51 matches found
CVE-2014-3532
dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service system-bus disconnect of other services or applications by sending a message containing a file descriptor, then exceeding the maximum recursion depth before...
CVE-2014-3532
dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service system-bus disconnect of other services or applications by sending a message containing a file descriptor, then exceeding the maximum recursion depth before...
Linux 2.6.37-3.x.x PERF_EVENTS - Local Root Exploit
No description provided by source. / linux 2.6.37-3.x.x x8664, 100 LOC gcc-4.6 -O2 semtex.c && ./a.out 2010 [email protected], salut! update may 2013: seems like centos 2.6.32 backported the perf bug, lol. jewgold to 115T6jzGrVMgQ2Nt1Wnua7Ch1EuL9WXT2g if you insist. / define GNUSOURCE 1 include...
Linux Kernel <= 2.6.37 - Local Privilege Escalation
No description provided by source. / Linux Kernel = 2.6.37 local privilege escalation by Dan Rosenberg @djrbliss on twitter Usage: gcc full-nelson.c -o full-nelson ./full-nelson This exploit leverages three vulnerabilities to get root, all of which were discovered by Nelson Elhage: CVE-2010-4258...
[Auto Rooting v 1.0] Local root [2010 - 2011 - 2012]
Auto Rooting: 2.6.32-46-2011 2.6.37 2.6.33 2.6.18-164-2010 2.6.18-194 2.6.18-6-x86-2011 2.6.18-164 2.6.18-274-2011 2.6.28-2011 etc... CLICK HERE FOR LOGIN TO ARCHIVE Download Auto Rooting v 1.0...
Linux kernel perf_events local root exploit
No description provided by source. / Linux kernel perfevents local root exploit by wzt 2013 http://www.cloud-sec.org gcc -o perfexp perexp.c -O2 target: 2.6.37 - 3.x test on: rhel6.3/6.4 x8664 rhel6.3 + 3.2 kernel / include stdint.h include stdio.h include stdlib.h include string.h include unistd...
Gentoo Security Advisory GLSA 201203-13 (Openswan)
The remote host is missing updates announced in advisory GLSA 201203-13. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
kernel: tight loop and no preemption can cause system stall
The Linux kernel before 2.6.37 does not properly implement a certain clock-update optimization, which allows local users to cause a denial of service system hang via an application that executes code in a loop...
PT-2012-1932 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.37 Description: The issue is related to a certain clock-update optimization that is not properly implemented, allowing local users to cause a denial of service, resulting in a system hang. This can be achiev...
kernel: no access restrictions of /proc/pid/* after setuid program exec
The proc filesystem implementation in the Linux kernel 2.6.37 and earlier does not restrict access to the /proc directory tree of a process after this process performs an exec of a setuid program, which allows local users to obtain sensitive information or cause a denial of service via open, lsee...
Linux Kernel 2.6.37-rc1 - serial_multiport_struct Local Information Leak
Linux Kernel 2.6.37-rc1 - serialmultiportstruct Local Information Leak / Linux include include include include include define DEVICE "/dev/ttyS1" int mainint argc, char argv int ret = 0; int i, fd, reservedsize; char buf; struct serialmultiportstruct buffer; printf"\m/ Linux \n", argv0; exit-1; i...
kernel: IB/uverbs: Handle large number of entries in poll CQ
The ibuverbspollcq function in drivers/infiniband/core/uverbscmd.c in the Linux kernel before 2.6.37 does not initialize a certain response buffer, which allows local users to obtain potentially sensitive information from kernel memory via vectors that cause this buffer to be only partially fille...
PT-2012-1497 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.37 Description: The issue allows local users to bypass Integrity Measurement Architecture IMA rules under certain circumstances when the Linux Security Modules LSM framework is disabled. This can happen when...
Linux Kernel SCTP INIT/INIT-ACK块长度远程拒绝服务漏洞
Bugtraq ID: 47308 Linux是一款开放源代码的操作系统。 在计算INIT/INIT-ACK块长度时，代码只计算了参数长度，而没有计算参数的零填充长度，如AUTH HMACS参数和CHUNKS参数。没有计算零填充长度参数可导致内核触发oops。 Linux kernel 2.6.38 Linux kernel 2.6.37 Linux kernel 2.6.37 Linux kernel 2.6.36 Linux kernel 2.6.35 Linux kernel 2.6.35 Linux kernel 2.6.35 Linux kernel 2.6.34 Linux...
Linux Kenel 2.6.37-rc1 - serial_core TIOCGICOUNT Leak
Linux Kenel 2.6.37-rc1 - serialcore TIOCGICOUNT Leak / Linux include include include include include include int mainint argc, char argv int fd, ret = 0, i; struct serialicounterstruct buffer; printf" Linux = 2.6.37-rc1 serialcore TIOCGICOUNT leak exploit\n"; ifargc 2 printf" You need to supply a...
kernel: orinoco: fix TKIP countermeasure behaviour
The orinocoioctlsetauth function in drivers/net/wireless/orinoco/wext.c in the Linux kernel before 2.6.37 does not properly implement a TKIP protection mechanism, which makes it easier for remote attackers to obtain access to a Wi-Fi network by reading Wi-Fi frames...
Linux Kernel "fs/partitions/ldm.c"缓冲区溢出和拒绝服务漏洞
BUGTRAQ ID: 46512 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的"fs/partitions/ldm.c"在实现上存在缓冲区溢出和拒绝服务漏洞，攻击者可利用此漏洞执行任意代码、提升权限、泄露敏感信息和造成拒绝服务。 不管是否启用了自动分区，Kernel自动评估存储设备分区表。评估MAC和LDM分区表的代码包含下列漏洞： 1、fs/partitions/mac.c中的macpartition存在缓冲区溢出漏洞导致通过破坏的MAC分区表造成拒绝服务。...
Linux Kernel "hci_uart_tty_open()"本地拒绝服务漏洞
BUGTRAQ ID: 45014 CVE ID: CVE-2010-4242 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在实现上存在本地拒绝服务漏洞，本地攻击者可利用此漏洞造成Kernel崩溃，拒绝服务合法用户。 此问题源于hciuartttyopen未检查tty是否具有write op。 Linux kernel 2.6.0-2.6.37 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...
CVE-2010-3876
net/packet/afpacket.c in the Linux kernel before 2.6.37-rc2 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAPNETRAW capability to read copies of the applicable structures...
PT-2011-1445 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.37-rc2 Description: The issue concerns the ax25 getname function in the Linux kernel, which fails to initialize a certain structure. This allows local users to potentially obtain sensitive information from...