45 matches found
DEBIAN-CVE-2021-4001
A race condition was found in the Linux kernel's ebpf verifier between bpfmapupdateelem and bpfmapfreeze due to a missing lock in kernel/bpf/syscall.c. In this flaw, a local user with a special privilege capsysadmin or capbpf can modify the frozen mapped address space. This flaw affects kernel...
PT-2012-1503 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.38 Description: The issue is related to the Reliable Datagram Sockets RDS subsystem in the Linux kernel, which does not properly handle congestion map updates. This can be exploited by local users to cause a...
Solaris - ypupdated Command Execution (Metasploit)
$Id: ypupdatedexec.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
Solaris ypupdated Command Execution
require 'msf/core' class Metasploit3 'Solaris ypupdated Command Execution', 'Description' = %q This exploit targets a weakness in the way the ypupdated RPC application uses the command shell when handling a MAP UPDATE request. Extra commands may be launched through this command shell, which runs ...
