CVE-2010-1149

probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKSDMTARGETSPARAMS information to udev even for a crypt UDISKSDMTARGETSTYPE, which allows local users to discover encryption keys by 1 running a certain udevadm command or 2 reading a certain file under /dev/.udev/db/...

CentOS 5 : udev (CESA-2009:0427)

Updated udev packages that fix one security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. udev provides a user-space API and implements a dynamic device directory, providing only the...

Mandriva Security Advisory MDVSA-2009:103-1 (udev)

The remote host is missing an update to udev announced via advisory MDVSA-2009:103-1. OpenVAS Vulnerability Test $Id: mdksa20091031.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:103-1 udev Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Mandriva Security Advisory MDVSA-2009:103-1 (udev)

The remote host is missing an update to udev announced via advisory MDVSA-2009:103-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

SLES10: Security update for udev

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: udev More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ VID...

SLES10: Security update for udev

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: udev More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ VID...

SLES10: Security update for udev

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: udev More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText: 2009 E-So...

SLES10: Security update for udev

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: udev More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText: 2009 E-So...

SLES11: Security update for udev

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libvolumeid1 udev More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at...

SLES11: Security update for udev

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libvolumeid1 udev More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references...

SuSE 10 Security Update : udev (ZYPP Patch Number 6153)

This update fixes a local privilege escalation in udev. - udev did not check the origin of the netlink messages. A local attacker could fake device create events and so gain root privileges. CVE-2009-1185 It also fixes three bugs : - Fixup persistent symlinks for tapes. bnc446534 - Fixup broken A...

SuSE 10 Security Update : udev (ZYPP Patch Number 6203)

This update fixes a local privilege escalation in udev. - udev did not check the origin of the netlink messages. A local attacker could fake device create events and so gain root privileges. CVE-2009-1185 The previous update did not apply the actual patch fixing this problem, as was reported to u...

SuSE 11 Security Update : udev (SAT Patch Number 766)

This update fixes a local privilege escalation in udev. - udev did not check the origin of the netlink messages. A local attacker could fake device create events and so gain root privileges. CVE-2009-1185 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

SuSE9 Security Update : multipath-tools (YOU Patch Number 12377)

The default permissions on the multipathd socket file were to generous and allowed any user to connect. CVE-2009-0115 This update also contains the following fixes : - multipathd is not started for single paths bnc473841 - Backport maxfds parameter bnc457632 - Rename NetApp prio callout to 'ontap...

Under Linux the rebound CmdLine Shell tips-vulnerability warning-the black bar safety net

Last nightshould be early this morningplaying for a long time friend of Linux WebShell, and wanted to practice what UDEV to provide the right it, and finally found that the server seems to have been patched. But still there are other harvest, so I just YY under Linux to bounce a shell problem...

Ordinary users by udev vulnerability to elevate to root permissions demo-vulnerability warning-the black bar safety net

Recently exposed by the udev permissions hint of vulnerability, as long as with normal user permissions, you can elevate to root privileges, the experiment a handful, really easy to upgrade. Put the following code saved as test. sh file !/ bin/sh Linux 2.6 bug found by Sebastian Krahmer lame splo...

linux udev permissions vulnerability testing methods-vulnerability warning-the black bar safety net

Author: Liang increased sea Article source: http://s-logs.com/2009/04/linux-udev.html Copyright: can any reproduced, reprinted, please be sure to hyperlink marked article origin and author information and this statement Vulnerability relevant information may be in the following link to obtain:...

openSUSE Security Update : libudev-devel (libudev-devel-768)

This update fixes a local privilege escalation in udev. CVE-2009-1185: udev did not check the origin of the netlink messages. A local attacker could fake device create events and so gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...

openSUSE Security Update : libudev-devel (libudev-devel-768)

This update fixes a local privilege escalation in udev. CVE-2009-1185: udev did not check the origin of the netlink messages. A local attacker could fake device create events and so gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...

VMSA-2009-0009:ESX Service Console updates for udev, sudo, and curl

VMSA-2009-0009 ESX Service Console updates for udev, sudo, and curl VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0009 VMware Security Advisory Synopsis: ESX Service Console updates for udev, sudo, and curl VMware Security Advisory Issue date: 2009-07-10 VMware Security...