8766 matches found
CVE-2006-4392: Undefined Security Weakness
The Mach kernel, as used in operating systems including 1 Mac OS X 10.4 through 10.4.7 and 2 OpenStep before 4.2, allows local users to gain privileges via a parent process that forces an exception in a setuid child and uses Mach exception ports to modify the child's thread context and task addre...
Matasano Advisory: MacOS X Mach Exception Server Privilege Escalation
Matasano Security Advisory MacOS X Mach Exception Server Privilege Escalation Release Date: Fri Sep 29 2006 Affects: MacOS X 10.4 10.4.8, 10.3., OpenStep 4.2 Severity: High - Local root privilege escalation Credit: Dino Dai Zovi ddz at matasano.com Vendor Status: MacOS X 10.4.8 fixes vulnerabilit...
Apple Mac OSX 10.4.7 - Mach Exception Handling Local (10.3.x)
/ excploit.c - 28 Nov 2005 - [email protected] Exploitable Mach Exception Handling Affected: Mac OS X 10.4.6 darwin 8.6.0 and older When a process executes a setuid executable, all existing rights to the task port are invalidated, to make sure unauthorized processes do not retain control o...
Mac OS X <= 10.4.7 Mach Exception Handling Local Root Exploit
No description provided by source. / excploit.c - 28 Nov 2005 - [email protected] Exploitable Mach Exception Handling Affected: Mac OS X 10.4.6 darwin 8.6.0 and older When a process executes a setuid executable, all existing rights to the task port are invalidated, to make sure unauthorize...
Mac OS X <= 10.4.7 Mach Exception Handling Local Exploit (10.3.x 0day)
Exploit for macOS platform in category local exploits ====================================================================== Mac OS X = 10.4.7 Mach Exception Handling Local Exploit 10.3.x 0day ====================================================================== / excploit.c - 28 Nov 2005 -...
Apple Mac OSX 10.4.7 - Mach Exception Handling Privilege Escalation
Apple Mac OSX 10.4.7 - Mach Exception Handling Privilege Escalation / excploit.c - 28 Nov 2005 - [email protected] Exploitable Mach Exception Handling Affected: Mac OS X 10.4.6 darwin 8.6.0 and older When a process executes a setuid executable, all existing rights to the task port are...
Apple Mac OSX 10.4.7 - Mach Exception Handling Local (10.3.x)
Apple Mac OSX 10.4.7 - Mach Exception Handling Local 10.3.x / excploit.c - 28 Nov 2005 - [email protected] Exploitable Mach Exception Handling Affected: Mac OS X 10.4.6 darwin 8.6.0 and older When a process executes a setuid executable, all existing rights to the task port are invalidated,...
Apple Mac OSX 10.4.7 - Mach Exception Handling Privilege Escalation
/ excploit.c - 28 Nov 2005 - [email protected] Exploitable Mach Exception Handling Affected: Mac OS X 10.4.6 darwin 8.6.0 and older When a process executes a setuid executable, all existing rights to the task port are invalidated, to make sure unauthorized processes do not retain control o...
Mac OS X <= 10.4.7 Mach Exception Handling Local Exploit (10.3.x 0day)
No description provided by source. / excploit.c - 28 Nov 2005 - [email protected] Exploitable Mach Exception Handling Affected: Mac OS X 10.4.6 darwin 8.6.0 and older When a process executes a setuid executable, all existing rights to the task port are invalidated, to make sure unauthorize...
Mac OS X <= 10.4.7 Mach Exception Handling Local Root Exploit
Exploit for macOS platform in category local exploits ============================================================= Mac OS X include include include extern booleant excservermachmsgheadert , machmsgheade...
CVE-2006-4982
Cisco NAC maintains an exception list that does not record device properties other than MAC address, which allows physically proximate attackers to bypass control methods and join a local network by spoofing the MAC address of a different type of device, as demonstrated by using the MAC address o...
CVE-2006-4982
Cisco NAC has a vulnerability where an exception list only records MAC addresses, enabling physically proximate attackers to bypass controls and join a local network by spoofing the MAC address of a different device type (example: MAC of a disconnected printer). Affected/software component: Cisco...
CVE-2006-4981
Symantec Sygate NAC allows physically proximate attackers to bypass control methods and join a local network by selecting a forged MAC address associated with an exception rule that 1 permits all non-Windows devices or 2 whitelists certain sets of Organizationally Unique Identifiers OUIs...
CVE-2006-4982
Cisco NAC maintains an exception list that does not record device properties other than MAC address, which allows physically proximate attackers to bypass control methods and join a local network by spoofing the MAC address of a different type of device, as demonstrated by using the MAC address o...
Multiple Windows kernel security vulnerabilities
Buffer overflow vulnerability allows privilege escalation, WinLogon user profile DLL privilege escalation, unhandled exception code execution vulnerability...
CVE-2006-4616
SMTP service in MailEnable Standard, Professional, and Enterprise before ME-10014 20060904 allows remote attackers to cause a denial of service via an SPF lookup for a domain with a large number of records, which triggers a null pointer exception...
CVE-2006-4616: Undefined Security Weakness
SMTP service in MailEnable Standard, Professional, and Enterprise before ME-10014 20060904 allows remote attackers to cause a denial of service via an SPF lookup for a domain with a large number of records, which triggers a null pointer exception...
CVE-2006-4616
The CVE-2006-4616 issue affects the MailEnable SMTP service (Standard/Professional/Enterprise), where SPF lookups for domains with large records can trigger a NULL pointer exception in the SMTP service, allowing unauthenticated remote attackers to cause a denial of service. Affected products are ...
CVE-2006-4616
SMTP service in MailEnable Standard, Professional, and Enterprise before ME-10014 20060904 allows remote attackers to cause a denial of service via an SPF lookup for a domain with a large number of records, which triggers a null pointer exception...
PowerZip <= 7.06.3895 Long Filename Handling Buffer Overflow Exploit
No description provided by source. / PowerZip 7.06 Exploit by bratax http://www.bratax.be/ Just a quick one as I was able to reuse most of my zipcentral eploit code.. Greetz to everyone I like...special greetz to mobbie and DT as they were sad I didn't mention them the previous time :p Some...