applesmb-overflow.txt

/ Copyright C 2007-2008 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: CVE-2007-3876 http://docs.info.apple.com/article.html?artnum=307179 http://seclists.org/fulldisclosure/2007/Dec/0445.html...

SOL8171 - Linux kernel IA32 System Call vulnerability - CVE-2007-4573

Vulnerability description This security advisory describes a vulnerability in the Linux kernel which may allow local users to gain elevated privileges using the IA32 system call emulation functionality on 64-bit platforms. Information about this advisory is available at the following location:...

Apple Mac OS X mount_smbfs Stack Based Buffer Overflow Exploit

Exploit for macOS platform in category local exploits ============================================================== Apple Mac OS X mountsmbfs Stack Based Buffer Overflow Exploit ============================================================== / Copyright C 2007-2008 Subreption LLC. All rights...

Apple Mac OSX - mount_smbfs Local Stack Buffer Overflow

Apple Mac OSX - mountsmbfs Local Stack Buffer Overflow / Copyright C 2007-2008 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: CVE-2007-3876 http://docs.info.apple.com/article.html?artnum=307179...

Microsoft Windows Vista内核ALPC本地特权提升漏洞

Microsoft Windows Vista是一款微软开发的操作系统。 Microsoft Windows Vista内核包含的高级本地过程调用ALPC不正确处理部分访问请求，本地攻击者可以利用漏洞提升特权，获得系统管理员权限。 目前没有详细漏洞细节提供 Microsoft Windows Vista Ultimate 64-bit edition 0 Microsoft Windows Vista Home Premium 64-bit edition 0 Microsoft Windows Vista Home Basic 64-bit edition 0 Microsoft...

Sun Solaris LX(5) Branded Zones本地拒绝服务漏洞

BUGTRAQ ID: 26672 CNCAN ID:CNCAN-2007120303 Sun Solaris是一款商业性质的操作系统。 Sun Solaris包含的Linx branded zone see lx5存在竞争条件错误，本地攻击者可以利用漏洞对系统进行拒绝服务攻击。 目前没有详细漏洞细节供。此问题仅存在于运行在64-bit系统上的Sun Solaris 10。 Sun Solaris 10x86 厂商解决方案 可采用Solaris 10 patch 127112-04：...

Microsoft Visual C++ 8.0 standard library time functions invalid assertion DoS (Problem 3000)

Title: Microsoft Visual C++ 8.0 standard library time functions invalid assertion DoS Problem 3000. Product: Visual Studio 2005 Vendor: Microsoft Vulnerability class: Denial of Service Remote: application dependant, remote vector is possible CVE: CVE-2007-0842 Author: 3APA3A,...

HP-UX PHSS_36311 : HP-UX Running Aries PA Emulator, Local Unauthorized Access (HPSBUX02285 SSRT071484 rev.1)

s700800 11.31 Aries cumulative patch : A potential security vulnerability has been identified in the Aries PA-RISC emulation software running on HP-UX IA-64 platforms only. This vulnerability may allow local unauthorized access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

CVE-2007-5946

Unspecified vulnerability in the Aries PA-RISC emulator on HP-UX B.11.23 and B.11.31 on the IA-64 platform allows local users to obtain unspecified access...

CVE-2007-5946

The CVE-2007-5946 entry concerns the Aries PA-RISC PA Emulator on HP-UX IA-64 (B.11.23/11.31). It indicates a local unauthorized access vulnerability in the Aries PA Emulator. HP patches PHSS_35528 (for 11.23) and PHSS_36311 (for 11.31) address this issue, with corresponding OpenVAS/Nessus refere...

Ubuntu 5.04 / 5.10 / 6.06 LTS : linux-source-2.6.10/-2.6.12/-2.6.15 vulnerabilities (USN-311-1)

A race condition was discovered in the doaddcounters functions. Processes which do not run with full root privileges, but have the CAPNETADMIN capability can exploit this to crash the machine or read a random piece of kernel memory. In Ubuntu there are no packages that are affected by this, so th...

kernel security update

CentOS Errata and Security Advisory CESA-2007:0939 Updated kernel packages that fix various security issues in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel is the cor...

RHEL 4 : kernel (RHSA-2007:0939)

Updated kernel packages that fix various security issues in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel is the core of the operating system. These updated kernel...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix various security issues in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel is the core of the operating system. These updated kernel...

RHEL 5 : kernel (RHSA-2007:0940)

Updated kernel packages that fix various security issues in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. These ne...

CVE-2007-4574

Unspecified vulnerability in the "stack unwinder fixes" in kernel in Red Hat Enterprise Linux 5, when running on AMD64 and Intel 64, allows local users to cause a denial of service via unknown vectors...

CVE-2007-4574

Unspecified vulnerability in the "stack unwinder fixes" in kernel in Red Hat Enterprise Linux 5, when running on AMD64 and Intel 64, allows local users to cause a denial of service via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the "stack unwinder fixes" in kernel in Red Hat Enterprise Linux 5, when running on AMD64 and Intel 64, allows local users to cause a denial of service via unknown vectors...

CVE-2007-4574

CVE-2007-4574 affects the Red Hat Enterprise Linux 5 kernel on AMD64/Intel 64, stemming from a flaw in the backported stack unwinder fixes that could allow a local user to cause a denial of service. Public sources (RHSA-2007-0940 and CESA-2007-0940) describe kernel updates for RHEL5/CentOS to mit...

CVE-2007-4574

Unspecified vulnerability in the "stack unwinder fixes" in kernel in Red Hat Enterprise Linux 5, when running on AMD64 and Intel 64, allows local users to cause a denial of service via unknown vectors...