325 matches found
Linux Kernel AppleTalk ATalk_Sum_SKB函数拒绝服务漏洞
Linux是一款开放源代码的操作系统。 Linux处理AppleTalk畸形报文存在问题，远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 当接收大盘比头字段描述的短的AppleTalk报文时，系统仍旧验证校验，由于长度不匹配会导致在atalksumskb函数最后会处理BUGON而导致系统崩溃。攻击者发送畸形帧可触发此漏洞。 Linux kernel 2.6.20 .4 Linux kernel 2.6.20 Linux kernel 2.6.20 Linux kernel 2.6.19 1 Linux kernel 2.6.19 .2 Linux kernel 2.6.19 .1 Lin...
CVE-2007-1357
The atalksumskb function in AppleTalk for Linux kernel 2.6.x before 2.6.21, and possibly 2.4.x, allows remote attackers to cause a denial of service crash via an AppleTalk frame that is shorter than the specified length, which triggers a BUGON call when an attempt is made to perform a checksum...
Code injection
The atalksumskb function in AppleTalk for Linux kernel 2.6.x before 2.6.21, and possibly 2.4.x, allows remote attackers to cause a denial of service crash via an AppleTalk frame that is shorter than the specified length, which triggers a BUGON call when an attempt is made to perform a checksum...
CVE-2007-1357
The atalksumskb function in AppleTalk for Linux kernel 2.6.x before 2.6.21, and possibly 2.4.x, allows remote attackers to cause a denial of service crash via an AppleTalk frame that is shorter than the specified length, which triggers a BUGON call when an attempt is made to perform a checksum...
CVE-2007-1357
The atalksumskb function in AppleTalk for Linux kernel 2.6.x before 2.6.21, and possibly 2.4.x, allows remote attackers to cause a denial of service crash via an AppleTalk frame that is shorter than the specified length, which triggers a BUGON call when an attempt is made to perform a checksum...
CVE-2007-1357
Technical details about CVE-2007-1357 are not provided in the connected documents; no affected products, root cause, or fixes are listed here. Monitor for updates.
Linux Kernel 2.6.x - AppleTalk ATalk_Sum_SKB Function Denial of Service
Linux Kernel 2.6.x - AppleTalk ATalkSumSKB Function Denial of Service source: https://www.securityfocus.com/bid/23376/info The Linux kernel is prone to a denial-of-service vulnerability. This issue presents itself when malformed AppleTalk frames are processed. An attacker can exploit this issue t...
Linux Kernel 2.6.x - AppleTalk ATalk_Sum_SKB Function Denial of Service
source: https://www.securityfocus.com/bid/23376/info The Linux kernel is prone to a denial-of-service vulnerability. This issue presents itself when malformed AppleTalk frames are processed. An attacker can exploit this issue to crash host computers, effectively denying service to legitimate user...
CVE-2007-0236
Double free vulnerability in the ATPsndrsp function in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause a denial of service kernel panic and possibly execute arbitrary code via a crafted AppleTalk request that triggers a heap-based buffer overflow...
Double free
Double free vulnerability in the ATPsndrsp function in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause a denial of service kernel panic and possibly execute arbitrary code via a crafted AppleTalk request that triggers a heap-based buffer overflow...
CVE-2007-0236
Double free vulnerability in the ATPsndrsp function in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause a denial of service kernel panic and possibly execute arbitrary code via a crafted AppleTalk request that triggers a heap-based buffer overflow...
MOAB-14-01-2007: AppleTalk ATPsndrsp() Heap Buffer Overflow Vulnerability
Summary The ATPsndrsp function is vulnerable to a heap-based buffer overflow condition, due to insufficient checking of user input. This leads to a denial of service condition and potential arbitrary code execution by unprivileged users. Remote exploitation might be possible being verified, updat...
Mac OS X 10.4.8 AppleTalk ATPsndrsp() Heap Buffer Overflow PoC
No description provided by source. / proof of concept for moab-14-01-2007 Copyright c 2006, LMH lmh at infopull.com Shout outs to: icer, kf, ilja, hd, et al. free feedback samples for public consumption: "the panic function takes a string for the reason the panic...
Mac OS X AppleTalk protocol buffer overflow
Heap buffer overflow...
Mac OS X 10.4.8 AppleTalk ATPsndrsp() Heap Buffer Overflow PoC
Exploit for macOS platform in category dos / poc ============================================================== Mac OS X 10.4.8 AppleTalk ATPsndrsp Heap Buffer Overflow PoC ============================================================== / proof of concept for moab-14-01-2007 Copyright c 2006, LMH...
Apple Mac OSX 10.4.8 - AppleTalk ATPsndrsp() Heap Buffer Overflow (PoC)
Apple Mac OSX 10.4.8 - AppleTalk ATPsndrsp Heap Buffer Overflow PoC / proof of concept for moab-14-01-2007 Copyright c 2006, LMH Shout outs to: icer, kf, ilja, hd, et al. free feedback samples for public consumption: "the panic function takes a string for the reason the panic occurred. As you can...
Apple Mac OSX 10.4.8 - AppleTalk 'ATPsndrsp()' Heap Buffer Overflow (PoC)
/ proof of concept for moab-14-01-2007 Copyright c 2006, LMH Shout outs to: icer, kf, ilja, hd, et al. free feedback samples for public consumption: "the panic function takes a string for the reason the panic occurred. As you can see from the above, the reason us due to the fact the buffer size i...
Apple Mac OS X AppleTalk 本地内存破坏漏洞
Apple Mac OS X是一款基于BSD的操作系统。 Apple Mac OS X AppleTalk存在一个内存错误，本地攻击者可以利用漏洞使系统崩溃，或执行任意指令。 问题存在于AIOCREGLOCALZN ioctl命令不正确验证输入数据，非特权用户可以打开一个AppleTalk套接字，通过特殊构建的数据结构发送ioctl控制命令来触发。 Apple Mac OS X Server 10.4.8 Apple Mac OS X 10.4.8 目前没有详细解决方案提供： http://www.apple.com/macosx/ / Copyright 2006 c LMH...