CVE-2004-0602

The CVE-2004-0602 issue affects FreeBSD 4.x/5.x Linux binary compatibility mode. A programming error in handling certain Linux system calls can allow a local attacker to read/overwrite kernel memory, potentially gaining privileges or causing a system panic. Remediation in the connected docs inclu...

FreeBSD Linux compatibility subsystem privilege escalation

It's possible to access kernel memory via system calls...

CVE-2004-0513

Unspecified vulnerability in Mac OS X before 10.3.4 has unknown impact and attack vectors related to "logging when tracing system calls."...

CVE-2004-0513: Undefined Security Weakness

Unspecified vulnerability in Mac OS X before 10.3.4 has unknown impact and attack vectors related to "logging when tracing system calls."...

Linux kernel do_mremap local privilege escalation vulnerability

Background The Linux kernel is responsible for memory management in a working system - to allow this, processes are allowed to allocate and unallocate memory. Description The memory subsystem allows for shrinking, growing, and moving of chunks of memory along any of the allocated memory areas whi...

xploit_dbg.cpp.txt

/ Discovered and coded Jan 25, 2004 Copyright C2004 [email protected] / include include typedef int NTSTATUS; define NTAPI stdcall const IA32SYSENTERCS = 0x174; const IA32SYSENTERESP = 0x175; const IA32SYSENTEREIP = 0x176; const SelCodeKernel = 0x8; const CmosIndx = 0x0E; // CMOS Diagnostic...

Linux Kernel "do_mremap" Local Proof of Concept

Exploit for linux platform in category local exploits =============================================== Linux Kernel "domremap" Local Proof of Concept =============================================== / Proof-of-concept exploit code for domremap Copyright C 2004 Christophe Devine and Julien Tinnes Th...

Linux Kernel ""do_mremap"" Local Proof of Concept

No description provided by source. / Proof-of-concept exploit code for domremap Copyright C 2004 Christophe Devine and Julien Tinnes This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software...

Microsoft IIS 5.0 - Failure To Log Undocumented TRACK Requests

source: https://www.securityfocus.com/bid/9313/info A vulnerability has been reported to affect Microsoft IIS. It has been reported that IIS fails to log HTTP TRACK calls made to the affected server. A remote attacker may exploit this condition in order to enumerate server banners. TRACK / HTTP/1...

CVE-2003-0812

Stack-based buffer overflow in a logging function for Windows Workstation Service WKSSVC.DLL allows remote attackers to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file "NetSetup.LOG", as demonstrated using the NetAddAlternateComputerName API...

OpenBSD semaphores DoS

DoS on large number of sequential calls to semop with differen semids...

OpenBSD 3.33.4 - semctlsemop Local Unexpected Array Indexing

OpenBSD 3.33.4 - semctlsemop Local Unexpected Array Indexing // source: https://www.securityfocus.com/bid/9086/info A local OpenBSD kernel vulnerability has been discovered when handling the semctl and semop system calls. The problem specifically occurs due to improper sanity checking before...

CVE-2003-0812

CVE-2003-0812 corresponds to a stack-based buffer overflow in the Windows Workstation Service (WKSSVC.DLL) that can be exploited via RPC to achieve remote code execution through NetAddAlternateComputerName logging paths. Affected platforms include Windows 2000 and Windows XP (and 64‑bit edition p...

CVE-2003-0812

Stack-based buffer overflow in a logging function for Windows Workstation Service WKSSVC.DLL allows remote attackers to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file "NetSetup.LOG", as demonstrated using the NetAddAlternateComputerName API...

CVE-2003-0812: Undefined Security Weakness

Stack-based buffer overflow in a logging function for Windows Workstation Service WKSSVC.DLL allows remote attackers to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file "NetSetup.LOG", as demonstrated using the NetAddAlternateComputerName API...

Microsoft Windows - DCOM RPC2 Universal Shellcode

MS Windows DCOM RPC2 Universal Shellcode. Shellcode exploit for win32 platform ; Segment type: Pure code ;seg000 segment byte public 'CODE' use32 ; assume cs:seg000 ; assume es:nothing, ss:nothing, ds:nothing, fs:nothing, gs:nothing .386 assume cs:seg000 var29C = byte ptr -29Ch var28C = byte ptr...

Unauthorized Solaris sadmind access

It's possible to bypass authentication process by sequence of specially crafted RPC calls...

CVE-2003-0232

Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls LPC port that leads to a buffer overflow...

man-db[] multiple(4) vulnerabilities.

part 1: addtodirlist buffer overflow man-db contains a buffer overflow vulnerability do to the lack of bounds checking in multiple sscanf calls. which formats the user supplied file /.manpath. here is the functionsrc/manp.c: static void addtodirlist FILE config, int user char bp; char bufBUFSIZ;...

CVE-2003-0232

Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls LPC port that leads to a buffer overflow...