CVE-2017-1000367

CVE-2017-1000367 हमने Sudo के getprocessttyname फ़ंक्शन में Linux के लिए एक कमज़ोरी खोजी: यह फ़ंक्शन "/proc/pid/stat" man proc खोलता है और tty का डिवाइस नंबर फ़ील्ड 7 ttynr से पढ़ता है। दुर्भाग्य से, ये फ़ील्ड स्पेस से अलग किए गए हैं और फ़ील्ड 2 comm, कमांड का फ़ाइलनाम में स्पेस हो सकते हैं...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ipack: ipoctal: fixed the stack information leak. The name of the tty driver is also used after registering the driver, and it must specifically not be allocated on the stack to prevent information from leaking into the user spac...

EUVD-2008-4294

Malware in sbrugna...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986343)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986343 advisory. In the Linux kernel, the following vulnerability has been resolved: ipack: ipoctal: fix stack information leak The tty driver name is used also after registering the...

CVE-2008-4313

A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services...

CVE-2008-4313: Undefined Security Weakness

A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services...

tog-pegasus: WBEM services access not restricted to dedicated user after 2.7.0 rebase

A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services...