CVE-2003-0462

A race condition in the way envstart and envend pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service crash...

Important: Red Hat Security Advisory: : : : Updated 2.4 kernel fixes vulnerabilities

Updated kernel packages are now available fixing several security vulnerabilities. Updated 28 August 2003 Added CAN-2003-0699 and CAN-2003-0700 to the list of security issues that are fixed by this advisory there are no changes to the packages themselves. The Linux kernel handles the basic...

Linux Kernel 2.4 - SUID execve() System Call Race Condition Executable File Read

Linux Kernel 2.4 - SUID execve System Call Race Condition Executable File Read / source: https://www.securityfocus.com/bid/8042/info A race condition vulnerability has been discovered in the Linux execve system call, affecting the 2.4 kernel tree. The problem lies in the atomicity of placing a...

Linux Kernel 2.4 - SUID 'execve()' System Call Race Condition Executable File Read

/ source: https://www.securityfocus.com/bid/8042/info A race condition vulnerability has been discovered in the Linux execve system call, affecting the 2.4 kernel tree. The problem lies in the atomicity of placing a target executables file descriptor within the current process descriptor and...

CVE-2003-0246

The ioperm system call in Linux kernel 2.4.20 and earlier does not properly restrict privileges, which allows local users to gain read or write access to certain I/O ports...

Linux Kernel 2.2.x2.4.x - Privileged Process Hijacking Privilege Escalation (2)

Linux Kernel 2.2.x2.4.x - Privileged Process Hijacking Privilege Escalation 2 / source: https://www.securityfocus.com/bid/7112/info A vulnerability has been discovered in the Linux kernel which can be exploited using the ptrace system call. By attaching to an incorrectly configured root process,...

Linux Kernel 2.2.x/2.4.x - Privileged Process Hijacking Privilege Escalation (2)

/ source: https://www.securityfocus.com/bid/7112/info A vulnerability has been discovered in the Linux kernel which can be exploited using the ptrace system call. By attaching to an incorrectly configured root process, during a specific time window, it may be possible for an attacker to gain...

CVE-2002-0754

Kerberos 5 su k5su in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges after it has dropped them...

Linux Kernel 2.2.x2.4.x - Privileged Process Hijacking Privilege Escalation (1)

Linux Kernel 2.2.x2.4.x - Privileged Process Hijacking Privilege Escalation 1 / source: https://www.securityfocus.com/bid/7112/info A vulnerability has been discovered in the Linux kernel which can be exploited using the ptrace system call. By attaching to an incorrectly configured root process,...

Moderate: Red Hat Security Advisory: krb5 security update

Updated packages fix a vulnerability found in the Kerberos FTP client distributed with the Red Hat Linux Advanced Server krb5 packages. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1. For Advanced Workstation 2.1 these packages also fix CAN-2002-1235 as described in...

FreeBSD Security Advisory FreeBSD-SA-02:44.filedesc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-02:44.filedesc Security Advisory The FreeBSD Project Topic: file descriptor leak in fpathconf Category: core Module: kernel Announced: 2003-01-07 Credits: Joost P...

FreeBSD-SA-02:44.filedesc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-02:44.filedesc Security Advisory The FreeBSD Project Topic: file descriptor leak in fpathconf Category: core Module: kernel Announced: 2003-01-07 Credits: Joost...

CVE-2002-1668

HP-UX 11.11 and earlier allows local users to cause a denial of service kernel deadlock, due to a "file system weakness" that is possibly via an mmap system call and performing an I/O operation using data from the mapped buffer on the file descriptor for the mapped file...

CVE-2002-2180

The setitimer2 system call in OpenBSD 2.0 through 3.1 does not properly check certain arguments, which allows local users to write to kernel memory and possibly gain root privileges, possibly via an integer signedness error...

CVE-2002-1197

bugzillaemailappend.pl in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, allows remote attackers to execute arbitrary code via shell metacharacters in a system call to processmail...

Grsecurity Kernel Patch 1.9.4 (Linux Kernel) - Memory Protection

source: https://www.securityfocus.com/bid/4762/info An attacker with root access may be able to write to kernel memory in spite of the security patch provided by grsecurity. The patch operates by redirecting the write system call, when it is being used to write to a memory device. Unfortunately,...

FreeBSD-SA-02:08.exec

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:08 Security Advisory FreeBSD, Inc. Topic: race condition during exec may allow local root compromise Category: core Module: kernel Announced: 2002-01-24 Credits: Logan...

CVE-2001-0734

Hitachi Super-H architecture in NetBSD 1.5 and 1.4.1 allows a local user to gain privileges via modified Status Register contents, which are not properly handled by 1 the sigreturn system call or 2 the processwriteregs kernel routine...

CVE-2001-0734

CVE-2001-0734 affects Hitachi Super-H architecture on NetBSD 1.5 and 1.4.1, enabling a local user to gain privileges via manipulated Status Register contents not correctly handled by the sigreturn system call or the process_write_regs kernel routine. The connected documents do not provide additio...

CVE-2001-0351

The CVE-2001-0351 entry concerns Microsoft Windows 2000 Telnet Service. The vulnerability allows an unprivileged local user to invoke a system call that terminates an existing Telnet session, producing a denial-of-service condition. Affected software is Windows 2000 with the Telnet Service; the u...