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:07.ldt.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD Security Advisory (FreeBSD-SA-04:11.msync.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:11.msync.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD Security Advisory (FreeBSD-SA-06:25.kmem.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:25.kmem.asc ADV FreeBSD-SA-06:25.kmem.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

FreeBSD Security Advisory (FreeBSD-SA-04:12.jailroute.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:12.jailroute.asc ADV FreeBSD-SA-04:12.jailroute.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008...

FreeBSD Security Advisory (FreeBSD-SA-05:02.sendfile.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:02.sendfile.asc ADV FreeBSD-SA-05:02.sendfile.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008...

FreeBSD Security Advisory (FreeBSD-SA-03:16.filedesc.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-03:16.filedesc.asc ADV FreeBSD-SA-03:16.filedesc.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008...

FreeBSD Security Advisory (FreeBSD-SA-04:12.jailroute.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:12.jailroute.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...