Medium: systemtap

Issue Overview: An invalid pointer read flaw was found in the way SystemTap handled malformed debugging information in DWARF format. When SystemTap unprivileged mode was enabled, an unprivileged user in the stapusr group could use this flaw to crash the system or, potentially, read arbitrary kern...

systemtap security update

CentOS Errata and Security Advisory CESA-2011:0841 Updated systemtap packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base...

QNX 6.4.0 bitflipped elf binary (id) Kernel Panic Exploit

Exploit for QNX platform in category dos / poc ========================================================= QNX 6.4.0 bitflipped elf binary id Kernel Panic Exploit ========================================================= begin 644 qnx-crash.bin M?T5,email protected$!0@P!&@$"0"F'00&...

QNX 6.4.0 bitflipped elf binary (id) Kernel Panic Exploit

No description provided by source. begin 644 qnx-crash.bin M?T5,1@$!0@P!&@$"0"F'00& M"@&08;AT-$.@P7S$P/0 MT@0!04!$RP!^@"!@@/XP! M,0%!$WP$P$","@!A0$8$ MQPG-0!WH0+"P!@0C"$B!!@ M&!@$0+AU0WO;&EB+VQD6YX+G-O+C!C\ M44Y8"$$0"I"0'B@."@ M!Z:@"'P!03P!4/ M&P0,D& M"GD$"0+D/^0W"P! MT'2&!D7W07'=$0 MA@%,+2T...

QNX 6.4.0 - bitflipped ELF Binary id Kernel Panic (Denial of Service)

QNX 6.4.0 - bitflipped ELF Binary id Kernel Panic Denial of Service begin 644 qnx-crash.bin M?T5,1@$!0@P!&@$"0"F'00& M"@&08;AT-$.@P7S$P/0 MT@0!04!$RP!^@"!@@/XP! M,0%!$WP$P$","@!A0$8$ MQPG-0!WH0+"P!@0C"$B!!@ M&!@$0+AU0WO;&EB+VQD6YX+G-O+C!C\ M44Y8"$$0"I"0'B@."@ M!Z:@"'P!03P!4/ M&P0,D&...

QNX RTOS 6.4 - '.ELF' Binary File Local Denial of Service

source: https://www.securityfocus.com/bid/33352/info QNX RTOS is prone to a local denial-of-service vulnerability. Attackers can exploit this issue to cause a kernel panic, denying service to legitimate users. QNX RTOS 6.4.0 is vulnerable; other versions may also be affected...

QNX 6.4.0 - bitflipped ELF Binary 'id' Kernel Panic (Denial of Service)

begin 644 qnx-crash.bin M?T5,1@$!0@P!&@$"0"F'00& M"@&08;AT-$.@P7S$P/0 MT@0!04!$RP!^@"!@@/XP! M,0%!$WP$P$","@!A0$8$ MQPG-0!WH0+"P!@0C"$B!!@ M&!@$0+AU0WO;&EB+VQD6YX+G-O+C!C\ M44Y8"$$0"I"0'B@."@ M!Z:@"'P!03P!4/ M&P0,D& M"GD$"0+D/^0W"P! MT'2&!D7W07'=$0 MA@%,+2T MH=$@9P!:"T2 M@"3$HV$@"X;@!W0$"...

linux x86 shellcode obfuscator

linux x86 shellcode obfuscator. Shellcode exploit for linx86 platform / sm4x - 2008 = sm4x0rcist a7 gmail d07 com - sh3llc0der.c v0.1 beta - elf binary shellcode encryptor, NULL free for IDS payload bypassing - key is a simple int for xxp decryptionencryptionp modify to add/subtract if needed - i...

Hack of the classic tutorial of buffer overflow and decryption(a)-vulnerability warning-the black bar safety net

The buffer overflow weakness was born in the 7 0's. Morris Worm8 0'scan be considered their first public application. From the 9 0's, related document, such as the famous Aleph1's”Smashing the Stack for Fun and Profit”and code has been on the Internet disclosed. This article is about some need to...

Debian DSA-1237-1 : kernel-source-2.4.27 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-4093 Olof Johansson reported a local DoS Denia...

DSA-1237 kernel-source-2.4.27 - several

Bulletin has no description...

.ELF Binaries - Local Privilege Escalation

gcc infR3.s -o infR3 strip infR3 find a writable binary example: ls ./infR3 /bin/ls when root calls the writable ls, chmod will be setuided Coded by [email protected] == [email protected] .text .global main infeccion de start para conseguir local root use at your own risk Coded by...

USN-263-1: Linux kernel vulnerabilities

A flaw was found in the module reference counting for loadable protocol modules of netfilter. By performing particular socket operations, a local attacker could exploit this to crash the kernel. This flaw only affects Ubuntu 5.10. CVE-2005-3359 David Howells noticed a race condition in the addkey...

Ubuntu 4.10 / 5.04 : linux-source-2.6.8.1, linux-source-2.6.10 vulnerabilities (USN-131-1)

Colin Percival discovered an information disclosure in the 'Hyper Threading Technology' architecture in processors which are capable of simultaneous multithreading in particular Intel Pentium 4, Intel Mobile Pentium 4, and Intel Xeon processors. This allows a malicious thread to monitor the...

Mandrake Linux Security Advisory : kernel (MDKSA-2005:110)

Multiple vulnerabilities in the Linux kernel have been discovered and fixed in this update. The following CVE names have been fixed in the LE2005 kernel : Colin Percival discovered a vulnerability in Intel's Hyper-Threading technology could allow a local user to use a malicious thread to create...

security flaw

The elfcoredump function in binfmtelf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6.12-rc4 allows local users to execute arbitrary code via an ELF binary that, in certain conditions involving the createelftables function, causes a negative length argument to pass ...

Linux kernel ELF core dump privilege elevation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, since it became clear from the discussion in January about the uselib vulnerability, that the Linux community prefers full, non-embargoed disclosure of kernel bugs, I release full details right now. However to follows at least some of the...

CVE-2005-1263

The elfcoredump function in binfmtelf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6.12-rc4 allows local users to execute arbitrary code via an ELF binary that, in certain conditions involving the createelftables function, causes a negative length argument to pass ...

CVE-2005-1263

The elfcoredump function in binfmtelf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6.12-rc4 allows local users to execute arbitrary code via an ELF binary that, in certain conditions involving the createelftables function, causes a negative length argument to pass ...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix several security issues in Red Hat Enterprise Linux 2.1 are now available. The Linux kernel handles the basic functions of the operating system. This advisory includes fixes for the following security issues: iSEC Security Research discovered a VMA handling flaw i...