5313 matches found
iDefense Security Advisory 06.07.07: Linux Kernel cpuset tasks Information Disclosure Vulnerability
Linux Kernel cpuset tasks Information Disclosure Vulnerability iDefense Security Advisory 06.07.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 07, 2007 I. BACKGROUND Linux is a clone of the UNIX operating system, written from scratch by Linus Torvalds with assistance from a...
CVE-2007-2875: Undefined Security Weakness
Integer underflow in the cpusettasksread function in the Linux kernel before 2.6.20.13, and 2.6.21.x before 2.6.21.4, when the cpuset filesystem is mounted, allows local users to obtain kernel memory contents by using a large offset when reading the /dev/cpuset/tasks file...
CVE-2007-2623
Multiple buffer overflows in RControl.dll in Remote Display Dev kit 1.2.1.0 allow remote attackers to cause a denial of service Internet Explorer 7 crash via 1 a long first argument to the connect function or 2 a long InternalServer property value, possibly involving ntdll.dll...
Buffer overflow
Multiple buffer overflows in RControl.dll in Remote Display Dev kit 1.2.1.0 allow remote attackers to cause a denial of service Internet Explorer 7 crash via 1 a long first argument to the connect function or 2 a long InternalServer property value, possibly involving ntdll.dll...
CVE-2007-2623
CVE-2007-2623 describes multiple buffer overflows in RControl.dll of Remote Display Dev kit 1.2.1.0 that allow remote denial of service (IE7 crash) via either (1) a long first argument to the connect function or (2) a long InternalServer property value, potentially involving ntdll.dll. The availa...
CVE-2007-2623
Multiple buffer overflows in RControl.dll in Remote Display Dev kit 1.2.1.0 allow remote attackers to cause a denial of service Internet Explorer 7 crash via 1 a long first argument to the connect function or 2 a long InternalServer property value, possibly involving ntdll.dll...
CVE-2007-2592
Multiple cross-site scripting XSS vulnerabilities in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allow remote attackers to inject arbitrary web script or HTML via the 1 username...
CVE-2007-2623: Undefined Security Weakness
Multiple buffer overflows in RControl.dll in Remote Display Dev kit 1.2.1.0 allow remote attackers to cause a denial of service Internet Explorer 7 crash via 1 a long first argument to the connect function or 2 a long InternalServer property value, possibly involving ntdll.dll...
Remote Display Dev kit 1.2.1.0 - RControl.dll Denial of Service
Remote Display Dev kit 1.2.1.0 - RControl.dll Denial of Service 2007/05/10 ----------------------------------------------------------------------------- RControl.dll v. 1.2.1.0 Denial of Service Exploit url: http://www.fruit2004.com/ price: only $20 : author: shinnai mail: shinnaiatautisticidotor...
Remote Display Dev kit 1.2.1.0 - 'RControl.dll' Denial of Service
2007/05/10 ----------------------------------------------------------------------------- RControl.dll v. 1.2.1.0 Denial of Service Exploit url: http://www.fruit2004.com/ price: only $20 : author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windows XP...
Remote Display Dev kit 1.2.1.0 RControl.dll Denial of Service Exploit
Exploit for unknown platform in category dos / poc ===================================================================== Remote Display Dev kit 1.2.1.0 RControl.dll Denial of Service Exploit ===================================================================== 2007/05/10...
Foxit Reader 2.0 (PDF) Remote Denial of Service Exploit
Exploit for unknown platform in category dos / poc ======================================================= Foxit Reader 2.0 PDF Remote Denial of Service Exploit ======================================================= / Created Friday, April 20 2007 Moderator of http://igniteds.net Foxit Reader 2....
Microsoft Windows - GDI Privilege Escalation (MS07-017) (2)
/ GDI Local Elevation of Privilege Vulnerability Exploit MS07-017 Coded by Lionel d'Hauenens http://www.labo-asso.com Development: ------------ Dev-C++ 4.9.9.2 Linked with /lib/libgdi32.a References: ----------- http://www.microsoft.com/technet/security/bulletin/MS07-017.mspx...
WarFTP 1.65 (USER) Remote Buffer Overlow Exploit (multiple targets)
Exploit for unknown platform in category remote exploits =================================================================== WarFTP 1.65 USER Remote Buffer Overlow Exploit multiple targets =================================================================== include include include define VULNSERVE...
Plash sandbox protection bypass
It's possible to execute any command via /dev/tty device...
CVE-2007-1400
Plash permits sandboxed processes to open /dev/tty, which allows local users to escape sandbox restrictions and execute arbitrary commands by sending characters to a shell process on the same termimal via the TIOCSTI ioctl...
CVE-2007-1400
Plash allows sandboxed processes to open /dev/tty via TIOCSTI, enabling local users to escape sandbox restrictions and send characters to a shell process on the same terminal to execute arbitrary commands. This CVE (CVE-2007-1400) is documented with a local-privilege/escalation impact and does no...
CVE-2007-1400
Plash permits sandboxed processes to open /dev/tty, which allows local users to escape sandbox restrictions and execute arbitrary commands by sending characters to a shell process on the same termimal via the TIOCSTI ioctl...
CVE-2007-1400: Undefined Security Weakness
Plash permits sandboxed processes to open /dev/tty, which allows local users to escape sandbox restrictions and execute arbitrary commands by sending characters to a shell process on the same termimal via the TIOCSTI ioctl...