kernel: execve: must clear current->clear_child_tid

The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current-clearchildtid pointer, which allows local users to cause a denial of service memory corruption or possibly gain privileges via a clone system call with CLONECHILDSETTID or...

Linux Kernel 2.4.x2.6.x (CentOS 4.85.3 RHEL 4.85.3 SuSE 10 SP211 Ubuntu 8.10) (PPC) - sock_sendpage() Local Privilege Escalation

Linux Kernel 2.4.x2.6.x CentOS 4.85.3 RHEL 4.85.3 SuSE 10 SP211 Ubuntu 8.10 PPC - socksendpage Local Privilege Escalation / Linux socksendpage NULL pointer dereference Copyright 2009 Ramon de Carvalho Valle This program is free software; you can redistribute it and/or modify it under the terms of...

Memory corruption

The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current-clearchildtid pointer, which allows local users to cause a denial of service memory corruption or possibly gain privileges via a clone system call with CLONECHILDSETTID or...

CVE-2009-2848

CVE-2009-2848 is confirmed in connected material as applicable to MiracleLinux kernel package 2.6.18-128.10AXS3, aligning with the Linux kernel vulnerability where execve does not properly clear current->clear_child_tid during thread creation/exit. This misbehavior can enable local users to ca...

CVE-2009-2848

The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current-clearchildtid pointer, which allows local users to cause a denial of service memory corruption or possibly gain privileges via a clone system call with CLONECHILDSETTID or...

HP-UX Update for ttrace(2) HPSBUX02450

Check for the Version of ttrace2 OpenVAS Vulnerability Test HP-UX Update for ttrace2 HPSBUX02450 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

HP-UX Update for ttrace(2) HPSBUX02450

Check for the Version of ttrace2 OpenVAS Vulnerability Test HP-UX Update for ttrace2 HPSBUX02450 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

CVE-2009-1427

Unspecified vulnerability in HP-UX B.11.31 allows local users to cause a denial of service system crash via unknown vectors related to the ttrace system call...

Design/Logic Flaw

Unspecified vulnerability in HP-UX B.11.31 allows local users to cause a denial of service system crash via unknown vectors related to the ttrace system call...

CVE-2009-1427

Unspecified vulnerability in HP-UX B.11.31 allows local users to cause a denial of service system crash via unknown vectors related to the ttrace system call...

openSUSE Security Update : kernel (kernel-951)

This kernel update for openSUSE 11.0 fixes some bugs and several security problems. The following security issues are fixed: A local denial of service problem in the splice2 system call. CVE-2009-1630: The nfspermission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel...

Virtualmin 3.703 - Multiple LocalRemote Vulnerabilities

Virtualmin 3.703 - Multiple LocalRemote Vulnerabilities Virtualmin Multiple Vulnerabilities by Filip Palian alertdocument.cookie; https://127.0.0.1:10000/virtual-server/link.cgi/%3Ci%3E%3Cscript%3Ealertdocument.cookie;%3C/script%3E 3 Anonymous proxy The attacker is able to use "Preview Website"...

Design/Logic Flaw

The ptracestart function in kernel/ptrace.c in the Linux kernel 2.6.18 does not properly handle simultaneous execution of the docoredump function, which allows local users to cause a denial of service deadlock via vectors involving the ptrace system call and a coredumping thread...

linux/x86 execve shellcode generator null byte free

linux/x86 execve shellcode generator null byte free. Shellcode exploit for generator platform / \ Shellcode Generator null byte free. Author: certaindeath Site: certaindeath.netii.net at the moment under construction This program generates a shellcode which uses the stack to store the command and...

linux/x86 execve shellcode generator null byte free

No description provided by source. / \ Shellcode Generator null byte free. Author: certaindeath Site: certaindeath.netii.net at the moment under construction This program generates a shellcode which uses the stack to store the command and its arguments. Afterwords it executes the command with the...

linux/x86 execve shellcode generator null byte free

Exploit for generator platform in category shellcode =================================================== linux/x86 execve shellcode generator null byte free =================================================== / \ Shellcode Generator null byte free. Author: certaindeath This program generates a...

kernel: exit_notify: kill the wrong capable(CAP_KILL) check

The exitnotify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAPKILL capability is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exitsignal field and then uses an exec system...

CentOS 4 : kernel (CESA-2009:0459)

Updated kernel packages that fix several security issues and various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

freebsd/x86-64 - execve /bin/sh shellcode 34 bytes

freebsd/x86-64 execve /bin/sh shellcode 34 bytes. Shellcode exploit for freebsdx86-64 platform / Anderson Eduardo Hack'n Roll http://anderson.hacknroll.com http://blog.hacknroll.com .section .text .globl start start: xor %rcx,%rcx jmp string main: popq %rsi movq %rsi,%rdi pushq %rsi pushq %rcx mo...

RedHat Security Advisory RHSA-2009:0473

The remote host is missing updates to the kernel announced in advisory RHSA-2009:0473. This update fixes the following security issues: a logic error was found in the dosetlk function of the Linux kernel Network File System NFS implementation. If a signal interrupted a lock request, the local POS...