CVE-2006-7051

The systimercreate function in posix-timers.c for Linux kernel 2.6.x allows local users to cause a denial of service memory consumption and possibly bypass memory limits or cause other processes to be killed by creating a large number of posix timers, which are allocated in kernel memory but are...

Intel 2200BG 802.11 - disassociation packet Kernel Memory Corruption

/ Title: Intel 2200BG 802.11 disassociation packet Kernel Memory Corruption Description: The intel wireless mini-pci driver provided with Intel / Title: Intel 2200BG 802.11 disassociation packet Kernel Memory Corruption Description: The intel wireless mini-pci driver provided with Intel 2200BG...

intel-dos.txt

------=Part7204224806074.1169818557157 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Title: Intel 2200BG 802.11 disassociation packet Kernel Memory Corruption Description: The intel wireless mini-pci driver provided with...

intel-race.txt

Title: Intel 2200BG 802.11 Beacon frame Kernel Memory Corruption Description: The intel wireless mini-pci driver provided with Intel 2200BG cards is vulnerable to a remote race condition memory corruption flaw. Malformed beacons frame can be used to corrupt internal kernel structures,leading to...

CVE-2006-6656

CVE-2006-6656 describes an unspecified vulnerability in ptrace on NetBSD targets: NetBSD-current before 20061027, NetBSD 3.0/3.0.1 before 20061027, and NetBSD 2.x before 20061119. The issue allows local users to read kernel memory and obtain sensitive information through manipulations of a PT_LWP...

[NT] Intel 2200BG 802.11 Beacon frame Kernel Memory Corruption

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Intel 2200BG 802.11 - Beacon frame Kernel Memory Corruption

/ Summary: The intel wireless mini-pci driver provided with Intel 2200BG cards is vulnerable to a remote race condition memory corruption flaw. Malformed beacons frame can be used to corrupt internal kernel structures,leading to arbitrary code execution. This vulnerability is triggered when...

Intel 2200BG 802.11 - Beacon frame Kernel Memory Corruption

Intel 2200BG 802.11 - Beacon frame Kernel Memory Corruption / Summary: The intel wireless mini-pci driver provided with Intel 2200BG cards is vulnerable to a remote race condition memory corruption flaw. Malformed beacons frame can be used to corrupt internal kernel structures,leading to arbitrar...

FreeBSD Security Advisory FreeBSD-SA-06:25.kmem

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:25.kmem Security Advisory The FreeBSD Project Topic: Kernel memory disclosure in firewire4 Category: core Module: sysdev Announced: 2006-12-06 Credits: Rodrigo...

FreeBSD-SA-06:25.kmem

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:25.kmem Security Advisory The FreeBSD Project Topic: Kernel memory disclosure in firewire4 Category: core Module: sysdev Announced: 2006-12-06 Credits: Rodrigo...

FireWire IOCTL integer overflow in different BSD-based Unix system

Negative IOCTL paramter value allows read access to kernel memory...

FreeBSD -- Kernel memory disclosure in firewire(4)

Problem Description: In the FWGCROM ioctl, a signed integer comparison is used instead of an unsigned integer comparison when computing the length of a buffer to be copied from the kernel into the calling application. Impact: A user in the "operator" group can read the contents of kernel memory...

NetBSD多个本地信息泄露漏洞

NetBSD是一款开放源代码的操作系统。 NetBSD在返回内核内存到用户空间时缺少过滤，本地攻击者可以利用漏洞获得内核敏感信息。 目前没有详细漏洞细节提供。 NetBSD NetBSD 3.0.1 NetBSD NetBSD 3.0 NetBSD NetBSD 2.1 NetBSD NetBSD 2.0.3 NetBSD NetBSD 2.0.2 NetBSD NetBSD 2.0.1 NetBSD NetBSD 2.0 NetBSD NetBSD Current NetBSD NetBSD 3,1RC1 NetBSD NetBSD 2.1.1 NetBSD NetBSD 2.0.4...

Apple Airport - 802.11 Probe Response Kernel Memory Corruption (PoC) (Metasploit)

Apple Airport - 802.11 Probe Response Kernel Memory Corruption PoC Metasploit A proof-of-concept exploit has been added to the Metasploit Framework 3.0 source tree: msf use auxiliary/dos/wireless/daringphucball require 'msf/core' module Msf class Auxiliary::Dos::Wireless::DaringPhucball 'Apple...

Apple Airport - 802.11 Probe Response Kernel Memory Corruption (PoC) (Metasploit)

A proof-of-concept exploit has been added to the Metasploit Framework 3.0 source tree: msf use auxiliary/dos/wireless/daringphucball require 'msf/core' module Msf class Auxiliary::Dos::Wireless::DaringPhucball 'Apple Airport 802.11 Probe Response Kernel Memory Corruption', 'Description' = %q The...

Apple Airport 802.11 Probe Response Kernel Memory Corruption PoC

Exploit for hardware platform in category dos / poc ================================================================ Apple Airport 802.11 Probe Response Kernel Memory Corruption PoC ================================================================ A proof-of-concept exploit has been added to the...

Solaris 10 sysinfo(2) Local Kernel Memory Disclosure Exploit

No description provided by source. / $Id: raptorsysinfo.c,v 1.2 2006/08/22 13:47:54 raptor Exp $ raptorsysinfo.c - Solaris sysinfo2 kernel memory leak Copyright c 2006 Marco Ivaldi [email protected] systeminfo.c for Sun Solaris allows local users to read kernel memory via a 0 variable count...

Symantec AntiVirus privilege escalation

Insufficient address checks in SAVRT, NAVENG and NAVEX15 devices IOCTLS calls allos to overwrite kernel memory...

CVE-2006-5218

Integer overflow in the systracepreprepl function STRIOCREPLACE in systrace in OpenBSD 3.9 and NetBSD 3 allows local users to cause a denial of service crash, gain privileges, or read arbitrary kernel memory via large numeric arguments to the systrace ioctl...

CVE-2006-5218

Integer overflow in the systracepreprepl function STRIOCREPLACE in systrace in OpenBSD 3.9 and NetBSD 3 allows local users to cause a denial of service crash, gain privileges, or read arbitrary kernel memory via large numeric arguments to the systrace ioctl...