kvm: emulator privilege escalation segment selector check

The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing SMP, does not properly restrict writing of segment selectors to segment registers, which might allow guest OS users to cause a denial of service guest OS crash or gain privileges on the guest OS by leveraging...

iPhone FTP Server By Zhang Boyang Remote DoS Exploit

Exploit for unknown platform in category dos / poc ==================================================== iPhone FTP Server By Zhang Boyang Remote DoS Exploit ==================================================== !/usr/bin/perl Exploit: FTP Server By Zhang Boyang - Remote Dos Exploit Date: 24/02/10...

iFTPStorage For iPhone / iPod Denial Of Service

!/usr/bin/perl Exploit: iFTPStorage for Iphone\Ipod - Remote Dos Exploit Date: 20/02/10 Author: Ale46 Software Link: http://itunes.apple.com/us/app/iftpstorage/id333357690?mt=8 Version: 1.2 Tested on: Iphone 3GS with 3.1.2 firmware Note: iFTSTorage Lite is also vulnerable Greetz: Gandalf use...

iPhone FTP Server By Zhang Boyang - Remote Denial of Service

!/usr/bin/perl Exploit: FTP Server By Zhang Boyang - Remote Dos Exploit Date: 24/02/10 Author: Ale46 Software Link: http://itunes.apple.com/us/app/ftp-server/id356055128?mt=8 Version: 1.0 Tested on: Iphone 3GS with 3.1.2 firmware Greetz: Gandalf use IO::Socket; if @ARGV\n"; exit; my $host = $ARGV...

iFTPStorage v1.2 for Iphone\Ipod - Remote Dos Exploit

No description provided by source. !/usr/bin/perl Exploit: iFTPStorage for Iphone\Ipod - Remote Dos Exploit Date: 20/02/10 Author: Ale46 Software Link: http://itunes.apple.com/us/app/iftpstorage/id333357690?mt=8 Version: 1.2 Tested on: Iphone 3GS with 3.1.2 firmware Note: iFTSTorage Lite is also...

iFTPStorage v1.2 for Iphone\Ipod - Remote Dos Exploit

Exploit for unknown platform in category dos / poc ===================================================== iFTPStorage v1.2 for Iphone\Ipod - Remote Dos Exploit ===================================================== !/usr/bin/perl Exploit: iFTPStorage for Iphone\Ipod - Remote Dos Exploit Date:...

FileApp 1.7 For iPhone / iPod Remote Denial Of Service

!/usr/bin/perl Exploit: FileApp - Remote Dos Exploit Date: 17/02/10 Author: Ale46 Software Link: http://www.digidna.net/products/fileapp Version: 1.7 Tested on: Iphone 3GS with 3.1.2 firmware Go in the sharing section of FileApp and run this script, the application crash and your Iphone\Ipod...

FileApp v1.7 for iPhone/iPod Remote DoS Exploit

Exploit for unknown platform in category dos / poc =============================================== FileApp v1.7 for iPhone/iPod Remote DoS Exploit =============================================== !/usr/bin/perl Exploit: FileApp - Remote Dos Exploit Date: 17/02/10 Author: Ale46 Software Link:...

AZL-6514 CVE-2010-0298 affecting package kernel for versions less than 5.10.78.1-1

The x86 emulator in KVM 83 does not use the Current Privilege Level CPL and I/O Privilege Level IOPL in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the guest OS by leveraging access to a 1 IO...

Design/Logic Flaw

The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing SMP, does not use the Current Privilege Level CPL and I/O Privilege Level IOPL to restrict instruction execution, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the...

CVE-2010-0306

The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing SMP, does not use the Current Privilege Level CPL and I/O Privilege Level IOPL to restrict instruction execution, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the...

Design/Logic Flaw

The x86 emulator in KVM 83 does not use the Current Privilege Level CPL and I/O Privilege Level IOPL in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the guest OS by leveraging access to a 1 IO...

CVE-2010-0306

The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing SMP, does not use the Current Privilege Level CPL and I/O Privilege Level IOPL to restrict instruction execution, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the...

CVE-2010-0306

The connected MiracleLinux AXSA advisory references CVE-2010-0306, describing a vulnerability in the KVM x86 emulator: when a guest is SMP-configured, CPL/IOPL checks are not applied to memory access for CPL3 code. This allows guest OS users to crash the guest or potentially gain privileges by ab...

CVE-2010-0298

The x86 emulator in KVM 83 does not use the Current Privilege Level CPL and I/O Privilege Level IOPL in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the guest OS by leveraging access to a 1 IO...

CVE-2010-0306

The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing SMP, does not use the Current Privilege Level CPL and I/O Privilege Level IOPL to restrict instruction execution, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the...

CVE-2010-0298

The x86 emulator in KVM 83 does not use the Current Privilege Level CPL and I/O Privilege Level IOPL in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the guest OS by leveraging access to a 1 IO...

Microsoft PowerPoint OEPlaceholderAtom placementId memory corruption

Added: 02/12/2010 CVE: CVE-2010-0031 BID: 38103 OSVDB: 62237 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A memory corruption vulnerability allows command execution when a user opens a PowerPoint file containing an...

Microsoft PowerPoint OEPlaceholderAtom placementId memory corruption

Added: 02/12/2010 CVE: CVE-2010-0031 BID: 38103 OSVDB: 62237 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A memory corruption vulnerability allows command execution when a user opens a PowerPoint file containing an...

kvm: emulator privilege escalation

The x86 emulator in KVM 83 does not use the Current Privilege Level CPL and I/O Privilege Level IOPL in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the guest OS by leveraging access to a 1 IO...