182 matches found
The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code
The vulnerability of the Android operating system’s networking subsystem is related to access control deficiencies. Exploiting this vulnerability allows a remote attacker to execute arbitrary code of a local malicious application within the kernel context. This issue is considered “moderate,” as ...
The vulnerability of the Android operating system, which allows a hacker to gain access to data
Vulnerabilities of kernel components, including the ION subsystem, Binder, USB driver, and the network subsystem of the Android operating system, are related to the lack of protection for sensitive data. Exploiting these vulnerabilities can allow a malicious actor to gain access to local maliciou...
The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.
The vulnerability of the ION subsystem, Binder, USB drivers, and the network subsystem of the Android operating system is related to the lack of protection for sensitive data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...
The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.
The vulnerability of the ION subsystem, Binder, USB drivers, and the network subsystem of the Android operating system is related to the lack of protection for sensitive data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...
The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.
The vulnerability of the ION subsystem, Binder, USB drivers, and the network subsystem of the Android operating system is related to the lack of protection for sensitive data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...
Linux io_submit L2TP sendmsg - Integer Overflow
Exploit for linux platform in category dos / poc / Source: https://code.google.com/p/google-security-research/issues/detail?id=735 In certain kernel versions it is possible to use the AIO subsystem iosubmit syscall to pass size values larger than MAXRWCOUNT to the networking subsystem's sendmsg...
SOL17121 - Linux network subsystem vulnerabilities CVE-2014-8160, CVE-2014-8172, CVE-2014-8173, CVE-2014-9428, CVE-2014-9644, CVE-2015-0274, and CVE-2015-2041
Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents. SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5 critical issue...
Vavoom <= 1.19.1 [Multiple Vulnerabilities] Denial of Service Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include time.h include zlib.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h /...
NetPanzer <= 0.8 - Remote Denial of Service Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include string.h include errno.h void stderrvoid ch...
Halo <= 1.05 Broadcast Client Crash Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include string.h include errno.h...
Oracle Linux 4 : kernel (ELSA-2007-0014)
From Red Hat Security Advisory 2007:0014 : Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles...
Important: Red Hat Security Advisory: Red Hat Enterprise Linux 6.1 kernel security, bug fix and enhancement update
Updated kernel packages that fix multiple security issues, address several hundred bugs and add numerous enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 6. This is the first regular update. The Red Hat Security Response Team has...
FreeBSD mbuf本地权限提升漏洞
BUGTRAQ ID: 41577 CVE ID: CVE-2010-2693 FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 mbuf是FreeBSD内核进程间通讯和联网子系统中的基础内存管理单元。网络报文和套接字缓冲区依赖于mbuf进行存储。 在复制mbuf缓冲区引用时没有正确地拷贝只读标志,如果使用sendfile2系统调用在回环接口上传输数据,就可能导致修改所传送数据的后端内存页,造成数据破坏。本地攻击者可以通过精心控制系统文件的破坏情况来利用这种数据破坏提升权限。请注意攻击者可以破坏任意可读访问的文件。 FreeBSD FreeBSD 8....
FreeBSD Security Advisory (FreeBSD-SA-06:05.80211.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:05.80211.asc ADV FreeBSD-SA-06:05.80211.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft...
Cell Phone Signal hijacking-vulnerability warning-the black bar safety net
Interesting article, this concept has long been proposed, but very few people described so fine. And to be able to implement the“attacker”requirements, high. GSM in the one-way authentication issues in 3G(WCDMA network will be overwritten, since the certification no longer is a 3-tuple, but the...
Important: Red Hat Security Advisory: kernel security update
Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...
FreeBSD IEEE 802.11网络子系统远程溢出漏洞
BUGTRAQ ID: 16296 CVECAN ID: CVE-2006-0226 FreeBSD的IEEE 802.11网络子系统可为无线联网实现协议协商。 FreeBSD的IEEE 802.11在处理协议协商时存在漏洞,远程攻击者可能利用此漏洞在主机上执行任意指令。 在扫描已有的无线网络时,如果处理了被破坏的IEEE 802.11信标或探测响应帧的话就会出现整数溢出,导致帧溢出缓冲区。能够广播特制信标或探测响应帧的攻击者可以在任何扫描无线网络的系统上以FreeBSD Kernel权限执行任意代码。 FreeBSD FreeBSD 6.0-STABLE FreeBSD FreeBSD...
Integer overflow
Integer overflow in IEEE 802.11 network subsystem ieee80211ioctl.c in FreeBSD before 6.0-STABLE, while scanning for wireless networks, allows remote attackers to execute arbitrary code by broadcasting crafted 1 beacon or 2 probe response frames...
CVE-2006-0226
Integer overflow in IEEE 802.11 network subsystem ieee80211ioctl.c in FreeBSD before 6.0-STABLE, while scanning for wireless networks, allows remote attackers to execute arbitrary code by broadcasting crafted 1 beacon or 2 probe response frames...
CVE-2006-0226
The CVE-2006-0226 issue affects FreeBSD’s IEEE 802.11 network subsystem (net80211). A vulnerable integer overflow occurs in handling corrupted beacon or probe response frames during wireless network scanning, which can allow remote code execution in the kernel on any system actively scanning for ...