Advisories | Mandriva::
Nov 13, 2007 comparisons (CVE-2007-5268; only affects Mandriva Linux 2008.0). Tavis Ormandy reported out-of-bounds read errors in several PNG chunk
http://www.mandriva.com/security/advisories?name=MDKSA-2007:217HOME |
Security researchers are warning of a buffer overflow security flaw in
the Linux kernel that can be exploited to lead to privilege escalation
attacks. Linux.com :: Multiple Linux flaws reported::
Multiple Linux flaws reported. April 18, 2004 (8:00:00 AM) - 4 years, 3 months ago. Security researchers are warning of a buffer overflow security flaw in
http://newsvac.org/articles/35514?theme=printHOME |
According to an advisory issued by iDEFENSE, the vulnerabilities affect Linux
Kernel 2.6.x; Linux Kernel 2.5.x and Linux Kernel 2.4.x.
"Successful exploitation may allow arbitrary code execution with root or
kernel level privileges," the company warned.
The company found that affected versions of Linux kernel performed no
length checking on symbolic links stored on an ISO9660 file system, a
problem that allows a malformed CD to perform an arbitrary length overflow
in kernel memory. Linux Kernel IGMP Multiple Vulnerabilities::
Linux kernel IGMP functionality is reported prone to multiple vulnerabilities. It is reported that due to the previously reported flaw, an attacker can
http://www.juniper.net/security/auto/vulnerabilities/vuln11917.htmlHOME |
"Symbolic links on ISO9660 file systems are supported by the 'Rock Ridge'
extension to the standard format. The vulnerability can be triggered by
performing a directory listing on a maliciously constructed ISO file system,
or attempting to access a file via a malformed symlink on such a file
system. Many distributions allow local users to mount CDs, which makes them
potentially vulnerable to local elevation attacks," according to the
security alert. SecurityTracker.com Archives - ASP Portal Has Multiple Flaws That ::
ASP Portal Has Multiple Flaws That Let Remote Users Hijack Accounts, Description: Manuel Lopez reported several vulnerabilities in ASP Portal.
http://www.securitytracker.com/alerts/2004/Feb/1009050.htmlHOME |
Updated Linux kernel versions are available at kernel.org.
Separately, security firm Secunia warned of an information leak and
denial-of-service (define) holes in Linux Kernel 2.4.x and 2.6.x.
The information leak problem was discovered with the ext3, XFS, and JFS file
system code and can lead to the exposure of data like cryptographic keys to
malicious attackers.
Another error was found within the OSS code for SoundBlaster 16 devices
that could be used to trigger denial-of-service attacks with odd numbers of
output bytes are submitted.
 ColdFusion MX DoS Vulnerability Patched
 Q&A: Hal Stern, CTO Sun Services
| 
PRINT
Add to favorites