496 matches found
Apple Mac OS X xnu <= 1228.0 mach-o Local Kernel Denial of Service PoC
No description provided by source. / xnu-macho-dos.c Copyright c 2007 by [email protected] Apple MACOS X xnu = 1228.0 local kernel DoS POC by mu-b - Thu 15 Nov 2007 - Tested on: Apple MACOS X 10.4 xnu-792.22.51/RELEASEI386 Apple MACOS X 10.5.1 xnu-1228.0.21/RELEASEI386 Apple MACOS X 10.5.1...
Apple Mac OS X fails to properly handle corrupted Universal Mach-O Binaries
Overview A vulnerability in the way Apple Mac OS X handles corrupted Universal Mach-O Binaries may result in execution of arbitrary code or denial of service. Description Apple Mac OS X uses the Mach-O file format's ability to support more than one type of machine code to create Mac OS X Universa...
Mac OS X Mach-O二进制程序加载整数溢出漏洞
Mac OS X是苹果家族计算机所使用的操作系统。 Mac OS X的fatfilegetarch2函数在处理被破坏的通用二进制程序（UB）存在整数溢出漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 如果本地非特权用户受骗打开了特制的Mach-O通用二进制程序的话，就可能导致执行任意内核态代码。 Apple Mac OS X 10.4.8 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.apple.com...
Apple Mac OS X Mach-O两进制装载特权提升漏洞
Apple Mac OS X是一款基于BSD的操作系统。 Apple Mac OS X处理破坏的Mach-O两进制时存在问题，本地攻击者可以利用漏洞进行内存破坏攻击，造成拒绝服务。 攻击者可以构建一个包含合法machheader结构和破坏的loadcommand数据结构的Mach-O两进制来触发此漏洞，成功利用此漏洞可导致系统拒绝服务或导致特权提升。 Apple Mac OS X Server 10.4.8 Apple Mac OS X 10.4.8 目前没有详细解决方案提供： http://www.apple.com/macosx/ 可参考如下测试程序：...
CVE-2006-6126
Apple Mac OS X allows local users to cause a denial of service memory corruption via a crafted Mach-O binary with a malformed loadcommand data structure...
CVE-2006-6126
Apple Mac OS X allows local users to cause a denial of service memory corruption via a crafted Mach-O binary with a malformed loadcommand data structure...
CVE-2006-6126
Technical details (affected software, root cause, impact, fixes) are not publicly available in the provided connected documents for CVE-2006-6126. Monitor for updates.
FailureToLaunch-2.pl.txt
!/usr/bin/perl http://www.digitalmunition.com/FailureToLaunch-ppc.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom Much appreciation goes to John H for all kindsa random shit like exploiting Veritas and other random things in the past core... where the hell are you fool. This is just a...
Mac OS X <= 10.4.6 (launchd) Local Format String Exploit (ppc)
Exploit for macOS platform in category local exploits ============================================================== Mac OS X = 10.4.6 launchd Local Format String Exploit ppc ============================================================== !/usr/bin/perl...
Apple Mac OSX 10.4.6 (x86) - 'launchd' Local Format String
!/usr/bin/perl http://www.digitalmunition.com/FailureToLaunch.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom This is a practical application of Non Executable Stack Lovin - http://www.digitalmunition.com/NonExecutableLovin.txt This code currently jumps into 0x1811111 via dyldstubclose...
Mac OS X <= 10.4.6 (launchd) Local Format String Exploit (x86)
No description provided by source. !/usr/bin/perl http://www.digitalmunition.com/FailureToLaunch.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom This is a practical application of Non Executable Stack Lovin - http://www.digitalmunition.com/NonExecutableLovin.txt This code currently jum...
os-x/PPC/x86 execve"/bin/sh",{"/bin/sh",NULL},NULL 121 bytes
os-x/PPC/x86 execve"/bin/sh","/bin/sh",NULL,NULL 121 bytes. Shellcode exploits for multiple platform / - dual.c - by [email protected] execve"/bin/sh","/bin/sh",NULL,NULL shellcode for osx both the ppc and x86 version. Sample output: -nemo@squee:/shellcode$ file dual-ppc dual-ppc: Mach-O...
os-x/PPC/x86 execve("/bin/sh",{"/bin/sh",NULL},NULL) 121 bytes
Exploit for multiple platform in category shellcode ============================================================== os-x/PPC/x86 execve"/bin/sh","/bin/sh",NULL,NULL 121 bytes ============================================================== / - dual.c - by email protected...
CVE-2005-0975
Integer signedness error in the parsemachfile function in the mach-o loader machloader.c for the Darwin Kernel as used in Mac OS X 10.3.7, and other versions before 10.3.9, allows local users to cause a denial of service CPU consumption via a crafted mach-o header...
CVE-2005-0975
CVE-2005-0975 describes an integer signedness error in the Darwin kernel’s mach-o loader (mach_loader.c) used by Mac OS X 10.3.7 and earlier versions (before 10.3.9). The vulnerability allows local users to cause a denial of service (CPU consumption) by presenting a crafted mach-o header. The pro...
CVE-2005-0975
Integer signedness error in the parsemachfile function in the mach-o loader machloader.c for the Darwin Kernel as used in Mac OS X 10.3.7, and other versions before 10.3.9, allows local users to cause a denial of service CPU consumption via a crafted mach-o header...