< Back to JetLib.com

jetlib.sec » Tags » permission-checks

« Expand/Collapse

11 items tagged "permission checks"

Related tags: ubuntu [+], security [+], security modules [+], notice [+], andy whitcroft [+], user [+], samba server [+], programmable interval timer [+], linux security [+], arbitrary users [+], txt [+], movemail [+], mdvsa [+], mandriva linux [+], mailbox files [+]

May 01, 2012
14:34
Ubuntu Security Notice USN-1434-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1434-1 - Ivano Cristofolini discovered that Samba incorrectly handled some Local Security Authority (LSA) remote procedure calls (RPC). A remote, authenticated attacker could exploit this to grant administrative privileges to arbitrary users. The administrative privileges could be used to bypass permission checks performed by the Samba server.
Tags: ubuntu notice security samba-server permission-checks arbitrary-users

14:34
Ubuntu Security Notice USN-1434-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1434-1 - Ivano Cristofolini discovered that Samba incorrectly handled some Local Security Authority (LSA) remote procedure calls (RPC). A remote, authenticated attacker could exploit this to grant administrative privileges to arbitrary users. The administrative privileges could be used to bypass permission checks performed by the Samba server.
Tags: ubuntu notice security samba-server permission-checks arbitrary-users

14:34
Ubuntu Security Notice USN-1434-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1434-1 - Ivano Cristofolini discovered that Samba incorrectly handled some Local Security Authority (LSA) remote procedure calls (RPC). A remote, authenticated attacker could exploit this to grant administrative privileges to arbitrary users. The administrative privileges could be used to bypass permission checks performed by the Samba server.
Tags: ubuntu notice security samba-server permission-checks arbitrary-users

February 13, 2012
13:10
Ubuntu Security Notice USN-1364-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1364-1 - A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system. Andy Whitcroft discovered a that the Overlayfs filesystem was not doing the extended permission checks needed by cgroups and Linux Security Modules (LSMs). A local user could exploit this to by-pass security policy and access files that should not be accessible. Various other issues were also addressed.
Tags: ubuntu notice security andy-whitcroft permission-checks security-modules linux-security

13:10
Ubuntu Security Notice USN-1364-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1364-1 - A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system. Andy Whitcroft discovered a that the Overlayfs filesystem was not doing the extended permission checks needed by cgroups and Linux Security Modules (LSMs). A local user could exploit this to by-pass security policy and access files that should not be accessible. Various other issues were also addressed.
Tags: ubuntu notice security andy-whitcroft permission-checks security-modules linux-security

13:10
Ubuntu Security Notice USN-1364-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1364-1 - A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system. Andy Whitcroft discovered a that the Overlayfs filesystem was not doing the extended permission checks needed by cgroups and Linux Security Modules (LSMs). A local user could exploit this to by-pass security policy and access files that should not be accessible. Various other issues were also addressed.
Tags: ubuntu notice security andy-whitcroft permission-checks security-modules linux-security

13:10
Ubuntu Security Notice USN-1363-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1363-1 - A flaw was found in KVM's Programmable Interval Timer (PIT). When a virtual interrupt control is not available a local user could use this to cause a denial of service by starting a timer. A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system. Andy Whitcroft discovered a that the Overlayfs filesystem was not doing the extended permission checks needed by cgroups and Linux Security Modules (LSMs). A local user could exploit this to by-pass security policy and access files that should not be accessible. Various other issues were also addressed.
Tags: user ubuntu security andy-whitcroft programmable-interval-timer permission-checks security-modules

13:10
Ubuntu Security Notice USN-1363-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1363-1 - A flaw was found in KVM's Programmable Interval Timer (PIT). When a virtual interrupt control is not available a local user could use this to cause a denial of service by starting a timer. A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system. Andy Whitcroft discovered a that the Overlayfs filesystem was not doing the extended permission checks needed by cgroups and Linux Security Modules (LSMs). A local user could exploit this to by-pass security policy and access files that should not be accessible. Various other issues were also addressed.
Tags: user ubuntu security andy-whitcroft programmable-interval-timer permission-checks security-modules

13:10
Ubuntu Security Notice USN-1363-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1363-1 - A flaw was found in KVM's Programmable Interval Timer (PIT). When a virtual interrupt control is not available a local user could use this to cause a denial of service by starting a timer. A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system. Andy Whitcroft discovered a that the Overlayfs filesystem was not doing the extended permission checks needed by cgroups and Linux Security Modules (LSMs). A local user could exploit this to by-pass security policy and access files that should not be accessible. Various other issues were also addressed.
Tags: user ubuntu security andy-whitcroft programmable-interval-timer permission-checks security-modules

April 20, 2010
9:00
MDVSA-2010-083.txt
» ‎ Packet Storm Security Recent Files

Mandriva Linux Security Advisory 2010-083 - lib-src/movemail.c in movemail in emacs 22 and 23 allows local users to read, modify, or delete arbitrary mailbox files via a symlink attack, related to improper file-permission checks. Packages for 2008.0 and 2009.0 are provided due to the Extended Maintenance Program for those products. The updated packages have been patched to correct this issue.
Tags: txt mdvsa movemail mandriva-linux permission-checks mailbox-files

9:00
MDVSA-2010-083.txt
» ‎ Packet Storm Security Advisories

Mandriva Linux Security Advisory 2010-083 - lib-src/movemail.c in movemail in emacs 22 and 23 allows local users to read, modify, or delete arbitrary mailbox files via a symlink attack, related to improper file-permission checks. Packages for 2008.0 and 2009.0 are provided due to the Extended Maintenance Program for those products. The updated packages have been patched to correct this issue.
Tags: txt mdvsa movemail mandriva-linux permission-checks mailbox-files