Linux Today: Linux News On Internet Time.
Search Linux Today
search.internet.com
Linux News Sections:  Blog -  Developer -  High Performance -  Infrastructure -  IT Management -  Security -  Storage -
Linux Today Navigation
LT Home
Preferences
Contribute
Link to Us
Search
Linux Jobs

Become a Marketplace Partner

internet.commerce
Be a Commerce Partner














The Linux Channel at internet.com
Linux Today
Enterprise Linux Today
Apache Today
JustLinux.com
Linux Planet
PHPBuilder
All Linux Devices
Technology Jobs

JustTechJobs.com

LinuxToday Newsletters
Subscribe News
Subscribe PR
Subscribe Security

internet.com
IT
Developer
Internet News
Small Business
Personal Technology

Search internet.com
Advertise
Corporate Info
Newsletters
Tech Jobs
E-mail Offers

 






Current Newswire:

Kubuntu 9.10: A Mixed Bag

Could Microsoft switch to Linux?

Red Hat Virtualization Manager for Windows Only?

Creating Ebooks with Sigil

Editor's Note: Making Multi-Channel Firewire Music With Linux

Amaya: A Simple, Yet Useful Alternative to Dreamweaver

Windows 7 Sales Up, But is it Really a Hit?

Over clocking intel i7 on a Gigabyte EX58-Extreme

Novell cuts 3 percent of its workforce, plus benefits

SECURITY: Debunking the Growing Use of Misleading Claims and False Truisms in Cybersecurity




Arcsight Engineer
The Computer Merchant, Ltd
US-DC-Washington

Justtechjobs.com Post A Job | Post A Resume
:Linux Kernel "vmsplice()" System Call Vulnerabilities
Linux Kernel "vmsplice()" System Call Vulnerabilities
Feb 11, 2008, 14 :00 UTC (2 Talkback[s]) (5472 reads)

"Some vulnerabilities have been reported in the Linux Kernel, which can be exploited by malicious, local users to cause a DoS (Denial of Service), disclose potentially sensitive information, and gain escalated privileges.

"The vulnerabilities are caused due to the missing verification of parameters within the 'vmsplice_to_user()', 'copy_from_user_mmap_sem()', and 'get_iovec_page_array()' functions in fs/splice.c before using them to perform certain memory operations..."

Complete Story

Related Stories:
Linux Detecting/Checking Rootkits with Chkrootkit and rkhunter Software(Jan 29, 2008)
Abusing chroot(Sep 30, 2007)
SELinux--Is It *Really* Too Complex?(Sep 28, 2007)
Five Ways SELinux May Surprise You(May 06, 2007)


Index Mode   |   Flat Mode   |   Thread Mode   |   Thread Flat  
  Talkback(s) Name  and Date
Debian has already issued an updated ker ...   Debian   
BD
Feb 11, 2008, 16:40:40
 
Unofficial patched rpms available at htt ...   Patched RPMs   
Erek Dyskant
Feb 11, 2008, 20:25:32
 
  Home | Search Talkbacks | Customize View    Top of Page  



Enter your comments below:

* Your Name:

* Your Email Address:

* Subject:

CC: [will also send this talkback to an E-Mail address]

* Comments:

Tags allowed:<I>,<B> and <U>. See our talkback-policy for more about talkback content.

Fields marked with * are required!






..............................




All times are recorded in UTC.
Linux is a trademark of Linus Torvalds.
Powered by Linux, Apache and PHP

internet.commediabistro.comJusttechjobs.comGraphics.com

Search:

WebMediaBrands Corporate Info

Legal Notices, Licensing, Reprints, Permissions, Privacy Policy.
Advertise | Newsletters | Shopping | E-mail Offers | Freelance Jobs