150 matches found
kernel: sysctl: restrict write access to dmesg_restrict
The sysrqsysctlhandler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not require the CAPSYSADMIN capability to modify the dmesgrestrict value, which allows local users to bypass intended access restrictions and read the kernel ring buffer by leveraging root privileges, as...
Information disclosure by setuid mount.cifs
Description The mount.cifs program allows a user to pass in the name of a credentials file or a file containing a password via several different means. When installed as a setuid program, it does not check to see whether the user would have had access to this file prior to gaining root privileges...
CVE-2002-2016
User-mode Linux UML 2.4.17-8 does not restrict access to kernel address space, which allows local users to execute arbitrary code...
Microsoft Windows Kernel Access Validation Request Buffer Overflow Vulnerability
Description The Microsoft Windows kernel is prone to a buffer overflow in the system that validates access requests. Successful exploits could allow arbitrary code to run in the context of the kernel. Only local users can exploit this vulnerability. Technologies Affected Microsoft Windows 2000...
PT-2004-1600 · Openbsd · Openbsd
Name of the Vulnerable Software and Affected Versions: OpenBSD versions 3.5 and earlier Description: The issue is related to multiple integer overflows in several procfs files for OpenBSD, including procfs cmdline.c, procfs fpregs.c, procfs linux.c, procfs regs.c, procfs status.c, and procfs...
[Full-Disclosure] EEYE: Symantec Multiple Firewall Remote DNS KERNEL Overflow
Symantec Multiple Firewall Remote DNS KERNEL Overflow Release Date: May 12, 2004 Date Reported: April 19, 2004 Severity: High Remote Kernel Access Vendor: Symantec Systems Affected: Symantec Norton Internet Security 2002 Symantec Norton Internet Security 2003 Symantec Norton Internet Security 200...
[Full-Disclosure] EEYE: Symantec Multiple Firewall NBNS Response Remote Heap Corruption
Symantec Multiple Firewall NBNS Response Remote Heap Corruption Release Date: May 12, 2004 Date Reported: April 19, 2004 Severity: High Remote Kernel Code Execution Vendor: Symantec Systems Affected: Symantec Norton Internet Security 2002 Symantec Norton Internet Security 2003 Symantec Norton...
Дырка в linux-подсистеме FreeBSD
Из-за особенностей эмуляции файловой системе при определенных условиях пользователь может запустить собственные LKM Loadable Kernel Mode получив доступ ко всей системе...
Linux Kernel 2.0.37 - Segment Limit Privilege Escalation
Linux Kernel 2.0.37 - Segment Limit Privilege Escalation / source: https://www.securityfocus.com/bid/523/info This vulnerability has to do with the division of the address space between a user process and the kernel. Because of a bug, if you select a non-standard memory configuration, sometimes...
Linux Kernel 2.0.37 - Segment Limit Privilege Escalation
/ source: https://www.securityfocus.com/bid/523/info This vulnerability has to do with the division of the address space between a user process and the kernel. Because of a bug, if you select a non-standard memory configuration, sometimes user level processes may be given access upto 252Mb of...