ubuntu ubuntu linux 6.06 lts vulnerabilities and exploits

(subscribe to this query)

2.1

CVSSv2

fs/jfs/xattr.c in the Linux kernel prior to 2.6.35.2 does not properly handle a certain legacy format for storage of extended attributes, which might allow local users by bypass intended xattr namespace restrictions via an "os2." substring at the beginning of a name.

Linux Linux Kernel Canonical Ubuntu Linux 10.10 Canonical Ubuntu Linux 6.06 Canonical Ubuntu Linux 9.04 Canonical Ubuntu Linux 8.04 Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 9.10

7.2

CVSSv2

Buffer overflow in the niu_get_ethtool_tcam_all function in drivers/net/niu.c in the Linux kernel prior to 2.6.36-rc4 allows local users to cause a denial of service or possibly have unspecified other impact via the ETHTOOL_GRXCLSRLALL ethtool command.

Linux Linux Kernel 2.6.36 Linux Linux Kernel Canonical Ubuntu Linux 10.10 Canonical Ubuntu Linux 6.06 Canonical Ubuntu Linux 9.04 Canonical Ubuntu Linux 8.04 Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 9.10

7.5

CVSSv2

Stack-based buffer overflow in the (1) sid_parse and (2) dom_sid_parse functions in Samba prior to 3.5.5 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted Windows Security ID (SID) on a file share.

Samba Samba Canonical Ubuntu Linux 9.04 Canonical Ubuntu Linux 9.10 Canonical Ubuntu Linux 8.04 Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 6.06

6.8

CVSSv2

The utf8_decode function in PHP prior to 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote malicious users to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a ...

Php Php Canonical Ubuntu Linux 10.10 Canonical Ubuntu Linux 9.10 Canonical Ubuntu Linux 8.04 Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 6.06

1 EDB exploit

4.3

CVSSv2

The ZipArchive::getArchiveComment function in PHP 5.2.x up to and including 5.2.14 and 5.3.x up to and including 5.3.3 allows context-dependent malicious users to cause a denial of service (NULL pointer dereference and application crash) via a crafted ZIP archive.

Php Php Canonical Ubuntu Linux 10.10 Canonical Ubuntu Linux 9.10 Canonical Ubuntu Linux 8.04 Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 6.06

1 EDB exploit

4.7

CVSSv2

Race condition in the tty_fasync function in drivers/char/tty_io.c in the Linux kernel prior to 2.6.32.6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via unknown vectors, related to the put_t...

Linux Linux Kernel Debian Debian Linux 5.0 Canonical Ubuntu Linux 10.10 Canonical Ubuntu Linux 9.04 Canonical Ubuntu Linux 9.10 Canonical Ubuntu Linux 8.04 Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 6.06

5

CVSSv2

fopen_wrappers.c in PHP 5.3.x up to and including 5.3.3 might allow remote malicious users to bypass open_basedir restrictions via vectors related to the length of a filename.

Php Php Canonical Ubuntu Linux 10.10 Canonical Ubuntu Linux 9.10 Canonical Ubuntu Linux 8.04 Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 6.06

1.9

CVSSv2

Multiple integer signedness errors in net/rose/af_rose.c in the Linux kernel prior to 2.6.36-rc5-next-20100923 allow local users to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a rose_getname function call, related to the rose_b...

Linux Linux Kernel 2.6.36 Linux Linux Kernel Debian Debian Linux 5.0 Canonical Ubuntu Linux 10.10 Canonical Ubuntu Linux 6.06 Canonical Ubuntu Linux 9.04 Canonical Ubuntu Linux 8.04 Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 9.10

4.3

CVSSv2

pngrtran.c in libpng prior to 1.0.29 and 1.2.x prior to 1.2.21 use (1) logical instead of bitwise operations and (2) incorrect comparisons, which might allow remote malicious users to cause a denial of service (crash) via a crafted PNG image.

Libpng Libpng Canonical Ubuntu Linux 6.10 Canonical Ubuntu Linux 6.06 Canonical Ubuntu Linux 7.10 Canonical Ubuntu Linux 7.04

3.5

CVSSv2

MySQL prior to 5.1.48 allows remote authenticated users with alter database privileges to cause a denial of service (server crash and database loss) via an ALTER DATABASE command with a #mysql50# string followed by a . (dot), .. (dot dot), ../ (dot dot slash) or similar sequence,...

Oracle Mysql Canonical Ubuntu Linux 6.06 Canonical Ubuntu Linux 8.04 Canonical Ubuntu Linux 9.10 Canonical Ubuntu Linux 10.04 Canonical Ubuntu Linux 10.10 Canonical Ubuntu Linux 11.04 Canonical Ubuntu Linux 11.10 Fedoraproject Fedora 13

1 EDB exploit

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook