CVE-2008-0951

Microsoft Windows Vista does not properly enforce the NoDriveTypeAutoRun registry value, which allows user-assisted remote attackers, and possibly physically proximate attackers, to execute arbitrary code by inserting a 1 CD-ROM device or 2 U3-enabled USB device containing a filesystem with an...

libcdio: User-assisted execution of arbitrary code

Background libcdio is a library for accessing CD-ROM and CD images. Description Devon Miller reported a boundary error in the "printiso9660recurse" function in files cd-info.c and iso-info.c when processing long filenames within Joliet images. Impact A remote attacker could entice a user to open ...

[SECURITY] Fedora 8 Update: libcdio-0.78.2-4.fc8

This library provides an interface for CD-ROM access. It can be used by applications that need OS- and device-independent access to CD-ROM devices...

[SECURITY] Fedora 7 Update: libcdio-0.78.2-4.fc7

This library provides an interface for CD-ROM access. It can be used by applications that need OS- and device-independent access to CD-ROM devices...

Retrieve Windows Vista username and password-vulnerability warning-the black bar safety net

In Windows vista local administrator password of the hack in an article, we have introduced how to use the Elcom Soft of Proactive Password Auditor PPA to retrieve the lost or forgotten Windows Vista local administrator password, however, in relative terms, the PPA of the crack requires the user ...

Linux kernel UDF DoS

System crash on connecting device USB, CD-ROM with invalid UDF filesystem...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix a number of security issues as well as other bugs are now available for Red Hat Enterprise Linux 2.1 64 bit architectures. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the...

linux/x86 eject cd-rom follows /dev/cdrom symlink + exit 40 bytes

linux/x86 eject cd-rom follows /dev/cdrom symlink + exit 40 bytes. Shellcode exploit for linx86 platform / linux/x86 eject cd-rom follows "/dev/cdrom" symlink + exit - 40 bytes - izik / char shellcode = "\x6a\x05" // push $0x5 "\x58" // pop %eax "\x31\xc9" // xor %ecx,%ecx "\x51" // push %ecx...

linux/x86 eject cd-rom (follows /dev/cdrom symlink) + exit() 40 bytes

Exploit for linux/x86 platform in category shellcode ===================================================================== linux/x86 eject cd-rom follows /dev/cdrom symlink + exit 40 bytes ===================================================================== / linux/x86 eject cd-rom follows...

linux/x86 eject cd-rom (follows /dev/cdrom symlink) + exit() 40 bytes

No description provided by source. / linux/x86 eject cd-rom follows "/dev/cdrom" symlink + exit - 40 bytes - izik [email protected] / char shellcode = "\x6a\x05" // push $0x5 "\x58" // pop %eax "\x31\xc9" // xor %ecx,%ecx "\x51" // push %ecx "\xb5\x08" // mov $0x8,%ch "\x68\x64\x72\x6f\x6d" // push...

linux/x86 eject/close cd-rom loop follows /dev/cdrom symlink 45 bytes

linux/x86 eject/close cd-rom loop follows /dev/cdrom symlink 45 bytes. Shellcode exploit for linx86 platform / linux/x86 eject & close cd-rom frenzy loop follows "/dev/cdrom" symlink - 45 bytes - izik / char shellcode = "\x6a\x05" // push $0x5 "\x58" // pop %eax "\x31\xc9" // xor %ecx,%ecx "\x51"...

linux/x86 24/7 open cd-rom loop follows /dev/cdrom symlink 39 bytes

linux/x86 24/7 open cd-rom loop follows /dev/cdrom symlink 39 bytes. Shellcode exploit for linx86 platform / linux/x86 24/7 open cd-rom loop follows "/dev/cdrom" symlink - 39 bytes - izik / char shellcode = "\x6a\x05" // push $0x5 "\x58" // pop %eax "\x31\xc9" // xor %ecx,%ecx "\x51" // push %ecx...

linux/x86 eject/close cd-rom loop (follows /dev/cdrom symlink) 45 bytes

No description provided by source. / linux/x86 eject & close cd-rom frenzy loop follows "/dev/cdrom" symlink - 45 bytes - izik [email protected] / char shellcode = "\x6a\x05" // push $0x5 "\x58" // pop %eax "\x31\xc9" // xor %ecx,%ecx "\x51" // push %ecx "\xb5\x08" // mov $0x8,%ch...

linux/x86 24/7 open cd-rom loop (follows /dev/cdrom symlink) 39 bytes

Exploit for linux/x86 platform in category shellcode ===================================================================== linux/x86 24/7 open cd-rom loop follows /dev/cdrom symlink 39 bytes ===================================================================== / linux/x86 24/7 open cd-rom loop...

linux/x86 eject/close cd-rom loop (follows /dev/cdrom symlink) 45 bytes

Exploit for linux/x86 platform in category shellcode ======================================================================= linux/x86 eject/close cd-rom loop follows /dev/cdrom symlink 45 bytes ======================================================================= / linux/x86 eject & close cd-r...

linux/x86 24/7 open cd-rom loop (follows /dev/cdrom symlink) 39 bytes

No description provided by source. / linux/x86 24/7 open cd-rom loop follows "/dev/cdrom" symlink - 39 bytes - izik [email protected] / char shellcode = "\x6a\x05" // push $0x5 "\x58" // pop %eax "\x31\xc9" // xor %ecx,%ecx "\x51" // push %ecx "\xb5\x08" // mov $0x8,%ch "\x68\x64\x72\x6f\x6d" // pus...

Important: Red Hat Security Advisory: Updated kernel packages available for Red Hat Enterprise Linux 3 Update 6

Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 3. This is the sixth regular update. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles t...

USN-169-1: Linux kernel vulnerabilities

David Howells discovered a local Denial of Service vulnerability in the key session joining function. Under certain user-triggerable conditions, a semaphore was not released properly, which caused processes which also attempted to join a key session to hang forever. This only affects Ubuntu 5.04...

[LoWNOISE] "Get Knowledge" SunONE Starter Kit - Sun Microsystems/Astaware

LoWNOISE "Get Knowledge" SunONE Starter Kit - Sun Microsystems/Astaware by Efrain 'ET' Torres, Colombia 2002. [email protected] +Disclaimer: blah. +Product: -SunONE Starter Kit v2.0 Sun Microsystems CD-ROM Version -ASTAware SearchDisk 2002. ASTAWARE Technologies Inc. +Introduction You are one of...

Incorrect Permissions for CD-Rom Administrative Shares

Hi All. I've received tons of responses on this topic and found out why there are so many conflicting results of this problem. Our policy is to rename CD-Rom drives from the default assigned by Windows 2000 to H:, because there's less confusion when adding extra drives. The problem is this. If yo...