jetlib.sec » Tags » kdump

Feeds

133365 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

8 items tagged "kdump"

Related tags: linux kernel [+], linux [+], information disclosure vulnerability [+], target server [+], ssh key [+], ssh [+], server [+], red hat security [+], kexec tools [+], kernel [+]

• March 01, 2012
• 0:00

  Vuln: Linux Kernel 'kdump' and 'mkdumprd' OpenSSH Integration Remote Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel 'kdump' and 'mkdumprd' OpenSSH Integration Remote Information Disclosure Vulnerability

  Tags:  kdump kernel linux information-disclosure-vulnerability linux-kernel  

• 0:00

  Vuln: Linux Kernel kexec-tools 'kdump/mkdumprd' Utility Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel kexec-tools 'kdump/mkdumprd' Utility Information Disclosure Vulnerability

  Tags:  kdump kexec-tools information-disclosure-vulnerability linux-kernel linux  

• February 21, 2012
• 0:00

  Vuln: Linux Kernel kexec-tools 'kdump/mkdumprd' Utility Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel kexec-tools 'kdump/mkdumprd' Utility Information Disclosure Vulnerability

  Tags:  kdump kexec-tools information-disclosure-vulnerability linux-kernel linux  

• December 20, 2011
• 0:00

  Vuln: Linux Kernel 'kdump' and 'mkdumprd' OpenSSH Integration Remote Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel 'kdump' and 'mkdumprd' OpenSSH Integration Remote Information Disclosure Vulnerability

  Tags:  kdump kernel linux information-disclosure-vulnerability linux-kernel  

• 0:00

  Vuln: Linux Kernel kexec-tools 'kdump/mkdumprd' Utility Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel kexec-tools 'kdump/mkdumprd' Utility Information Disclosure Vulnerability

  Tags:  kdump kexec-tools information-disclosure-vulnerability linux-kernel linux  

• December 06, 2011
• 15:53

  Red Hat Security Advisory 2011-1532-03

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2011-1532-03 - Kexec allows for booting a Linux kernel from the context of an already running kernel. Kdump used the SSH "StrictHostKeyChecking=no" option when dumping to SSH targets, causing the target kdump server's SSH host key not to be checked. This could make it easier for a man-in-the-middle attacker on the local network to impersonate the kdump SSH target server and possibly gain access to sensitive information in the vmcore dumps. mkdumprd created initrd files with world-readable permissions. A local user could possibly use this flaw to gain access to sensitive information, such as the private SSH key used to authenticate to a remote server when kdump was configured to dump to an SSH target.

  Tags:  server kdump ssh ssh-key target-server red-hat-security  

• 15:53

  Red Hat Security Advisory 2011-1532-03

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2011-1532-03 - Kexec allows for booting a Linux kernel from the context of an already running kernel. Kdump used the SSH "StrictHostKeyChecking=no" option when dumping to SSH targets, causing the target kdump server's SSH host key not to be checked. This could make it easier for a man-in-the-middle attacker on the local network to impersonate the kdump SSH target server and possibly gain access to sensitive information in the vmcore dumps. mkdumprd created initrd files with world-readable permissions. A local user could possibly use this flaw to gain access to sensitive information, such as the private SSH key used to authenticate to a remote server when kdump was configured to dump to an SSH target.

  Tags:  server kdump ssh ssh-key target-server red-hat-security  

• 15:53

  Red Hat Security Advisory 2011-1532-03

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2011-1532-03 - Kexec allows for booting a Linux kernel from the context of an already running kernel. Kdump used the SSH "StrictHostKeyChecking=no" option when dumping to SSH targets, causing the target kdump server's SSH host key not to be checked. This could make it easier for a man-in-the-middle attacker on the local network to impersonate the kdump SSH target server and possibly gain access to sensitive information in the vmcore dumps. mkdumprd created initrd files with world-readable permissions. A local user could possibly use this flaw to gain access to sensitive information, such as the private SSH key used to authenticate to a remote server when kdump was configured to dump to an SSH target.

  Tags:  server kdump ssh ssh-key target-server red-hat-security