CentOS 5 : kernel (CESA-2009:0473)

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

SuSE9 Security Update : Linux kernel (YOU Patch Number 12541)

This update fixes various security issues and some bugs in the SUSE Linux Enterprise 9 kernel. The following security bugs were fixed : - A race condition in the pipe2 systemcall could be used by local attackers to execute code. CVE-2009-3547 - On x8664 systems a information leak of high register...

PT-2009-3691 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue arises from the Windows kernel's failure to properly validate an argument passed to a system call, allowing local users to gain privileges via a crafted application...

Code injection

Unspecified vulnerability in the ZFS filesystem in Sun Solaris 10, and OpenSolaris snv100 through snv117, allows local users to bypass intended limitations of the filechownself privilege via certain uses of the chown system call...

CVE-2009-3706

CVE-2009-3706 affects the ZFS filesystem in Sun Solaris 10 and OpenSolaris snv_100–snv_117. A local attacker can bypass the file_chown_self privilege via certain uses of the chown system call, effectively bypassing intended limitations. The description does not specify concrete affected component...

CVE-2009-3706: Undefined Security Weakness

Unspecified vulnerability in the ZFS filesystem in Sun Solaris 10, and OpenSolaris snv100 through snv117, allows local users to bypass intended limitations of the filechownself privilege via certain uses of the chown system call...

Linux Kernel perf_counter_open()函数本地溢出漏洞

BUGTRAQ ID: 36423 CVECAN ID: CVE-2009-3234 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的kernel/perfcounter.c文件中的perfcopyattr函数存在缓冲区溢出漏洞。本地攻击者可以通过向perfcounteropen系统调用传送特制数据触发这个溢出，导致内核崩溃。 Linux kernel 2.6.31 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

kernel: execve: must clear current->clear_child_tid

The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current-clearchildtid pointer, which allows local users to cause a denial of service memory corruption or possibly gain privileges via a clone system call with CLONECHILDSETTID or...

Linux Kernel 2.4.x2.6.x (CentOS 4.85.3 RHEL 4.85.3 SuSE 10 SP211 Ubuntu 8.10) (PPC) - sock_sendpage() Local Privilege Escalation

Linux Kernel 2.4.x2.6.x CentOS 4.85.3 RHEL 4.85.3 SuSE 10 SP211 Ubuntu 8.10 PPC - socksendpage Local Privilege Escalation / Linux socksendpage NULL pointer dereference Copyright 2009 Ramon de Carvalho Valle This program is free software; you can redistribute it and/or modify it under the terms of...

Memory corruption

The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current-clearchildtid pointer, which allows local users to cause a denial of service memory corruption or possibly gain privileges via a clone system call with CLONECHILDSETTID or...

CVE-2009-2848

The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current-clearchildtid pointer, which allows local users to cause a denial of service memory corruption or possibly gain privileges via a clone system call with CLONECHILDSETTID or...

CVE-2009-2848

CVE-2009-2848 is confirmed in connected material as applicable to MiracleLinux kernel package 2.6.18-128.10AXS3, aligning with the Linux kernel vulnerability where execve does not properly clear current->clear_child_tid during thread creation/exit. This misbehavior can enable local users to ca...

HP-UX Update for ttrace(2) HPSBUX02450

Check for the Version of ttrace2 OpenVAS Vulnerability Test HP-UX Update for ttrace2 HPSBUX02450 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

HP-UX Update for ttrace(2) HPSBUX02450

Check for the Version of ttrace2 OpenVAS Vulnerability Test HP-UX Update for ttrace2 HPSBUX02450 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

CVE-2009-1427

Unspecified vulnerability in HP-UX B.11.31 allows local users to cause a denial of service system crash via unknown vectors related to the ttrace system call...

Design/Logic Flaw

Unspecified vulnerability in HP-UX B.11.31 allows local users to cause a denial of service system crash via unknown vectors related to the ttrace system call...

CVE-2009-1427

Unspecified vulnerability in HP-UX B.11.31 allows local users to cause a denial of service system crash via unknown vectors related to the ttrace system call...

CVE-2009-1427: Undefined Security Weakness

Unspecified vulnerability in HP-UX B.11.31 allows local users to cause a denial of service system crash via unknown vectors related to the ttrace system call...

openSUSE Security Update : kernel (kernel-951)

This kernel update for openSUSE 11.0 fixes some bugs and several security problems. The following security issues are fixed: A local denial of service problem in the splice2 system call. CVE-2009-1630: The nfspermission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel...

Virtualmin 3.703 - Multiple LocalRemote Vulnerabilities

Virtualmin 3.703 - Multiple LocalRemote Vulnerabilities Virtualmin Multiple Vulnerabilities by Filip Palian alertdocument.cookie; https://127.0.0.1:10000/virtual-server/link.cgi/%3Ci%3E%3Cscript%3Ealertdocument.cookie;%3C/script%3E 3 Anonymous proxy The attacker is able to use "Preview Website"...