Linux Today: Linux News On Internet Time.
Search Linux Today
search.internet.com
Linux News Sections:  Blog -  Developer -  High Performance -  Infrastructure -  IT Management -  Security -  Storage -
Linux Today Navigation
LT Home
Preferences
Contribute
Link to Us
Search
Linux Jobs

Become a Marketplace Partner

internet.commerce
Be a Commerce Partner














The Linux Channel at internet.com
Linux Today
Enterprise Linux Today
Apache Today
JustLinux.com
Linux Planet
PHPBuilder
All Linux Devices
Technology Jobs

JustTechJobs.com

LinuxToday Newsletters
Subscribe News
Subscribe PR
Subscribe Security

internet.com
IT
Developer
Internet News
Small Business
Personal Technology

Search internet.com
Advertise
Corporate Info
Newsletters
Tech Jobs
E-mail Offers

 






Current Newswire:

Easy (and amazing) Debian for the N900

Insight into GNU/Linux boot process

Reviewed: OpenOffice.org 3.2

Creating An NFS-Like Standalone Storage Server With GlusterFS On CentOS 5.4

Open Source is Not a Democracy

Open Source Gets Political

Open source and the Morevna project

Android market going down the drain?

All Done With Ubuntu

Google Offers Migration Tool for Microsoft Exchange Data




Systems Engineer Sr – Solaris – Linux – Logical Domains (CO)
Next Step Systems
US-CO-Thornton

Justtechjobs.com Post A Job | Post A Resume
:Linux Kernel "vmsplice()" System Call Vulnerabilities
Linux Kernel "vmsplice()" System Call Vulnerabilities
Feb 11, 2008, 14 :00 UTC (2 Talkback[s]) (5847 reads)

"Some vulnerabilities have been reported in the Linux Kernel, which can be exploited by malicious, local users to cause a DoS (Denial of Service), disclose potentially sensitive information, and gain escalated privileges.

"The vulnerabilities are caused due to the missing verification of parameters within the 'vmsplice_to_user()', 'copy_from_user_mmap_sem()', and 'get_iovec_page_array()' functions in fs/splice.c before using them to perform certain memory operations..."

Complete Story

Related Stories:
Linux Detecting/Checking Rootkits with Chkrootkit and rkhunter Software(Jan 29, 2008)
Abusing chroot(Sep 30, 2007)
SELinux--Is It *Really* Too Complex?(Sep 28, 2007)
Five Ways SELinux May Surprise You(May 06, 2007)


Index Mode   |   Flat Mode   |   Thread Mode   |   Thread Flat  
  Talkback(s) Name  and Date
Debian has already issued an updated ker ...   Debian   
BD
Feb 11, 2008, 16:40:40
 
Unofficial patched rpms available at htt ...   Patched RPMs   
Erek Dyskant
Feb 11, 2008, 20:25:32
 
  Home | Search Talkbacks | Customize View    Top of Page  



Enter your comments below:

* Your Name:

* Your Email Address:

* Subject:

CC: [will also send this talkback to an E-Mail address]

* Comments:

Tags allowed:<I>,<B> and <U>. See our talkback-policy for more about talkback content.

Fields marked with * are required!






..............................




All times are recorded in UTC.
Linux is a trademark of Linus Torvalds.
Powered by Linux, Apache and PHP


The Network for Technology Professionals

Search:

About Internet.com

Legal Notices, Licensing, Permissions, Privacy Policy.
Advertise | Newsletters | E-mail Offers