8754 matches found
openSUSE Security Update : kernel (kernel-2050)
The openSUSE 11.1 Kernel was updated to 2.6.27.42 fixing various bugs and security issues. CVE-2010-0622: The wakefutexpi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly handle certain unlock operations for a Priority Inheritance PI futex, which allows local use...
MiTM Attack Stealing Virtual Gold on WoW
Crooks have developed a man-in-the-middle-attack designed to circumvent authentication kit used by dedicated World of Warcraft gamers. The ruse relies on tricking gamers into installing Trojans disguised as gaming ad-ons. Once applied the malware allows hackers to capture and relay authentication...
Killer Whale Trainer Death Exploited by Malware
Supposed footage of Wednesday’s fatal Sea World killer whale attack in Florida actually points at sites distributing scareware. Read the full article. The Register...
SuSE9 Security Update : the Linux kernel (YOU Patch Number 12578)
This update fixes various security issues and some bugs in the SUSE Linux Enterprise 9 kernel. - The collectrxframe function in drivers/isdn/hisax/hfcusb.c in the Linux kernel allows attackers to have an unspecified impact via a crafted HDLC packet that arrives over ISDN and triggers a buffer...
P2P Network Users Allow Access To Private Info
At SchmooCon, researchers thought it would be a hoot to take a look at some of the information people send out over peer-to-peer P2P networks. They were taken aback by what they found. Read the full article. Network World...
Unfixed XSS vulnerability at www.worldwaterforum5.org
Security researcher FayHatti, has submitted on 02/06/2010 a cross-site-scripting XSS vulnerability affecting www.worldwaterforum5.org, which at the time of submission ranked 688727 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It ...
kernel: megaraid_sas permissions in sysfs
The pollmodeio file for the megaraidsas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file...
kernel: megaraid_sas permissions in sysfs
The dbglvl file for the megaraidsas driver in the Linux kernel before 2.6.27 has world-writable permissions, which allows local users to change the 1 behavior and 2 logging level of the driver by modifying this file...
CVE-2009-3556
A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux RHEL 5, when NPort ID Virtualization NPIV hardware is used, sets world-writable permissions for the 1 vportcreate and 2 vportdelete files under /sys/class/scsihost/, which allows loc...
kernel: megaraid_sas permissions in sysfs
The pollmodeio file for the megaraidsas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file...
kernel: megaraid_sas permissions in sysfs
The dbglvl file for the megaraidsas driver in the Linux kernel before 2.6.27 has world-writable permissions, which allows local users to change the 1 behavior and 2 logging level of the driver by modifying this file...
kernel: qla2xxx NPIV vport management pseudofiles are world writable
A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux RHEL 5, when NPort ID Virtualization NPIV hardware is used, sets world-writable permissions for the 1 vportcreate and 2 vportdelete files under /sys/class/scsihost/, which allows loc...
PT-2010-1294 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Linux RHEL 5 with Linux kernel 2.6.18 Description: The issue concerns a Red Hat configuration step for the qla2xxx driver in the Linux kernel when N Port ID Virtualization NPIV hardware is used. This configuration sets...
SuSE 11 Security Update : Linux kernel (SAT Patch Numbers 1754 / 1760)
Indications Everyone using the Linux Kernel on x8664 architecture should update. Contraindications None. Problem description The SUSE Linux Enterprise 11 Kernel was updated to 2.6.27.42 fixing various bugs and security issues. The following security issues were fixed : - A underflow in the e1000...
Top Facebook, Twitter Hacks From 2009
Here, in chronological order, are the top 10 security and privacy stories concerning Facebook and Twitter from the past year. Read the full article. Network World...
SuSE 11.2 Security Update: kernel (2009-12-18)
The Linux kernel for openSUSE 11.2 was updated to 2.6.31.8 to fix the following bugs and security issues : - A file overwrite issue on the ext4 filesystem could be used by local attackers that have write access to a filesystem to change/overwrite files of other users, including root. CVE-2009-413...
Western Digital My Book World Edition 1.1.16 - 'lang' Cross-Site Scripting
source: https://www.securityfocus.com/bid/40564/info My Book World Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...
Mike Mimoso on the Schmidt Appointment and the Top Security Stories of 2009
Dennis Fisher talks with Mike Mimoso, editorial director of the Security Media Group at TechTarget, about Howard Schmidt’s appointment, the top security stories of 2009 and the World Cup draw. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on...
