Linux/ARM - creat("/root/pwned", 0777) Shellcode (39 bytes)

Linux/ARM - creat"/root/pwned", 0777 Shellcode 39 bytes. Shellcode exploit for ARM platform / Title : Linux/ARM - creat"/root/pwned", 0777 - 39 bytes Date : 2013-09-04 Author : gunslinger yuda at cr0security dot com Tested on : ARM1176 rev6 v6l An ARM Hardcoded Shellcode without 0x20, 0x0a, and...

Linux Kernel空指针引用本地拒绝服务漏洞(CVE-2013-5634)

BUGTRAQ ID: 61995 CVECAN ID: CVE-2013-5634 Linux Kernel是Linux操作系统的内核。 适用于ARM平台、支持CONFIGKVM的Linux kernel在KVM设备上执行ioctlKVMGETREGLIST调用时没有首先正确初始化vCPU，存在空指针引用漏洞，本地攻击者可利用此漏洞造成内核崩溃。 0 Linux kernel 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

CVE-2013-4254

The validateevent function in arch/arm/kernel/perfevent.c in the Linux kernel before 3.10.8 on the ARM platform allows local users to gain privileges or cause a denial of service NULL pointer dereference and system crash by adding a hardware event to an event group led by a software event...

DEBIAN-CVE-2013-4254

The validateevent function in arch/arm/kernel/perfevent.c in the Linux kernel before 3.10.8 on the ARM platform allows local users to gain privileges or cause a denial of service NULL pointer dereference and system crash by adding a hardware event to an event group led by a software event...

Null pointer dereference

The validateevent function in arch/arm/kernel/perfevent.c in the Linux kernel before 3.10.8 on the ARM platform allows local users to gain privileges or cause a denial of service NULL pointer dereference and system crash by adding a hardware event to an event group led by a software event...

CVE-2013-4254

The validateevent function in arch/arm/kernel/perfevent.c in the Linux kernel before 3.10.8 on the ARM platform allows local users to gain privileges or cause a denial of service NULL pointer dereference and system crash by adding a hardware event to an event group led by a software event...

CVE-2013-4254

The validateevent function in arch/arm/kernel/perfevent.c in the Linux kernel before 3.10.8 on the ARM platform allows local users to gain privileges or cause a denial of service NULL pointer dereference and system crash by adding a hardware event to an event group led by a software event...

CVE-2013-4254

The CVE-2013-4254 issue affects the Linux kernel on ARM where the validate_event function in arch/arm/kernel/perf_event.c before 3.10.8 can be triggered by adding a hardware event to an event group led by a software event, allowing local privilege escalation or causing a NULL pointer dereference ...

PT-2013-4908 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.9.5 Description: The issue allows local users to cause a denial of service, resulting in a system crash. This occurs via vectors involving an attempted register access that triggers an unexpected value in the...

PT-2013-4919 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.10.8 Description: The issue allows local users to gain privileges or cause a denial of service, resulting in a system crash due to a NULL pointer dereference. This is achieved by adding a hardware event to an...

UBUNTU-CVE-2013-4254

The validateevent function in arch/arm/kernel/perfevent.c in the Linux kernel before 3.10.8 on the ARM platform allows local users to gain privileges or cause a denial of service NULL pointer dereference and system crash by adding a hardware event to an event group led by a software event...

CVE-2013-4254

The validateevent function in arch/arm/kernel/perfevent.c in the Linux kernel before 3.10.8 on the ARM platform allows local users to gain privileges or cause a denial of service NULL pointer dereference and system crash by adding a hardware event to an event group led by a software event...

Windows RT ARM Bind Shell (Port 4444)

; Title: Windows RT ARM Bind Shell Port 4444 ; Date: July 28, 2013 ; Author: Matthew Graeber @mattifestation ; Blog post: http://www.exploit-monday.com/2013/07/WinRT-ARM-Shellcode.html ; Tested on: Microsoft Surface RT Tablet w/ Windows RT 6.2.9200 ; License: BSD 3-Clause ; Syntax: MASM ; Notes: ...

Windows RT ARM - Bind Shell Port 4444

Windows RT ARM - Bind Shell Port 4444. Shellcode exploit for arm platform ; Title: Windows RT ARM Bind Shell Port 4444 ; Date: July 28, 2013 ; Author: Matthew Graeber @mattifestation ; Blog post: http://www.exploit-monday.com/2013/07/WinRT-ARM-Shellcode.html ; Tested on: Microsoft Surface RT Tabl...

Fedora 18 : java-1.7.0-openjdk-1.7.0.25-2.3.10.3.fc18 (2013-11285)

Updated to latest IcedTea7-forest 2.3.10 - arm tarball updated to 2.1.9 - build bumped to 25 - temporarly swithced to intree lcms as it have security fixes patch 500 - added GENSRCDIR='$PWD/generated.build' to be able to - removed buildrequires lcms2-devel - this update is known to break...

Fedora 17 : java-1.7.0-openjdk-1.7.0.25-2.3.10.3.fc17 (2013-11281)

Updated to latest IcedTea7-forest 2.3.10 - arm tarball updated to 2.1.9 - build bumped to 25 - temporarly swithced to intree lcms as it have security fixes patch 500 - added GENSRCDIR='$PWD/generated.build' to be able to - removed buildrequires lcms2-devel Note that Tenable Network Security has...

Fedora 18 : qemu-1.2.2-13.fc18 (2013-11407)

Don't install conflicting binfmt handler on arm bz 974804 - Fix building docs with f19 texinfo - CVE-2013-2007: Fix qemu-ga file creation permissions bz 956082, bz 969455 - Fix rtl8139 + windows 7 + large transfers bz 970240 Note that Tenable Network Security has extracted the preceding...

Fedora 19 : java-1.7.0-openjdk-1.7.0.25-2.3.10.3.fc19 (2013-11257)

Updated to latest IcedTea7-forest 2.3.10 - arm tarball updated to 2.1.9 - build bumped to 25 - All full-paths now have arch - temporarly swithced to intree lcms as it have security fixes patch 500 - added GENSRCDIR='$PWD/generated.build' to be able to - removed buildrequires lcms2-devel - this...

kernel: security and bugfix update (critical)

The openSUSE 12.2 kernel was updated to fix security issue and other bugs. Security issues fixed: CVE-2013-2850: Incorrect strncpy usage in the network listening part of the iscsi target driver could have been used by remote attackers to crash the kernel or execute code. This required the iscsi...

kernel: security and bugfix update (critical)

The openSUSE 12.3 kernel was updated to fix a critical security issue, other security issues and several bugs. Security issues fixed: CVE-2013-2094: The perfsweventinit function in kernel/events/core.c in the Linux kernel used an incorrect integer data type, which allowed local users to gain...