DESlock+ <= 3.2.6 DLMFDISK.sys local kernel ring0 SYSTEM Exploit

No description provided by source. / deslock-pown-v2.c Copyright c 2008 by [email protected] DESlock+ = 3.2.6 local kernel ring0 SYSTEM exploit by mu-b - Wed 26 Dec 2007 - Tested on: DLMFDISK.sys 1.2.0.27 - Microsoft Windows 2003 SP2 - Microsoft Windows XP SP2 Note: create a mountable filesyste...

Design/Logic Flaw

DESlock+ 3.2.6 and earlier, when DLMFENC.sys 1.0.0.26 and DLMFDISK.sys 1.2.0.27 are present, allows local users to gain privileges via a certain DLMFENCIOCTL request to \.\DLKPFSDDevice that overwrites a pointer, aka the "ring0 link list zero SYSTEM" vulnerability...

CVE-2008-1139

DESlock+ 3.2.6 and earlier, when DLMFENC.sys 1.0.0.26 and DLMFDISK.sys 1.2.0.27 are present, allows local users to gain privileges via a certain DLMFENCIOCTL request to \.\DLKPFSDDevice that overwrites a pointer, aka the "ring0 link list zero SYSTEM" vulnerability...

CVE-2008-1140

DLMFDISK.sys 1.2.0.27 in DESlock+ 3.2.6 and earlier allows local users to gain privileges via a certain DLKFDISKIOCTL request to \.\DLKFDiskControl that overwrites a data structure associated with a mounted pseudo-filesystem, aka the "ring0 SYSTEM" vulnerability...

CVE-2008-1140

The CVE-2008-1140 entry describes a local privilege-escalation in DESlock+ prior to 3.2.7 due to a flaw in the DLMFDISK.sys kernel driver (version 1.2.0.27). Exploitation involves a specific DLKFDISK_IOCTL to .\DLKFDisk_Control that overwrites a data structure associated with a mounted pseudo-fil...

CVE-2008-1140

DLMFDISK.sys 1.2.0.27 in DESlock+ 3.2.6 and earlier allows local users to gain privileges via a certain DLKFDISKIOCTL request to \.\DLKFDiskControl that overwrites a data structure associated with a mounted pseudo-filesystem, aka the "ring0 SYSTEM" vulnerability...

CVE-2008-1140: Undefined Security Weakness

DLMFDISK.sys 1.2.0.27 in DESlock+ 3.2.6 and earlier allows local users to gain privileges via a certain DLKFDISKIOCTL request to \.\DLKFDiskControl that overwrites a data structure associated with a mounted pseudo-filesystem, aka the "ring0 SYSTEM" vulnerability...

CVE-2008-1139: Undefined Security Weakness

DESlock+ 3.2.6 and earlier, when DLMFENC.sys 1.0.0.26 and DLMFDISK.sys 1.2.0.27 are present, allows local users to gain privileges via a certain DLMFENCIOCTL request to \.\DLKPFSDDevice that overwrites a pointer, aka the "ring0 link list zero SYSTEM" vulnerability...

DESlock+ 3.2.6 - DLMFDISK.sys Local kernel Ring0 SYSTEM

DESlock+ 3.2.6 - DLMFDISK.sys Local kernel Ring0 SYSTEM / deslock-pown-v2.c Copyright c 2008 by DESlock+ include include include define DLKFDISKIOCTL 0x80002024 define DLKFDISKRIOCTL 0x80002010 define DLKFDISKSLOT 0x00000C5A define DLKFDISKOFFSET 0x0D define DLKFDISKDISKMAX 0x1A static unsigned...

DESlock+ <= 3.2.6 DLMFDISK.sys local kernel ring0 SYSTEM Exploit

Exploit for unknown platform in category local exploits ================================================================ DESlock+ DESlock+ include include include define DLKFDISKIOCTL 0x80002024 define DLKFDISKRIOCTL 0x80002010 define DLKFDISKSLOT 0x00000C5A define DLKFDISKOFFSET 0x0D define...

DESlock+ < 3.2.6 - Local Kernel Ring0 link list zero SYSTEM

/ deslock-list-zero-v2.c Copyright c 2008 by DESlock+ include include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xC001D00D define DLKFDISKRIOCTL 0x80002008 define DLKFDISKSLOT 0x00000C5C define ARGSIZEa a/sizeof void static unsigned char win32fixup = "\x53" "\xeb\x0e" / fixupcopy ...