8077 matches found
Ethernet Device Drivers Frame Padding Info Leakage Exploit (Etherleak)
No description provided by source. !/usr/bin/perl -w etherleak, code that has been 5 years coming. On 04/27/2002, I disclosed on the Linux Kernel Mailing list, a vulnerability that would be come known as the 'etherleak' bug. In various situations an ethernet frame must be padded to reach a specif...
Ethernet Device Drivers Frame Padding - 'Etherleak' Infomation Leakage
!/usr/bin/perl -w etherleak, code that has been 5 years coming. On 04/27/2002, I disclosed on the Linux Kernel Mailing list, a vulnerability that would be come known as the 'etherleak' bug. In various situations an ethernet frame must be padded to reach a specific size or fall on a certain...
Linux Kernel 2.0.x2.2.x2.4.x (FreeBSD 4.x) - Network Device Driver Frame Padding Information Disclosure
Linux Kernel 2.0.x2.2.x2.4.x FreeBSD 4.x - Network Device Driver Frame Padding Information Disclosure source: https://www.securityfocus.com/bid/6535/info Network device drivers for several vendors have been reported to disclose potentially sensitive information to attackers. Frames that are small...
Ethernet Device Drivers Frame Padding Info Leakage Expl (Etherleak)
Exploit for multiple platform in category remote exploits ====================================================================== Ethernet Device Drivers Frame Padding Info Leakage Exploit Etherleak ====================================================================== !/usr/bin/perl -w etherleak,...
Mandrake Linux Security Advisory : kernel (MDKSA-2007:047)
Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : A double free vulnerability in the squashfs module could allow a local user to cause a Denial of Service by mounting a crafted squashfs filesystem CVE-2006-5701. The zlibinflate function allows local users to cause a cra...
Mac OS X Airport Update 2007-001
The remote host is running a version of Mac OS X 10.4 that does not have Airport Update 2007-001 applied. This update fixes a flaw in the wireless drivers that may allow an attacker to crash a host by sending a malformed frame. TRUSTED...
CVE-2006-6952
Computer Associates Host Intrusion Prevention System HIPS drivers 1 Core kmxstart.sys 6.5.4.31 and 2 Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers...
CVE-2006-6952
CVE-2006-6952 affects CA Personal Firewall/CA Internet Security Suite 2007: HIPS Core (KmxStart.sys) and HIPS Firewall (KmxFw.sys) allow local privilege escalation by using privileged IOCTLs to modify callback pointers. Impact is local privilege escalation; affected products include CA Personal F...
CVE-2006-6952
Computer Associates Host Intrusion Prevention System HIPS drivers 1 Core kmxstart.sys 6.5.4.31 and 2 Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers...
Intel Centrino ipw2200 wireless drivers buffer overflow
Buffer overflow on oversized SSID...
Design/Logic Flaw
Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into the product's installation directory by creating links using FileLinkInformation requests with the ZwSetInformationFile function, as demonstrated by modifying SandBox.sys...
CVE-2007-0333
Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into the product's installation directory by creating links using FileLinkInformation requests with the ZwSetInformationFile function, as demonstrated by modifying SandBox.sys...
Kaspersky Antivirus privilege escalation
Privilege escalation with KLIN and KLICK system drivers IOCTL...
Design/Logic Flaw
The PML Driver HPZ12 HPZipm12.exe in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICECHANGECONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by modifying the binpath argument, a related issue to...
CVE-2007-0161
The CVE-2007-0161 entry concerns the HP PML Driver HPZ12 (HPZipm12.exe) used in HP all‑in‑one drivers. It states that insecure SERVICE_CHANGE_CONFIG DACL permissions on the driver allow a local user to gain privileges and run arbitrary programs by modifying the binpath, a scenario related to CVE-...
CVE-2007-0161
The PML Driver HPZ12 HPZipm12.exe in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICECHANGECONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by modifying the binpath argument, a related issue to...
CVE-2006-6881
CVE-2006-6881: A buffer overflow in the Get_Wep function of cofvnet.c affecting ATMEL Linux PCI PCMCIA USB Drivers (drivers 3.4.1.1) allows an attacker to execute arbitrary code via a long name argument. The issue is exploitable over the network with low attack complexity and no authentication, w...
CVE-2006-6881
Buffer overflow in the GetWep function in cofvnet.c for ATMEL Linux PCI PCMCIA USB Drivers drivers 3.4.1.1 corruption allows attackers to execute arbitrary code via a long name argument...
ATMEL Linux PCI PCMCIA USB Drivers arbitrary code execution
Synopsis: ATMEL Linux PCI PCMCIA USB Drivers arbitrary code execution Product: ATMEL WLAN drivers 3.4.1.1 Version: =3.4.1.1 Product: ======= ATMEL linux PCI, PCMCIA, USB drivers. and configuration utilities. Issue: ====== A critical security vulnerability has been found in ATMEL WLAN drivers...