58 matches found
Linux Kernel local privilege escalation via SUID /proc/pid/mem write
Overview Linux kernel = 2.6.39 incorrectly handles the permissions for /proc//mem. A local, authenticated attacker could exploit this vulnerability to escalate to root privileges. Exploit code is available in the wild and there have been reports of active exploitation. Description /proc//mem is a...
Linux kernels >=2.6.39 local root exploit 0day-vulnerability warning-the black bar safety net
This is absolutely awesome, and 2.6.39 on top of the kernel all the presence of this vulnerability. Original source http://blog. zx2c4. com/7 4 9, The 利用 代码 可 在 这里 找到 http://www.dis9.com/code/mempodipper-CVE-2012-0056.c.html the. The use of the/proc/pid/mem write,/poc file system is a virtual fil...
Linux Kernel 2.6.39 < 3.2.2 (x86/x64) - 'Mempodipper' Local Privilege Escalation (2)
/ Exploit code is here: http://git.zx2c4.com/CVE-2012-0056/plain/mempodipper.c Blog post about it is here: http://blog.zx2c4.com/749 / / Mempodipper by zx2c4 Linux Local Root Exploit Rather than put my write up here, per usual, this time I've put it in a rather lengthy blog post:...
kernel: proc: fix oops on invalid /proc/<pid>/maps access
The mstop function in fs/proc/taskmmu.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service OOPS via vectors that trigger an mstart error...
PT-2012-1728 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39 Description: The issue allows local users to cause a denial of service via vectors that trigger an m start error in the m stop function. Recommendations: For versions prior to 2.6.39, update to version...
kernel: b43: allocate receive buffers big enough for max frame len + offset
The dmarx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service system crash via a crafted frame...
PT-2012-1693 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39 Description: The issue is related to the handling of DFS referrals by the setup cifs sb function in the Linux kernel. Remote CIFS servers can cause a denial of service, leading to a system crash, by placi...
PT-2012-1691 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39 Description: The issue is related to the dma rx function in the Linux kernel, which does not properly allocate receive buffers. This can be exploited by remote attackers to cause a denial of service,...
Matriux Krypton security distribution Released
Matriux Krypton security distribution Released The Matriux is a fully featured security distribution consisting of a bunch of powerful, open source and free tools that can be used for various purposes including, but not limited to, penetration testing, ethical hacking, system and network...
PT-2013-1390 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39 Description: The issue allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call. This is due to a flaw in the kernel/signal.c file in the Linux kernel. Recommendations...
Linux Kernel "ip_expire()"拒绝服务漏洞
CVE ID：CVE-2011-1927 Linux是一款开放源代码的操作系统。 net/ipv4/ipfragment.c提供的"ipexpire"函数存在错误，传递给devnet函数的参数缺少校验，向系统发送分片报文可导致由空指针引用的内核崩溃。 Linux Kernel 2.6.x 厂商解决方案 Linux Kernel 2.6.39已经修复此漏洞，建议用户下载使用： http://www.kernel.org/...
kernel: bonding: Incorrect TX queue offset
The bondselectqueue function in drivers/net/bonding/bondmain.c in the Linux kernel before 2.6.39, when a network device with a large number of receive queues is installed but the default txqueues setting is used, does not properly restrict queue indexes, which allows remote attackers to cause a...
PT-2011-2918 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39 Description: The issue allows local users to obtain potentially sensitive information from kernel memory by issuing a crafted request and then reading the argument to the resulting modprobe process. This ...
PT-2011-2917 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39 Description: The issue allows local users to obtain potentially sensitive information from kernel memory. This is achieved by leveraging the CAP NET ADMIN capability to issue a crafted request, and then...
PT-2012-1507 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39 Description: The issue allows local users to obtain potentially sensitive information from kernel stack memory. This is possible because the do replace function in net/bridge/netfilter/ebtables.c does not...
CVE-2011-1748
The rawrelease function in net/can/raw.c in the Linux kernel before 2.6.39-rc6 does not properly validate a socket data structure, which allows local users to cause a denial of service NULL pointer dereference or possibly have unspecified other impact via a crafted release operation...
PT-2011-1083 · Suse +2 · Kernel-Kdumppae +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39 kernel-kdumppae affected versions not specified Description: The issue is related to an integer overflow in the Linux kernel, specifically in the vma to resize function in mm/mremap.c, which can be...
PT-2013-6349 · Unknown +4 · Openswan-Doc +4
Name of the Vulnerable Software and Affected Versions: openswan versions prior to 2.6.39 openswan-doc affected versions not specified Description: The issue affects the confidentiality, integrity, and availability of protected information. It can be exploited remotely. Recommendations: For opensw...