kernel: dell_rbu local oops

drivers/firmware/dellrbu.c in the Linux kernel before 2.6.27.13, and 2.6.28.x before 2.6.28.2, allows local users to cause a denial of service system crash via a read system call that specifies zero bytes from the 1 imagetype or 2 packetsize file in /sys/devices/platform/dellrbu/...

Crack the freezing point Restore Wizard（Deep Freeze of approach-vulnerability warning-the black bar safety net

Here and share with you my results, the previous is the freezing point restore screwed, and everyone else previously met the problem is: Ctrl+Shift+Alt+F6 or Shift double click the Deep Freeze icon call not the freezing point, so that only every time you restart your computer the restore, the...

pam_krb5: Privilege escalation

Background pamkrb5 is a a Kerberos v5 PAM module. Description The following vulnerabilities were discovered: pamkrb5 does not properly initialize the Kerberos libraries for setuid use CVE-2009-0360. Derek Chan reported that calls to pamsetcred are not properly handled when running setuid...

Apple Mac OSX xnu 1228.x - 'hfs-fcntl' Kernel Privilege Escalation

!/bin/bash xnu-hfs-fcntl-v2.sh Copyright c 2008 by Apple MACOS X 792.0 \n" \ "http://www.digit-labs.org/ -- Digit-Labs 2008!@$!\n\n" if ! -f $EXPFILE ; then echo -n " compiling exploit..." gcc -Wall $EXPFILE.c -o $EXPFILE 2 /dev/null if $? != 0 ; then echo " failed" exit $? else echo " done" fi f...

Gentoo Security Advisory GLSA 200903-24 (shadow)

The remote host is missing updates announced in advisory GLSA 200903-24. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2009-0873: Undefined Security Weakness

The NFS daemon aka nfsd in Sun Solaris 10 and OpenSolaris before snv106, when NFSv3 is used, does not properly implement combinations of security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the sec=sys a...

Ganglia: Execution of arbitrary code

Background Ganglia is a scalable distributed monitoring system for clusters and grids. Description Spike Spiegel reported a stack-based buffer overflow in the processpath function when processing overly long pathnames in gmetad/server.c. Impact A remote attacker could send a specially crafted...

Kaspersky AntiVirus Buffer Overflow Vulnerability

This host is running Kaspersky AntiVirus or Workstation and is prone to Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: gbkasperskyavbofvuln.nasl 6516 2017-07-04 12:20:47Z cfischer $ Kaspersky AntiVirus Buffer Overflow Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009...

CVE-2009-0449

CVE-2009-0449 corresponds to a buffer overflow in klim5.sys within Kaspersky Anti-Virus for Workstations 6.0 and Anti-Virus 2008, enabling local privilege escalation via an IOCTL 0x80052110 call. The OpenVAS/NVD entries describe the affected driver and the local-exploit condition; CVSS v2 base sc...

CVE-2009-0449: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in klim5.sys in Kaspersky Anti-Virus for Workstations 6.0 and Anti-Virus 2008 allows local users to gain privileges via an IOCTL 0x80052110 call...

Kaspersky klim5.sys驱动本地权限提升漏洞

BUGTRAQ ID: 33561 Kaspersky Internet Security套件是一套完整的解决方案，用于保护计算机抵御几乎所有来自互联网的主要的威胁。 Internet Security及其他Kaspersky产品中所发布的klim5.sys内核驱动在处理来自用户的数据时没有执行充分边界的检查，本地攻击者可以触发溢出，导致执行任意内核态指令。 Kaspersky Labs Kaspersky Antivirus 6.0 for Windows Kaspersky Labs Kaspersky Antivirus 2008 厂商补丁： Kaspersky Labs...

[Wintercore Research WS02-0209] Kaspersky Products Klim5.sys local privilege escalation

HTML VERSION http://www.wintercore.com/advisories/advisoryW020209.html exploit code http://kartoffel.reversemode.com/downloads.php Background Non-technical description Technical Description Exploiting it References Products Affected Credits Disclosure Timeline Contact 1. Background Founded in 199...

Solaris 9 (x86) : 138578-01

SunOS 5.9x86: kernel/sys/kaio patch. Date this patch was last updated by Sun : Jan/07/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...

Solaris 9 (sparc) : 138577-01

SunOS 5.9: kernel/sys/kaio patch. Date this patch was last updated by Sun : Jan/07/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Phosheezy 2.0 Command Execution

!/usr/bin/perl phosheezy 2.0 http://www.ryneezy.net/apps/phosheezy/phosheezy-v0.2.tar.gz Remote Command Execution Exploit by Osirys osirysatlivedotit osirys.org Greets: HaVoC, x0r, jay, BlackLight lol at athos -------------------------------------------------------------- Exploit in action :D...

miniweb20-sql.txt

Miniweb 2.0 Admin bypass Type: 'union select 1 in the username field and press login, you are admin! download: http://www.miniweb2.com/ Found by bizzit and cybernetic Contact: bizzitatlive.de Greetz to: Suicide, ReED, h0yt3r, J0hn^x3r, tmh, n00bor, Five-Three-Nine, electron1x, Nazrek, Free-Hack a...

DDL-Speed Script - acpbackup Admin Backup Bypass

DDL-Speed Script - acpbackup Admin Backup Bypass DDL-Speed Script RFI Vulnerabilities ======================================================================================================================= Critical Level : Dangerous Vendor site : http://ddl-speed.org/ Will be back soon Download :...

FreeBSD/x86 - execv(/bin/sh) Shellcode (23 bytes)

FreeBSD/x86 - execv/bin/sh Shellcode 23 bytes. Shellcode exploit for FreeBSDx86 platform / -------------- FreeBSD/x86 - execv"/bin/sh" 23 bytes ------------------------- AUTHOR : Tosh OS : BSDx86 Tested on FreeBSD 8.1 EMAIL : [email protected] / include include char shellcode =...

DDL-Speed Script - 'acp/backup' Admin Backup Bypass

DDL-Speed Script RFI Vulnerabilities ======================================================================================================================= Critical Level : Dangerous Vendor site : http://ddl-speed.org/ Will be back soon Download :...

CVE-2008-5417: Undefined Security Weakness

HP DECnet-Plus 8.3 before ECO03 for OpenVMS on the Alpha platform uses world-writable permissions for the OSIT$NAMES logical name table, which allows local users to bypass intended access restrictions and modify this table via the 1 SYS$CRELNM and 2 SYS$DELLNM system services...