CVE-2010-0036

CVE-2010-0036 affects Mac OS X CoreAudio in 10.5.8 and 10.6.2; a buffer overflow in parsing MP4 audio files may allow remote code execution or cause a denial of service (application crash). Evidence from multiple sources confirms the impact and Apple’s patch is Security Update 2010-001 (SecUpd201...

libvirt_proxy <= 0.5.1 Local Privilege Escalation Exploit

No description provided by source. / cve-2009-0036.c libvirtproxy = 0.5.1 Local Privilege Escalation Exploit Jon Oberheide [email protected] http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0036 Buffer overflow in the proxyReadClientSocket function in...

libvirt_proxy <= 0.5.1 Local Privilege Escalation Exploit

Exploit for linux platform in category local exploits ========================================================= libvirtproxy /tmp/getuid.c gcc -shared /tmp/getuid.c -o /tmp/getuid.so echo "+ setting up /tmp/run" echo -e "!/bin/sh" /tmp/run echo -e "touch /tmp/success" /tmp/run echo -e "echo...

CVE-2009-0036

creationtimestamp| type| source ---|---|--- 2009-04-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8534...

RedHat Security Advisory RHSA-2009:0382

The remote host is missing updates announced in advisory RHSA-2009:0382. libvirt is a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. libvirt also provides tools for remotely managing virtualized systems. The libvirtd daemon was...

Moderate: Red Hat Security Advisory: libvirt security update

Updated libvirt packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 5th May 2011 After installing this update and restarting the libvirtd service, the...

libvirt libvirt_proxy.c文件本地栈溢出漏洞

BUGTRAQ ID: 33724 CVECAN ID: CVE-2009-0036 libvirt是一套免费、开源的C函数库，支持Linux下的主流虚拟化工具。 libvirt库的proxy/libvirtproxy.c文件中的proxyReadClientSocket函数没有正确地验证报文头，如果本地攻击者发送了特制的代理请求的话就可以触发栈溢出，导致以root用户权限执行任意代码。 libvirt 0.5.1 厂商补丁： libvirt ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2009-0036

CVE-2009-0036 affects libvirt_proxy 0.5.1: a buffer overflow in proxyReadClientSocket (proxy/libvirt_proxy.c) could allow a local user to gain root privileges by crafting the virProxyPacket header and then sending the remainder, due to uninitialized memory in a validation check. The public report...

CVE-2008-0036

Buffer overflow in Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a crafted compressed PICT image, which triggers the overflow during decoding...

CVE-2008-0036

CVE-2008-0036 : Buffer overflow in Apple QuickTime prior to 7.4 allows remote attackers to execute arbitrary code via a crafted compressed PICT image, triggering during decoding. Affected software: Apple QuickTime before 7.4. Root cause: overflow during decoding of the crafted PICT data. Impact i...

QuickTime < 7.4 Multiple Vulnerabilities (Mac OS X)

The version of QuickTime installed on the remote Mac OS X host is older than 7.4. Such versions contain several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host if he can trick the user to open a specially crafted movie or PICT file file with QuickTime. C...

CVE-2005-0036

CVE-2005-0036 affects DeleGate 8.10.2 and earlier. The DNS message decompression mishandles a compressed DNS packet with a label length offset, which could trigger an infinite loop and remote DoS. This is documented in NVD/SUSE/JVN entries; exploitation status and specific remediation/patch detai...

Sql injection

SQL injection vulnerability in calendar.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL commands via the eventid parameter. NOTE: the affected version has been disputed by the vendor. It appears that this is the same issue as CVE-2004-0036, which was fixed in 2.3.4...

CVE-2006-0036

ipnatpptp in the PPTP NAT helper netfilter/ipnathelperpptp.c in Linux kernel 2.6.14, and other versions, allows remote attackers to cause a denial of service memory corruption or crash via an inbound PPTPINCALLREQUEST packet that causes a null pointer to be used in an offset calculation...

CVE-2006-0036

CVE-2006-0036 affects the Linux kernel (2.6.14 and other versions) via the ip_nat_pptp code in the PPTP NAT helper (netfilter/ip_nat_helper_pptp.c). The vulnerability occurs when processing an inbound PPTP_IN_CALL_REQUEST packet, which can trigger a null pointer dereference in an offset calculati...

CVE-2002-0036

Integer signedness error in MIT Kerberos V5 ASN.1 decoder before krb5 1.2.5 allows remote attackers to cause a denial of service via a large unsigned data element length, which is later used as a negative value...

CVE-2002-0036

Summary: CVE-2002-0036 is a signedness bug in MIT Kerberos V5 ASN.1 decoder prior to krb5 1.2.5, allowing a remote attacker to trigger a denial of service by sending a large unsigned data element length that is later treated as negative. Impact: DoS of Kerberos services (notably KDC/servers) as d...

RHEL 2.1 : krb5 (RHSA-2003:052)

Updated kerberos packages fix a number of vulnerabilities found in MIT Kerberos. Kerberos is a network authentication system. The MIT Kerberos team released an advisory describing a number of vulnerabilities that affect the kerberos packages shipped by Red Hat. An integer signedness error in the...

CVE-2002-0036

Integer signedness error in MIT Kerberos V5 ASN.1 decoder before krb5 1.2.5 allows remote attackers to cause a denial of service via a large unsigned data element length, which is later used as a negative value...

CVE-2003-0036

ml85p, as included in the printer-drivers package for Mandrake Linux, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable filenames of the form "mlg85p%d"...