Linux Kernel 2.4.x-2.6.x Assembler Inline Function Local DoS Exploit

No description provided by source. / ----------------------------------------------------------------------------- frstor Local Kernel exploit Crashes any kernel from 2.4.18 to 2.6.7 because frstor in assembler inline offsets in memory by 4. Original proof of concept code by [email protected]. Added...

Linux Kernel 2.6.9 2.6.25 (RHEL 4) - utrace and ptrace Local Denial of Service (1)

Linux Kernel 2.6.9 2.6.25 RHEL 4 - utrace and ptrace Local Denial of Service 1 / source: https://www.securityfocus.com/bid/29945/info The Linux kernel is prone to a local denial-of-service vulnerability caused by a race condition. Attackers can exploit this issue to cause the kernel to become...

CVE-2008-1738: Improper Input Validation

Rising Antivirus 2008 before 20.38.20 allows local users to cause a denial of service system crash via an invalid pointer to the CLIENTID structure in a call to the NtOpenProcess hooked System Service Descriptor Table SSDT function...

CVE-2008-1736: Undefined Security Weakness

Comodo Firewall Pro before 3.0 does not properly validate certain parameters to hooked System Service Descriptor Table SSDT functions, which allows local users to cause a denial of service system crash via 1 a crafted OBJECTATTRIBUTES structure in a call to the NtDeleteFile function, which leads ...

CVE-2007-4574: Undefined Security Weakness

Unspecified vulnerability in the "stack unwinder fixes" in kernel in Red Hat Enterprise Linux 5, when running on AMD64 and Intel 64, allows local users to cause a denial of service via unknown vectors...

CVE-2004-2713: Undefined Security Weakness

Zone Alarm Pro 1.0 through 5.1 gives full access to %windir%\Internet Logs\ to the EVERYONE group, which allows local users to cause a denial of service by modifying the folder contents or permissions. NOTE: this issue has been disputed by the vendor, who claims that it does not affect product...

CVE-2007-5087: Undefined Security Weakness

The ATM module in the Linux kernel before 2.4.35.3, when CLIP support is enabled, allows local users to cause a denial of service kernel panic by reading /proc/net/atm/arp before the CLIP module has been loaded...

CVE-2007-3771: Undefined Security Weakness

Stack-based buffer overflow in the Internet E-mail Auto-Protect feature in Symantec AntiVirus Corporate Edition before 10.1, and Client Security before 3.1, allows local users to cause a denial of service service crash via a long 1 To, 2 From, or 3 Subject header in an outbound SMTP e-mail messag...

CVE-2007-3107: Undefined Security Weakness

The signal handling in the Linux kernel before 2.6.22, including 2.6.2, when running on PowerPC systems using HTX, allows local users to cause a denial of service via unspecified vectors involving floating point corruption and concurrency, related to clearing of MSR bits...

Apache httpd multiple local DoS conditions

It's possible to manipalte main worker process causing it to send SIGUSR signal from root to any process, process halt, resources exhaustions...

SpamAssassin < 3.2.1 spamd Symlink Local DoS

Binary data 4100.prm...

CVE-2007-3100: Undefined Security Weakness

usr/log.c in iscsid in open-iscsi iscsi-initiator-utils before 2.0-865 uses a semaphore with insecure permissions world-writable/world-readable for managing log messages using shared memory, which allows local users to cause a denial of service hang by grabbing the semaphore...

Linux Kernel 2.6.17 - Sys_Tee Local Privilege Escalation

Linux Kernel 2.6.17 - SysTee Local Privilege Escalation source: https://www.securityfocus.com/bid/22823/info The Linux kernel is prone to a local privilege-escalation vulnerability. Exploiting this issue allows local attackers to gain superuser privileges, facilitating the complete compromise of...

CVE-2007-0006: Undefined Security Weakness

The key serial number collision avoidance code in the keyallocserial function in Linux kernel 2.6.9 up to 2.6.20 allows local users to cause a denial of service crash via vectors that trigger a null dereference, as originally reported as "spinlock CPU recursion."...

CVE-2006-6698

The GConf daemon gconfd in GConf 2.14.0 creates temporary files under directories with names based on the username, even when GCONFGLOBALLOCKS is not set, which allows local users to cause a denial of service by creating the directories ahead of time, which prevents other users from using Gnome...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:151)

A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Prior to and including 2.6.16-rc2, when running on x8664 systems with preemption enabled, local users can cause a DoS oops via multiple ptrace tasks that perform single steps CVE-2006-1066. Prior to 2.6.16, a...

Debian DSA-1233-1 : kernel-source-2.6.8 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-3741 Stephane Eranian discovered a local DoS...

CVE-2006-6126: Undefined Security Weakness

Apple Mac OS X allows local users to cause a denial of service memory corruption via a crafted Mach-O binary with a malformed loadcommand data structure...

FreeBSD 5.56.x - Scheduler Policy Local Denial of Service

FreeBSD 5.56.x - Scheduler Policy Local Denial of Service // source: https://www.securityfocus.com/bid/20517/info FreeBSD is prone to a local denial-of-service vulnerability because the kernel fails to require superuser privileges to perform a sensitive operation. An attacker may leverage this...

CVE-2006-4535: Undefined Security Weakness

The Linux kernel 2.6.17.10 and 2.6.17.11 and 2.6.18-rc5 allows local users to cause a denial of service crash via an SCTP socket with a certain SOLINGER value, possibly related to the patch for CVE-2006-3745. NOTE: older kernel versions for specific Linux distributions are also affected, due to...