CVE-2006-5550

The CVE concerns the kernel of FreeBSD 6.1 and OpenBSD 4.0 where local users can cause a denial of service through certain ioctl requests to /dev/crypto. The connected sources confirm the affected OS versions and the attack vector (local, via ioctl on /dev/crypto) but do not provide technical roo...

Kaspersky Labs Anti-Virus IOCTL本地权限提升漏洞

Kaspersky Antivirus是非常流行的杀毒软件。 Kaspersky在处理某种类型的IOCTL操作时存在漏洞，本地攻击者可能利用此漏洞提升自己的权限。 Kaspersky的KLIN和KLICK设备驱动在处理IOCTL 0x80052110操作时没有正确地验证地址空间。攻击者可以向受影响的IOCTL处理器发送特制的Irp结构，通过CALL指令导致驱动执行任意代码。 Kaspersky Labs Kaspersky Antivirus 6.0.0.303 临时解决方法： 关闭registerglobals。 厂商补丁： Kaspersky Labs --------------...

[Reversemode Advisory] Kaspersky Anti-Virus Privilege Escalation

Hi, Kaspersky Products are prone to a local privilege escalation. Unprivileged users can exploit this flaw in order to execute arbitrary code with Kernel privileges. Kaspersky implements its NDIS-TDI Hooking Engine using two drivers, which rely on an internal system of plugins. Plugin registering...

Debian DSA-1018-2 : kernel-source-2.4.27 - several vulnerabilities

The original update lacked recompiled ALSA modules against the new kernel ABI. Furthermore, kernel-latest-2.4-sparc now correctly depends on the updated packages. For completeness we're providing the original problem description : Several local and remote vulnerabilities have been discovered in t...

CVE-2006-4927

The a NAVENG NAVENG.SYS and b NAVEX15 NAVEX15.SYS device drivers 20061.3.0.12 and later, as used in Symantec AntiVirus and security products, allow local users to gain privileges by overwriting critical system addresses using a crafted Irp to the IOCTL functions 1 0x222AD3, 2 0x222AD7, and 3...

Symantec products fail to properly limit device driver access to kernel memory

Overview Certain device drivers included with Symantec products fail to properly verify address space within the "IOCTL" handlers. Description Symantec provides Anti-Virus and Internet Security products that are designed to protect users. According to Symantec Security Response SYM06-020:A...

CVE-2006-4927

The a NAVENG NAVENG.SYS and b NAVEX15 NAVEX15.SYS device drivers 20061.3.0.12 and later, as used in Symantec AntiVirus and security products, allow local users to gain privileges by overwriting critical system addresses using a crafted Irp to the IOCTL functions 1 0x222AD3, 2 0x222AD7, and 3...

[Full-disclosure] iDefense Security Advisory 10.05.06: Symantec AntiVirus IOCTL Kernel Privilege Escalation Vulnerability

Symantec AntiVirus IOCTL Kernel Privilege Escalation Vulnerability iDefense Security Advisory 10.05.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 05, 2006 I. BACKGROUND Symantec has a wide range of Anti-Virus and Internet Security products that are designed to protect users from...

Low: Red Hat Bug Fix Advisory: perl bug fix update

Updated perl packages that fix various bugs are now available. Perl is a high-level programming language with roots in C, sed, awk and shell scripting. This update addresses the following issues: - perl operation in UTF-8 enabled locales - handling an alarm signal while a waitpid is in progress -...

Patching system services at runtime

Patching system services at runtime Although KAV appears to use a filesystem filter, the standard Windows mechanism for intercepting accesses to files specifically designed for applications like anti-virus software, the implementors also used a series of API-level function hooks to intercept...

Code injection

The audiowrite function in NetBSD 3.0 allows local users to cause a denial of service kernel crash by using the audiosetinfo ioctl to change the sample rate of an audio device...

CVE-2006-2205

The audiowrite function in NetBSD 3.0 allows local users to cause a denial of service kernel crash by using the audiosetinfo ioctl to change the sample rate of an audio device...

CVE-2006-2205

The audiowrite function in NetBSD 3.0 allows local users to cause a denial of service kernel crash by using the audiosetinfo ioctl to change the sample rate of an audio device...

CVE-2006-1797

The CVE-2006-1797 entry describes a local denial-of-service in NetBSD-current kernels released before 28 September 2005. A local attacker can trigger a NULL pointer dereference by issuing the SIOCGIFALIAS ioctl to query information about a non-existent network alias, causing a system crash. The a...

[SA19615] NetBSD SIOCGIFALIAS "ioctl()" Denial of Service Vulnerability

TITLE: NetBSD SIOCGIFALIAS "ioctl" Denial of Service Vulnerability SECUNIA ADVISORY ID: SA19615 VERIFY ADVISORY: http://secunia.com/advisories/19615/ CRITICAL: Not critical IMPACT: DoS WHERE: Local system OPERATING SYSTEM: NetBSD 1.x http://secunia.com/product/255/ DESCRIPTION: A vulnerability ha...

CVE-2006-1588

The bridge ioctl ifbridge code in NetBSD 1.6 through 3.0 does not clear sensitive memory before copying ioctl results to the requesting process, which allows local users to obtain portions of kernel memory...

Design/Logic Flaw

The bridge ioctl ifbridge code in NetBSD 1.6 through 3.0 does not clear sensitive memory before copying ioctl results to the requesting process, which allows local users to obtain portions of kernel memory...

CVE-2006-1588

The bridge ioctl ifbridge code in NetBSD 1.6 through 3.0 does not clear sensitive memory before copying ioctl results to the requesting process, which allows local users to obtain portions of kernel memory...

NetBSD if_bridge information leak

ioctl call exposes content of uninitialized memory...

FreeBSD Security Advisory FreeBSD-SA-06:06.kmem

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:06.kmem Security Advisory The FreeBSD Project Topic: Local kernel memory disclosure Category: core Module: kernel Announced: 2006-01-25 Credits: Xin LI, Karl...