866 matches found
Dr.Web Antivirus 4.33 (LHA long directory name) Local Overflow Exploit
Exploit for linux platform in category local exploits ====================================================================== Dr.Web Antivirus 4.33 LHA long directory name Local Overflow Exploit ====================================================================== / stetoscope.c: Dr.Web 4.33...
Dr.Web AntiVirus 4.33 - LHA long Directory name Local Overflow
Dr.Web AntiVirus 4.33 - LHA long Directory name Local Overflow / stetoscope.c: Dr.Web 4.33 antivirus LHA directory name heap overflow for linux - Howto: Find a valid GOT entry to hijack with objdump -R /opt/drweb/drweb . I guess that you can use the address of free, but my exploit uses the addres...
solaris/sparc connect-back (with XNOR encoded session) 600 bytes
Exploit for solaris/sparc platform in category shellcode ================================================================ solaris/sparc connect-back with XNOR encoded session 600 bytes ================================================================ / black-RXenc-con-back-SOLARIS.c MIPS This is a...
FreeBSD : bogofilter -- heap corruption through malformed input (92140bc9-7bde-11da-8ec4-0002b3b60e4c)
Matthias Andree reports : When using Unicode databases default in more recent bogofilter installations, upon encountering invalid input sequences, bogofilter or bogolexer could overrun a malloc'd buffer, corrupting the heap, while converting character sets. Bogofilter would usually be processing...
Freeciv <= 2.0.7 (Jumbo Malloc) Denial of Service Crash
Exploit for unknown platform in category dos / poc ======================================================= Freeciv include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include...
Freeciv 2.0.7 - Jumbo Malloc Crash (Denial of Service)
Freeciv 2.0.7 - Jumbo Malloc Crash Denial of Service / by Luigi Auriemma / include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error;...
Freeciv <= 2.0.7 (Jumbo Malloc) Denial of Service Crash
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include time.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include string.h...
Freeciv 2.0.7 - Jumbo Malloc Crash (Denial of Service)
/ by Luigi Auriemma / include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupte...
CVE-2005-3504
Buffer overflow in swcons in IBM AIX 5.2, when debug malloc is enabled, allows remote attackers to cause a core dump and possibly execute arbitrary code...
CVE-2005-3396
CVE-2005-3396 : The issue is in IBM AIX 5.2 and 5.3, affecting the chcons (chcon) command. The root cause is a buffer overflow when DEBUG MALLOC is enabled, which could allow an attacker to execute arbitrary code via a long command line argument. The connected documents (NVD entry and related adv...
CVE-2005-3396
Buffer overflow in the chcons chcon command in IBM AIX 5.2 and 5.3, when DEBUG MALLOC is enabled, might allow attackers to execute arbitrary code via a long command line argument...
CVE-2005-2748
The malloc function in the libSystem library in Apple Mac OS X 10.3.9 and 10.4.2 allows local users to overwrite arbitrary files by setting the MallocLogFile environment variable to the target file before running a setuid application...
CVE-2005-2748
The CVE-2005-2748 issue affects Apple Mac OS X 10.3.9 and 10.4.2, where the malloc function in libSystem can be manipulated via the MallocLogFile environment variable before running a setuid application. This allows local users to overwrite arbitrary files. Root cause: environment-controlled log ...
CVE-2005-2748
The malloc function in the libSystem library in Apple Mac OS X 10.3.9 and 10.4.2 allows local users to overwrite arbitrary files by setting the MallocLogFile environment variable to the target file before running a setuid application...
[Full-disclosure] Mac OS X - malloc() local privilege escalation vulnerability.
Suresec Security Advisory - 00007 25/09/2005 Mac OS X - malloc insecure use of environment variable. Advisory: http://www.suresec.org/advisories/adv7.pdf Description: The malloc function on Mac OS X insecurely trusts a debug variable, regardless of the fact that the calling application may be sui...
MacOS X malloc() privilege escalation
With MallocLogFile it's possible to overwrite any system file with application which uses malloc function...
CVE-2004-2259
Vulnerability CVE-2004-2259 affects vsftpd before 1.2.2. Under heavy load, a SIGCHLD signal during malloc/free (non-reentrant) can cause the FTP daemon to crash, producing a denial of service. Multiple connected sources confirm a signal-handling bug where unsafe operations in signal handlers coul...
CVE-2004-2259
vsftpd before 1.2.2, when under heavy load, allows attackers to cause a denial of service crash via a SIGCHLD signal during a malloc or free call, which is not re-entrant...
CVE-2004-2259
vsftpd before 1.2.2, when under heavy load, allows attackers to cause a denial of service crash via a SIGCHLD signal during a malloc or free call, which is not re-entrant...
FreeBSD : zgv -- exploitable heap overflows (249a8c42-6973-11d9-ae49-000c41e2cdad)
infamous41md reports : zgv uses malloc frequently to allocate memory for storing image data. When calculating how much to allocate, user-supplied data from image headers is multiplied and/or added without any checks for arithmetic overflows. We can overflow numerous calculations, and cause small...