537 matches found
Mandrake Security Advisory MDVSA-2009:103 (udev)
The remote host is missing an update to udev announced via advisory MDVSA-2009:103. OpenVAS Vulnerability Test $Id: mdksa2009103.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:103 udev Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Mandrake Security Advisory MDVSA-2009:104 (udev)
The remote host is missing an update to udev announced via advisory MDVSA-2009:104. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
Mandrake Security Advisory MDVSA-2009:103 (udev)
The remote host is missing an update to udev announced via advisory MDVSA-2009:103. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
Linux Kernel 2.6 UDEV < 141 Local Privilege Escalation Exploit
No description provided by source. / cve-2009-1185.c udev 141 Local Privilege Escalation Exploit Jon Oberheide [email protected] http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1185 udev before 1.4.1 does not verify whether a NETLINK message originates...
Mandriva Linux Security Advisory : udev (MDVSA-2009:103-1)
Security vulnerabilities have been identified and fixed in udev. udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space CVE-2009-1185. Buffer overflow in the utilpathencode...
Linux Kernel 2.6 (Gentoo Ubuntu 8.109.04) UDEV 1.4.1 - Local Privilege Escalation (2)
Linux Kernel 2.6 Gentoo Ubuntu 8.109.04 UDEV 1.4.1 - Local Privilege Escalation 2 / cve-2009-1185.c udev http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1185 udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, whic...
Linux Kernel 2.6 UDEV < 141 Local Privilege Escalation Exploit
Exploit for linux platform in category local exploits ============================================================== Linux Kernel 2.6 UDEV include include include include include include ifndef NETLINKKOBJECTUEVENT define NETLINKKOBJECTUEVENT 15 endif int mainint argc, char argv int sock; char mp...
Linux Kernel 2.6 (Gentoo / Ubuntu 8.10/9.04) UDEV < 1.4.1 - Local Privilege Escalation (2)
/ cve-2009-1185.c udev http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1185 udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user...
The Linux explosion local to mention the right vulnerability, please immediately update the udev program-vulnerability warning-the black bar safety net
Linux udev app then explosion local to mention the right toexploit, the local user can easily get root access, please update the udev program. （2.4 kernel system is not affected by the impact The repair methodrepair before please backup important data: debian users do the apt-get update ; apt-get...
MDVA-2009:006 : xen
The xen package released in Mandriva Linux 2009.0 lacks udev rules for handling hotplug events. As a result trying to create an HVM host will fail with this kind of error message: 'Error: Device 0 vif could not be connected Hotplug scripts not working'. Additionaly, it also add PCI pass-through...
MDVA-2008:084 : udev
The udev rules for network interfaces used to write persistent settings for hso devices in /etc/udev/rules.d/61-netconfig.rules, which is wrong since their MAC address is random 39977. The udev rules for automatic driver loading used to load video drivers during the dkms service start, which coul...
Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : udev vulnerabilities (USN-758-1)
Sebastian Krahmer discovered that udev did not correctly validate netlink message senders. A local attacker could send specially crafted messages to udev in order to gain root privileges. CVE-2009-1185 Sebastian Krahmer discovered a buffer overflow in the path encoding routines in udev. A local...
Fedora 10 : udev-127-5.fc10 (2009-3711)
udev provides a user-space API and implements a dynamic device directory, providing only the devices present on the system. udev replaces devfs in order to provide greater hot plug functionality. Netlink is a datagram oriented service, used to transfer information between kernel modules and...
Slackware 12.2 / current : udev reissued for 12.2/current (SSA:2009-111-02)
Updated udev packages are available for Slackware 12.2, and -current to fix a serial device ownership regression in 12.2, adjust the perms on /dev/rtc0, and make sure that the /dev/root symlink is properly created. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
udev reissued for 12.2/current
Updated udev packages are available for Slackware 12.2, and -current to fix a serial device ownership regression in 12.2, adjust the perms on /dev/rtc0, and make sure that the /dev/root symlink is properly created. Here are the details from the Slackware 12.2 ChangeLog:...
Linux Kernel 2.6 UDEV Local Privilege Escalation Exploit
No description provided by source. !/bin/sh Linux 2.6 bug found by Sebastian Krahmer lame sploit using LD technique by kcope in 2009 tested on debian-etch,ubuntu,gentoo do a 'cat /proc/net/netlink' and set the first arg to this script to the pid of the netlink socket the pid is udevdpid - 1 most ...
Slackware 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / current : udev (SSA:2009-111-01)
New udev packages are available for Slackware 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. The udev packages in Slackware 10.2, 11.0, 12.0, 12.1, 12.2, and -current contained a local root hole vulnerability: https://vulners.com/cve/CVE-2009-1185 The udev packages in Slackwar...
GLSA-200904-18 : udev: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200904-18 udev: Multiple vulnerabilities Sebastian Krahmer of SUSE discovered the following two vulnerabilities: udev does not verify the origin of NETLINK messages properly CVE-2009-1185. A buffer overflow exists in the...
udev
New udev packages are available for Slackware 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. The udev packages in Slackware 10.2, 11.0, 12.0, 12.1, 12.2, and -current contained a local root hole vulnerability: https://vulners.com/cve/CVE-2009-1185 The udev packages in Slackwar...
libvolume_id, udev security update
CentOS Errata and Security Advisory CESA-2009:0427 Updated udev packages that fix one security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. udev provides a user-space API and implement...