Oracle DataDirect ODBC Drivers HOST Attribute arsqls24.dll Stack Based Buffer Overflow PoC

No description provided by source. ?php / Oracle DataDirect ODBC Drivers HOST Attribute arsqls24.dll Stack Based Buffer Overflow PoC .oce by rgod found a local vector for this: http://retrogod.altervista.org/9sgoracledatadirect.htm http://www.exploit-db.com/exploits/18007/ This poc will create a...

Linux Kernel 2.0.x/2.2.x/2.4.x,FreeBSD 4.x Network Device Driver Frame Padding Information Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/6535/info Network device drivers for several vendors have been reported to disclose potentially sensitive information to attackers. Frames that are smaller than the minimum frame size should have the unused portion of the...

Cisco ASA < 8.4.4.6 & 8.2.5.32 - Ethernet Information Leak

No description provided by source. !/usr/bin/env python CVE-2003-0001 'Etherleak' exploit ================================= Exploit for hosts which use a network device driver that pads ethernet frames with data which vary from one packet to another, likely taken from kernel memory, system memory...

FreeBSD 8.0 - Local Denial of Service (forced reboot)

No description provided by source. Exploit Title: FreeBSD local denial of service - forced reboot Date: 28. January 2011 Author: Kingcope Software Link: http://www.freebsd.org Operating System: FreeBSD Tested on: 8.0-RELEASE This source code when compiled and executed will reboot at least FreeBSD...

NVidia Display Driver Service (Nsvr) Exploit

No description provided by source. / NVidia Display Driver Service Nsvr Exploit - Christmas 2012 - Bypass DEP + ASLR + /GS + CoE ============================================================= @peterwintrsmith Initial release 25/12/12 Update 25/12/12 - Target for 30 Aug 2012 nvvsvc.exe Build - than...

CentOS 6 : dovecot (CESA-2014:0790)

Updated dovecot packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

CVE-2014-4027

The rdbuilddevicespace function in drivers/target/targetcorerd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from ramdiskmcp memory by leveraging access to a SCSI initiator...

CVE-2014-4027

The rdbuilddevicespace function in drivers/target/targetcorerd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from ramdiskmcp memory by leveraging access to a SCSI initiator...

Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2014-3043)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3043 advisory. - fix autofs/afs/etc. magic mountpoint breakage Al Viro Orabug: 19028505 CVE-2014-0203 - SELinux: Fix kernel BUG on empty security contexts. Stephe...

openSUSE Security Update : kernel (openSUSE-SU-2013:0923-1)

The openSUSE 12.3 kernel was updated to fix various security issues and bugs : - config.conf: Disable armv7hl/u8500 until it builds again - patches.fixes/ocfs2-Fix-oops-in-ocfs2fastsymlinkreadp age: ocfs2: Fix oops in ocfs2fastsymlinkreadpage code path - drm/nouveau: Fix typo in initidxaddrlatche...

openSUSE Security Update : kernel (openSUSE-SU-2011:0004-1)

The openSUSE 11.3 kernel was updated to fix various bugs and security issues. Following security issues have been fixed: CVE-2010-4347: A local user could inject ACPI code into the kernel via the world-writable 'customdebug' file, allowing local privilege escalation. CVE-2010-4258: A local attack...

openSUSE Security Update : kernel (openSUSE-SU-2011:0861-1)

The openSUSE 11.3 kernel was updated to 2.6.34.10 to fix various bugs and security issues. Following security issues have been fixed: CVE-2011-2495: The /proc/PID/io interface could be used by local attackers to gain information on other processes like number of password characters typed or...

openSUSE Security Update : Mesa (openSUSE-SU-2013:1188-1)

Mesa was updated to fix a security problem in the Intel drivers, where potentially remote attackers via 3D models could inject code. CVE-2013-1872 - i965: fix problem with constant out of bounds access bnc 828007. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

openSUSE Security Update : python-cupshelpers (openSUSE-SU-2011:1331-2)

This update fixes a typo from the previous update : system-config-printer used an unauthenticated connection when downloading printer drivers from openprinting.org CVE-2011-4405. This update disables the printer driver download feature. system-config-printer did not properly quote shell meta...

Qemu: block: multiple integer overflow flaws

Multiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users to cause a denial of service crash via a crafted catalog size in 1 the parallelsopen function in block/parallels.c or 2 bochsopen function in bochs.c, a large L1 table in the 3 qcow2snapshotloadtmp i...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2014-3022)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3022 advisory. - aacraid: missing capable check in compat ioctl Dan Carpenter Orabug: 18721962 CVE-2013-6383 Tenable has extracted the preceding description block...

CVE-2014-1738

The rawcmdcopyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from kernel heap memory by leveraging write access to...

CVE-2014-1738

The rawcmdcopyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from kernel heap memory by leveraging write access to...

NVidia drivers privilege escalation

Privilege escalation via X.Org drivers...

Qemu: block: multiple integer overflow flaws

Multiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users to cause a denial of service crash via a crafted catalog size in 1 the parallelsopen function in block/parallels.c or 2 bochsopen function in bochs.c, a large L1 table in the 3 qcow2snapshotloadtmp i...