Snmppd - SNMP Proxy Daemon Remote Format String

Snmppd - SNMP Proxy Daemon Remote Format String / Snmppd SNMP proxy daemon format string exploit cybertronicatgmxdotnet 04/29/2005 buffer space is 1024 bytes MAXSNMPPDOIDLEN defined in snmppd-0.4.5/snmppd.h Apr 29 16:01:31 ctronic snmppd6274: fd 5: Request:...

CVE-2005-0553

Race condition in the memory management routines in the DHTML object processor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail, aka "DHTML Object Memory Corruption Vulnerability"...

CVE-2005-0553

The CVE-2005-0553 issue is a race condition in the DHTML object processor of Internet Explorer (IE) versions 5.01, 5.5, and 6 that can enable remote code execution when a user visits a crafted web page or HTML email. The root cause involves race conditions in processing of DHTML objects (e.g., Co...

Linux Kernel 2.4.x2.6.x - uselib() Local Privilege Escalation (3)

Linux Kernel 2.4.x2.6.x - uselib Local Privilege Escalation 3 / pwned.c - linux 2.4 and 2.6 sysuselib local root exploit. PRIVATE. it's not the best one, the ldt approach is definitively better. discovered may 2004. no longer private because lorian/cliph/ihaquer can lick my balls. c 2004 sd...

Linux Kernel 2.4.x / 2.6.x uselib() Local Privilege Escalation Exploit

Exploit for linux platform in category local exploits ====================================================================== Linux Kernel 2.4.x / 2.6.x uselib Local Privilege Escalation Exploit ====================================================================== / pwned.c - linux 2.4 and 2.6...

Linux Kernel 2.4.x/2.6.x - 'uselib()' Local Privilege Escalation (3)

/ pwned.c - linux 2.4 and 2.6 sysuselib local root exploit. PRIVATE. it's not the best one, the ldt approach is definitively better. discovered may 2004. no longer private because lorian/cliph/ihaquer can lick my balls. c 2004 sd requieres cca 1gb on fs. / / first create fake vma structs. let's...

SUSE-SA:2005:010: kernel

The remote host is missing the patch for the advisory SUSE-SA:2005:010 kernel. The previous kernel security update for the SUSE Linux 9.1 and the SUSE Linux Enterprise Server 9 based products caused problems with the NVidia driver for users with NVidia graphics cards. Stricter checking in the...

CVE-2005-0176

The CVE-2005-0176 issue affects the Linux kernel (2.6.9 and earlier) where shmctl-based locking of System V shared memory could be misused by local unprivileged users to unlock memory from other processes. This could cause sensitive memory contents to be swapped to disk and read by others after r...

CVE-2004-0491

CVE-2004-0491 concerns a flaw in Red Hat Enterprise Linux 3 where the linux-2.4.21-mlock.patch mismanages the mlock page count when a process unlocks pages owned by another process, allowing local users to mlock more memory than the rlIMIT. The issue is documented across multiple sources (NVD, CV...

CVE-2004-1057

Multiple drivers in Linux kernel 2.4.19 and earlier do not properly mark memory with the VMIO flag, which causes incorrect reference counts and may lead to a denial of service kernel panic when accessing freed kernel pages...

CVE-2004-1092

CVE-2004-1092 affects Midnight Commander (mc) 4.5.55 and earlier. The issue allows remote Denial-of-Service by causing mc to free unallocated memory (root cause: improper memory handling). The connected sources indicate a fix in Midnight Commander 4.6.0. Remediation: upgrade to MC 4.6.0 or newer ...

CVE-2004-1057

Multiple drivers in Linux kernel 2.4.19 and earlier do not properly mark memory with the VMIO flag, which causes incorrect reference counts and may lead to a denial of service kernel panic when accessing freed kernel pages...

up-imapproxy multiple bugs

Signed/unsigned conversion and memory management bugs...

tiff -- multiple integer overflows

Dmitry V. Levin discovered numerous integer overflow bugs in libtiff. Most of these bugs are related to memory management, and are believed to be exploitable for arbitrary code execution...

Debian DSA-475-1 : linux-kernel-2.4.18-hppa - several vulnerabilities

Several local root exploits have been discovered recently in the Linux kernel. This security advisory updates the PA-RISC kernel 2.4.18 for Debian GNU/Linux. The Common Vulnerabilities and Exposures project identifies the following problems that are fixed with this update : - CAN-2003-0961 : An...

Debian DSA-454-1 : linux-kernel-2.2.22-alpha - failing function and TLB flush

Paul Starzetz and Wojciech Purczynski of isec.pl discovered a critical security vulnerability in the memory management code of Linux inside the mremap2 system call. Due to flushing the TLB Translation Lookaside Buffer, an address cache too early it is possible for an attacker to trigger a local...

Debian DSA-470-1 : linux-kernel-2.4.17-hppa - several vulnerabilities

Several local root exploits have been discovered recently in the Linux kernel. This security advisory updates the hppa kernel 2.4.17 for Debian GNU/Linux. The Common Vulnerabilities and Exposures project identifies the following problems that are fixed with this update : - CAN-2003-0961 : An...

Debian DSA-444-1 : linux-kernel-2.4.17-ia64 - missing function return value check

Paul Starzetz and Wojciech Purczynski of isec.pl discovered a critical security vulnerability in the memory management code of Linux inside the mremap2 system call. Due to missing function return value check of internal functions a local attacker can gain root privileges. %NASLMINLEVEL 70300 C...

Debian DSA-145-1 : tinyproxy - doubly freed memory

The authors of tinyproxy, a lightweight HTTP proxy, discovered a bug in the handling of some invalid proxy requests. Under some circumstances, an invalid request may result in allocated memory being freed twice. This can potentially result in the execution of arbitrary code. %NASLMINLEVEL 70300 C...

Debian DSA-456-1 : linux-kernel-2.2.19-arm - failing function and TLB flush

Paul Starzetz and Wojciech Purczynski of isec.pl discovered a critical security vulnerability in the memory management code of Linux inside the mremap2 system call. Due to flushing the TLB Translation Lookaside Buffer, an address cache too early it is possible for an attacker to trigger a local...