CVE-2010-3014

The Coda filesystem kernel module, as used in NetBSD and FreeBSD, when Coda is loaded and Venus is running with /coda mounted, allows local users to read sensitive heap memory via a large outsize value in a ViceIoctl struct to a Coda ioctl, which triggers a buffer over-read...

Buffer overflow

The Coda filesystem kernel module, as used in NetBSD and FreeBSD, when Coda is loaded and Venus is running with /coda mounted, allows local users to read sensitive heap memory via a large outsize value in a ViceIoctl struct to a Coda ioctl, which triggers a buffer over-read...

CVE-2010-3014

The CVE-2010-3014 issue affects the Coda filesystem kernel module used in FreeBSD and NetBSD. A missing validation on the ViceIoctl out_size field (in a Coda ioctl path via Venus with /coda mounted) allows an unprivileged local user to read kernel heap memory by copying more data than intended, e...

CVE-2010-3014

The Coda filesystem kernel module, as used in NetBSD and FreeBSD, when Coda is loaded and Venus is running with /coda mounted, allows local users to read sensitive heap memory via a large outsize value in a ViceIoctl struct to a Coda ioctl, which triggers a buffer over-read...

CVE-2010-3014

Removed by vendor...

CVE-2010-3014: Coda Filesystem Kernel Memory Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 VSR Security Advisory http://www.vsecurity.com/ - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: Coda Filesystem Kernel Memory Disclosure Release Date: 2010-08-16 Application: Coda kernel module for NetB...

FreeBSD / NetBSD Coda file system information leak

Kernel memory information leak via IOCTL...

Mandriva Linux Security Advisory : kdelibs4 (MDVSA-2010:028)

Multiple vulnerabilities was discovered and corrected in kdelibs4 : KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not properly handle a '\0' NUL character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary...

Mandriva Linux Security Advisory : kdelibs4 (MDVSA-2010:027)

Multiple vulnerabilities was discovered and corrected in kdelibs4 : KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not properly handle a '' NUL character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL...

NetBSD 5.0 and below Hack PATH Environment overflow proof of concept

Exploit for bsd platform in category dos / poc ==================================================================== NetBSD 5.0 and below Hack PATH Environment overflow proof of concept ==================================================================== !/bin/sh NetBSD 5.0 and below Hack PATH...

NetBSD 5.0 Hack PATH Environment Overflow

!/bin/sh NetBSD 5.0 and below Hack PATH Environment overflow proof of concept Successfull Exploitation gives guid 100 games Vulnerable Function is in hack.unix.c It is a basic strcpy stack overflow. Such overflows are hard to exploit in NetBSD. If you can exploit it successfully feel free to...

NetBSD 5.0 and below Hack GENOCIDE Environment overflow poc

Exploit for bsd platform in category dos / poc ======================================================================== NetBSD 5.0 and below Hack GENOCIDE Environment overflow proof of concept ======================================================================== !/bin/sh NetBSD 5.0 and below...

NetBSD 5.0 Hack GENOCIDE Environment Overflow

!/bin/sh NetBSD 5.0 and below Hack GENOCIDE Environment overflow proof of concept Successfull Exploitation gives guid 100 games Vulnerable Function is in hack.main.c. /usr/games/hack -D use the wizard mode. Only work in wizard mode. It is a basic strcpy stack overflow. Such overflows are hard to...

NetBSD 5.0 - Hack PATH Environment Overflow (PoC)

!/bin/sh NetBSD 5.0 and below Hack PATH Environment overflow proof of concept Successfull Exploitation gives guid 100 games Vulnerable Function is in hack.unix.c It is a basic strcpy stack overflow. Such overflows are hard to exploit in NetBSD. If you can exploit it successfully feel free to...

NetBSD 5.0 - Hack GENOCIDE Environment Overflow (PoC)

!/bin/sh NetBSD 5.0 and below Hack GENOCIDE Environment overflow proof of concept Successfull Exploitation gives guid 100 games Vulnerable Function is in hack.main.c. /usr/games/hack -D use the wizard mode. Only work in wizard mode. It is a basic strcpy stack overflow. Such overflows are hard to...

NetBSD 5.0 - Hack PATH Environment Overflow (PoC)

NetBSD 5.0 - Hack PATH Environment Overflow PoC !/bin/sh NetBSD 5.0 and below Hack PATH Environment overflow proof of concept Successfull Exploitation gives guid 100 games Vulnerable Function is in hack.unix.c It is a basic strcpy stack overflow. Such overflows are hard to exploit in NetBSD. If y...

NetBSD 5.0 - Hack GENOCIDE Environment Overflow (PoC)

NetBSD 5.0 - Hack GENOCIDE Environment Overflow PoC !/bin/sh NetBSD 5.0 and below Hack GENOCIDE Environment overflow proof of concept Successfull Exploitation gives guid 100 games Vulnerable Function is in hack.main.c. /usr/games/hack -D use the wizard mode. Only work in wizard mode. It is a basi...

Fedora Update for ejabberd FEDORA-2010-1281

Check for the Version of ejabberd OpenVAS Vulnerability Test Fedora Update for ejabberd FEDORA-2010-1281 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Integer overflow

Integer signedness error in NetBSD 4.0, 5.0, and NetBSD-current before 2010-01-21 allows local users to cause a denial of service kernel panic via a negative mixer index number being passed to 1 the azaliaquerydevinfo function in the azalia audio driver src/sys/dev/pci/azalia.c or 2 the...

CVE-2010-0561

Integer signedness error in NetBSD 4.0, 5.0, and NetBSD-current before 2010-01-21 allows local users to cause a denial of service kernel panic via a negative mixer index number being passed to 1 the azaliaquerydevinfo function in the azalia audio driver src/sys/dev/pci/azalia.c or 2 the...