RedHat Security Advisory RHSA-2009:1438

The remote host is missing updates to the Linux kernel announced in advisory RHSA-2009:1438. This update fixes the following security issues: the ADDRCOMPATLAYOUT and MMAPPAGEZERO flags were not cleared when a setuid or setgid program was executed. A local, unprivileged user could use this flaw t...

GemStone/S 6.3.1 (stoned) Local Buffer Overflow Exploit

No description provided by source. / wonderfulcaricatureofexploitability.c AKA GemStone/S 6.3.1 "stoned" Local Buffer Overflow Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.07.2009 Gemstone/S "stoned" suffers from a local buffer overflow when parsing input...

GemStoneS 6.3.1 - stoned Local Buffer Overflow

GemStoneS 6.3.1 - stoned Local Buffer Overflow / wonderfulcaricatureofexploitability.c AKA GemStone/S 6.3.1 "stoned" Local Buffer Overflow Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.07.2009 Gemstone/S "stoned" suffers from a local buffer overflow when...

HTMLDOC 1.8.27 - '.html' File Handling Stack Buffer Overflow

/ HTMLDOC 'html' File Handling Remote Stack Buffer Overflow Exploit Linux Reference: https://www.securityfocus.com/bid/35727 Tested on HTMLDOC 1.8.27 on Debian 5.0 +ASLR Credit: ANTHRAX666 for finding the vulnerability Coded by Pankaj Kohli http://www.pank4j.com pankaj@zion:/test/htmldoc$ cat...

GemStone/S 6.3.1 - 'stoned' Local Buffer Overflow

/ wonderfulcaricatureofexploitability.c AKA GemStone/S 6.3.1 "stoned" Local Buffer Overflow Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.07.2009 Gemstone/S "stoned" suffers from a local buffer overflow when parsing input either from the "-e" or "-l" flags,...

GemStone/S 6.3.1 "stoned" Local Buffer Overflow Exploit

/ wonderfulcaricatureofexploitability.c AKA GemStone/S 6.3.1 "stoned" Local Buffer Overflow Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.07.2009 Gemstone/S "stoned" suffers from a local buffer overflow when parsing input either from the "-e" or "-l" flags,...

BlazeDVD 5.1 Professional (.PLF File) Local BOF Exploit (SEH) (xp/vista)

No description provided by source. Vulnerability : BlazeDVD 5.1 Professional .PLF File Local BOF SEH Universal for XP and Vista Detected by : hack4love http://www.milw0rm.com/exploits/9329 Sploit coded by : corelanc0d3r corelanc0d3ratgmaildotcom Sploit coded on : August 23rd 2009 Type : local OS ...

BlazeDVD 5.1 Professional Buffer Overflow

Vulnerability : BlazeDVD 5.1 Professional .PLF File Local BOF SEH Universal for XP and Vista Detected by : hack4love http://www.milw0rm.com/exploits/9329 Sploit coded by : corelanc0d3r corelanc0d3ratgmaildotcom Sploit coded on : August 23rd 2009 Type : local OS : Windows Product : BlazeDVD 5.1...

BlazeDVD 5.1 Professional (.PLF File) Local BOF Exploit (SEH) (xp/vista)

Exploit for unknown platform in category local exploits ======================================================================== BlazeDVD 5.1 Professional .PLF File Local BOF Exploit SEH xp/vista ======================================================================== Vulnerability : BlazeDVD 5.1...

Windows x86 null-free bindshell for Windows 5.0-7.0 all service packs

No description provided by source. BITS 32 ; Windows x86 null-free bindshell for Windows 5.0-7.0 all service packs. ; See http://skypher.com/wiki/index.php/Hacking/Shellcode/Bind/NGS. ; Based largely on code and ideas C 2005 by Dafydd Stuttard, NGS Software. ; See...

windows x86 null-free bindshell for Windows 5.0-7.0 all service packs

Exploit for win32 platform in category shellcode ===================================================================== Windows x86 null-free bindshell for Windows 5.0-7.0 all service packs ===================================================================== BITS 32 ; Windows x86 null-free...

Windows x86 null-free bindshell for Windows 5.0-6.0 all service packs

No description provided by source. BITS 32 ; Windows x86 null-free bindshell for Windows 5.0-6.0 all service packs. ; See http://skypher.com/wiki/index.php/Hacking/Shellcode/Bind/NGS. ; Based largely on code and ideas C 2005 by Dafydd Stuttard, NGS Software. ; See...

Null pointer dereference

The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PERCLEARONSETID setting that does not clear the ADDRCOMPATLAYOUT and MMAPPAGEZERO flags when executing a setuid or setgid program, which makes it easier for local users to leverage the details of memory usage to 1 conduct NULL...

CVE-2009-1895

The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PERCLEARONSETID setting that does not clear the ADDRCOMPATLAYOUT and MMAPPAGEZERO flags when executing a setuid or setgid program, which makes it easier for local users to leverage the details of memory usage to 1 conduct NULL...

CVE-2009-1895

The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PERCLEARONSETID setting that does not clear the ADDRCOMPATLAYOUT and MMAPPAGEZERO flags when executing a setuid or setgid program, which makes it easier for local users to leverage the details of memory usage to 1 conduct NULL...

CVE-2009-1895: Undefined Security Weakness

The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PERCLEARONSETID setting that does not clear the ADDRCOMPATLAYOUT and MMAPPAGEZERO flags when executing a setuid or setgid program, which makes it easier for local users to leverage the details of memory usage to 1 conduct NULL...

Linux Kernel PER_CLEAR_ON_SETID绕过安全限制漏洞

BUGTRAQ ID: 35647 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的PERCLEARONSETID mask没有包含有MMAPPAGEZERO和ADDRCOMPATLAYOUT，这可能允许本地用户绕过mmapminaddr保护，或禁用某些ASLR（地址空间布局随机化）功能。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix several security issues and various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

绿坝 3.17 URL Processing Buffer Overflow Exploit (meta)

No description provided by source. greendamurl.rb Green Dam URL Processing Buffer Overflow exploit for the Metasploit Framework Green Dam Youth Escort 3.17 successfully exploited on the following platforms: - Internet Explorer 6, Windows XP SP2 - Internet Explorer 7, Windows XP SP3 - Internet...

Green Dam 3.17 URL Processing Buffer Overflow Exploit (meta)

Exploit for windows platform in category remote exploits ============================================================ Green Dam 3.17 URL Processing Buffer Overflow Exploit meta ============================================================ greendamurl.rb Green Dam URL Processing Buffer Overflow...