Linux Today: Linux News On Internet Time.
Search Linux Today
search.internet.com
Linux News Sections:  Blog -  Developer -  High Performance -  Infrastructure -  IT Management -  Security -  Storage -
Linux Today Navigation
LT Home
Preferences
Contribute
Link to Us
Search
Linux Jobs

Become a Marketplace Partner

internet.commerce
Be a Commerce Partner














The Linux Channel at internet.com
Linux Today
Enterprise Linux Today
Apache Today
JustLinux.com
Linux Planet
PHPBuilder
All Linux Devices
Technology Jobs

JustTechJobs.com

LinuxToday Newsletters
Subscribe News
Subscribe PR
Subscribe Security

internet.com
IT
Developer
Internet News
Small Business
Personal Technology
International

Search internet.com
Advertise
Corporate Info
Newsletters
Tech Jobs
E-mail Offers

 

Current Newswire:

Extending Nautilus, Scripting Your Way To UI Bliss

Check Your Mysql Server Performance with MySQLTuner

The Growth of the Newest Kubuntu Support Option

Linux Game "System of Tomorrow" Ships in Two Weeks

Anonymous Proxy Using Squid 3 On CentOS 5.x

Install and Configure Cacti Monitoring Tool in Ubuntu 8.10 (Intrepid Ibex) Server

SimplyMEPIS: The Best Desktop Linux You Haven't Tried

Planning Extensions in TYPO3

How the Linux Kernel Manages Virtual Memory

Make Your BIOS Love Security

Sr. Developer, Backend
Professional Technical Resources
US-OR-Eugene

Justtechjobs.com Post A Job | Post A Resume
:Linux Kernel "vmsplice()" System Call Vulnerabilities
Linux Kernel "vmsplice()" System Call Vulnerabilities
Feb 11, 2008, 14 :00 UTC (2 Talkback[s]) (4333 reads)

"Some vulnerabilities have been reported in the Linux Kernel, which can be exploited by malicious, local users to cause a DoS (Denial of Service), disclose potentially sensitive information, and gain escalated privileges.

"The vulnerabilities are caused due to the missing verification of parameters within the 'vmsplice_to_user()', 'copy_from_user_mmap_sem()', and 'get_iovec_page_array()' functions in fs/splice.c before using them to perform certain memory operations..."

Complete Story

Related Stories:
Linux Detecting/Checking Rootkits with Chkrootkit and rkhunter Software(Jan 29, 2008)
Abusing chroot(Sep 30, 2007)
SELinux--Is It *Really* Too Complex?(Sep 28, 2007)
Five Ways SELinux May Surprise You(May 06, 2007)


Index Mode   |   Flat Mode   |   Thread Mode   |   Thread Flat  
  Talkback(s) Name  and Date
Debian has already issued an updated ker ...   Debian   
BD
Feb 11, 2008, 16:40:40
 
Unofficial patched rpms available at htt ...   Patched RPMs   
Erek Dyskant
Feb 11, 2008, 20:25:32
 
  Home | Search Talkbacks | Customize View    Top of Page  



Enter your comments below:

* Your Name:

* Your Email Address:

* Subject:

CC: [will also send this talkback to an E-Mail address]

* Comments:

Tags allowed:<I>,<B> and <U>. See our talkback-policy for more about talkback content.

Fields marked with * are required!






..............................


All times are recorded in UTC.
Linux is a trademark of Linus Torvalds.
Powered by Linux, Apache and PHP

internet.comearthweb.comDevx.commediabistro.comGraphics.com

Search:

Jupitermedia Corporation has two divisions: Jupiterimages and JupiterOnlineMedia

Jupitermedia Corporate Info

Legal Notices, Licensing, Reprints, Permissions, Privacy Policy.
Advertise | Newsletters | Tech Jobs | Shopping | E-mail Offers