DESlock+ 4.0.2 dlpcrypt.sys Local Kernel ring0 Code Execution Exploit

Exploit for unknown platform in category local exploits ===================================================================== DESlock+ 4.0.2 dlpcrypt.sys Local Kernel ring0 Code Execution Exploit ===================================================================== / deslock-dlpcrypt.c DESlock+...

DESlock+ 4.0.2 - dlpcrypt.sys Local Kernel Ring0 Code Execution

DESlock+ 4.0.2 - dlpcrypt.sys Local Kernel Ring0 Code Execution / deslock-dlpcrypt.c Copyright c 2009 by DESlock+ 4.0.2 local kernel SYSTEM exploit by mu-b - Thu 18 Jun 2009 - Tested on: dlpcrypt.sys 0.1.1.27 .text:0001BB2E: 'what do ya want for nothing?' - hmmm, something that doesn't pass kerne...

DESlock+ 4.0.2 - 'dlpcrypt.sys' Local Kernel Ring0 Code Execution

/ deslock-dlpcrypt.c Copyright c 2009 by DESlock+ 4.0.2 local kernel SYSTEM exploit by mu-b - Thu 18 Jun 2009 - Tested on: dlpcrypt.sys 0.1.1.27 .text:0001BB2E: 'what do ya want for nothing?' - hmmm, something that doesn't pass kernel mode pointers between kernel and userland? Compile: MinGW +...

CVE-2008-4363

DLMFENC.sys 1.0.0.28 in DESlock+ 3.2.7 allows local users to cause a denial of service system crash or potentially execute arbitrary code via a certain DLMFENCIOCTL request to \.\DLKPFSDDevice that overwrites a pointer, probably related to use of the ProbeForRead function when ProbeForWrite was...

CVE-2008-4362

The Virtual Token driver vdlptokn.sys 1.0.2.43 in DESlock+ 3.2.7 allows local users to cause a denial of service system crash via a crafted IOCTL request to \Device\DLPTokenWalter0...

Design/Logic Flaw

DLMFENC.sys 1.0.0.28 in DESlock+ 3.2.7 allows local users to cause a denial of service system crash or potentially execute arbitrary code via a certain DLMFENCIOCTL request to \.\DLKPFSDDevice that overwrites a pointer, probably related to use of the ProbeForRead function when ProbeForWrite was...

Design/Logic Flaw

The Virtual Token driver vdlptokn.sys 1.0.2.43 in DESlock+ 3.2.7 allows local users to cause a denial of service system crash via a crafted IOCTL request to \Device\DLPTokenWalter0...

CVE-2008-4363

CVE-2008-4363 affects DESlock+ 3.2.7 with DLMFENC.sys 1.0.0.28. A vulnerability exists in a DLMFENC_IOCTL to the device path \./DLKPFSD_Device that likely overwrites a pointer due to a misused ProbeForRead/ProbeForWrite pairing. The consequence is local denial of service (system crash) and potent...

CVE-2008-4362

The Virtual Token driver vdlptokn.sys 1.0.2.43 in DESlock+ 3.2.7 allows local users to cause a denial of service system crash via a crafted IOCTL request to \Device\DLPTokenWalter0...

CVE-2008-4362

The CVE-2008-4362 entry concerns the DESlock+ product (Virtual Token driver vdlptokn.sys 1.0.2.43) and CVE details confirm that local users can trigger a denial-of-service (system crash) via a crafted IOCTL to the device path \Device\DLPTokenWalter0. Public records (NVD/NVD-derived and CVE lists)...

CVE-2008-4362: Undefined Security Weakness

The Virtual Token driver vdlptokn.sys 1.0.2.43 in DESlock+ 3.2.7 allows local users to cause a denial of service system crash via a crafted IOCTL request to \Device\DLPTokenWalter0...

CVE-2008-4363: Improper Input Validation

DLMFENC.sys 1.0.0.28 in DESlock+ 3.2.7 allows local users to cause a denial of service system crash or potentially execute arbitrary code via a certain DLMFENCIOCTL request to \.\DLKPFSDDevice that overwrites a pointer, probably related to use of the ProbeForRead function when ProbeForWrite was...

DESlock+本地缓冲区溢出和拒绝服务漏洞

BUGTRAQ ID: 31273 CNCAN ID：CNCAN-2008092303 DESlock+是一款对文件和文件夹进行加密的设备。 DESlock+存在多个安全问题，本地攻击者可以利用漏洞对系统进行拒绝服务攻击或可提升特权。 -"DLMFENC.sys"驱动存在竞争条件和逻辑错误，可导致系统崩溃或以SYSTEM权限执行任意代码。 -"vdlptokn.sys"存在一个输入错误可导致系统崩溃。 Data Encryption Systems DESlock+ 3.2.7 Data Encryption Systems DESlock+ 3.2.6 目前没有解决方案提供：...

deslockvldptokn-dos.txt

//////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | Data Encryption Systems Ltd. - http://www.deslock.com/ | // // | Data Encryption Systems DESlock+ - 3.2.7 | // /...

DESlock+ 3.2.7 - vdlptokn.sys Local Denial of Service

DESlock+ 3.2.7 - vdlptokn.sys Local Denial of Service //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | Data Encryption Systems Ltd. - http://www.deslock.com/ | /...

DESlock+ 3.2.7 (vdlptokn.sys) Local Denial of Service Exploit

No description provided by source. //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | Data Encryption Systems Ltd. - http://www.deslock.com/ | // // | Data...

DESlock+ 3.2.7 (vdlptokn.sys) Local Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================= DESlock+ 3.2.7 vdlptokn.sys Local Denial of Service Exploit =============================================================...

DESlock+ <= 3.2.7 Local Kernel Race Condition Denial of Service PoC

No description provided by source. / deslock-probe-race.c Copyright c 2008 by [email protected] DESlock+ = 3.2.7 local kernel race condition DoS POC by mu-b - Fri 22 Feb 2008 - Tested on: DLMFENC.sys 1.0.0.28 race conditions between calls to ProbeForRead/ProbeForWrite and pointer use. "Note tha...

DESlock+ <= 3.2.7 (probe read) Local Kernel Denial of Service PoC

No description provided by source. / deslock-probe-read.c Copyright c 2008 by [email protected] DESlock+ = 3.2.7 local kernel DoS POC by mu-b - Sat 19 Jul 2008 - Tested on: DLMFENC.sys 1.0.0.28 call to ProbeForRead with a user-definable address that is eventually overwritten should have been...

DESlock+ <= 3.2.7 Local Kernel Overflow PoC

No description provided by source. / deslock-overflow.c Copyright c 2008 by [email protected] DESlock+ = 3.2.7 local kernel overflow POC by mu-b - Sat 23 Feb 2008 - Tested on: DLMFENC.sys 1.0.0.28 http://www.cctmark.gov.uk/CCTMAwards/DataEncryptionSystemsLtd/tabid/103/Default.aspx - I wonder wh...