Berkeley Yacc (byacc) 'skeleton.c'本地拒绝服务漏洞

BUGTRAQ ID: 30233 CNCAN ID：CNCAN-2008071604 Berkeley Yacc是一款用于生成编译器的编译器。 Berkeley Yacc byacc 'skeleton.c'存在越界访问，本地攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 在减少规则和yacc堆栈指针指向分配栈中很后面的位置时，通过$$ = $1行为可导致内存越界访问而造成应用程序崩溃。 Robert Corbett Berkeley Yacc byacc 20070509 OpenBSD OpenBSD 2.9 OpenBSD OpenBSD 2.8 OpenBSD OpenBSD...

OpenBSD (ibcs2_exec) Kernel Local Exploit

No description provided by source. // // Patch ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/005exec.patch // include sys/types.h include sys/stat.h include fcntl.h include stdio.h / $OpenBSD: ibcs2exec.h,v 1.3 2002/03/14 01:26:50 millert Exp $ / / $NetBSD: ibcs2exec.h,v 1.4 1995/03/14...

openbsdanim-local.txt

/ A PRODUCTION OF LUL-DISLCOSURE INC. PROUDLY PRESENTS... 888 888 888 888 888 888 .d88b. 88888b. .d88b. 88888b. 88888b. .d8888b .d88888 d88""88b 888 "88b d8P Y8b 888 "88b 888 "88b 88K d88" 888 888 888 888 888 88888888 888 888 888 888 "Y8888b. 888 888 Y88..88P 888 d88P Y8b. 888 888 888 d88P X88 Y8...

OpenBSD 4.0 (FIRST ANIMATED EXPLOIT) Local Root Exploit (vga)

Exploit for openbsd platform in category local exploits ============================================================= OpenBSD 4.0 FIRST ANIMATED EXPLOIT Local Root Exploit vga ============================================================= / A PRODUCTION OF LUL-DISLCOSURE INC. PROUDLY PRESENTS... 8...

OpenBSD 4.0 - 'vga' Local Privilege Escalation

/ A PRODUCTION OF LUL-DISLCOSURE INC. PROUDLY PRESENTS... 888 888 888 888 888 888 .d88b. 88888b. .d88b. 88888b. 88888b. .d8888b .d88888 d88""88b 888 "88b d8P Y8b 888 "88b 888 "88b 88K d88" 888 888 888 888 888 88888888 888 888 888 888 "Y8888b. 888 888 Y88..88P 888 d88P Y8b. 888 888 888 d88P X88 Y8...

OpenBSD 4.0 (FIRST ANIMATED EXPLOIT) Local Root Exploit (vga)

No description provided by source. / A PRODUCTION OF LUL-DISLCOSURE INC. PROUDLY PRESENTS... 888 888 888 888 888 888 &nbs...

OpenBSD 4.0 - vga Local Privilege Escalation

OpenBSD 4.0 - vga Local Privilege Escalation / A PRODUCTION OF LUL-DISLCOSURE INC. PROUDLY PRESENTS... 888 888 888 888 888 888 .d88b. 88888b. .d88b. 88888b. 88888b. .d8888b .d88888 d88""88b 888 "88b d8P Y8b 888 "88b 888 "88b 88K d88" 888 888 888 888 888 88888888 888 888 888 888 "Y8888b. 888 888...

OpenBSD GNU Screen锁屏验证绕过漏洞

BUGTRAQ ID: 29810 CNCAN ID：CNCAN-2008062315 OpenBSD GNU Screen是一款免费开放源代码的终端管理软件。 OpenBSD GNU Screen锁屏实现存在设计错误，本地物理能访问控制台攻击者可以利用漏洞绕过密码提示访问锁住的Screen会话。 目前没有详细漏洞细节提供。 GNU screen 4.0.3 + OpenBSD OpenBSD 4.3 Rembrandt rembrandtatjpberlin.de...

screen 4.0.3 Local Authentication Bypass Vulnerability (OpenBSD)

No description provided by source. / / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author: Rembrandt Date : Known since somewhere in &cant...

Screen 4.0.3 (OpenBSD) - Local Authentication Bypass

/ / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2007-06-03 Affected Software: screen . Password: type ctrl-c $ screen -r Regained acce...

Screen 4.0.3 (OpenBSD) - Local Authentication Bypass

Screen 4.0.3 OpenBSD - Local Authentication Bypass / / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2007-06-03 Affected Software: scree...

screen 4.0.3 Local Authentication Bypass Vulnerability (OpenBSD)

Exploit for linux platform in category local exploits ================================================================ screen 4.0.3 Local Authentication Bypass Vulnerability OpenBSD ================================================================ / / / / / / / / / / / / / // / / / / / / / / / // ...

X.Org PCF font parser buffer overflow

Overview A vulnerability in the X.Org server could allow a remote attacker to execute arbitrary code on an affected system. Description The X.Org project provides an open source implementation of the X Window System. The server supports bitmapped fonts in various formats, including Portable...

CVE-2008-1215

Stack-based buffer overflow in the commandExpandInterpret function in command.c in ppp aka user-ppp, as distributed in FreeBSD 6.3 and 7.0, OpenBSD 4.1 and 4.2, and the net/userppp package for NetBSD, allows local users to gain privileges via long commands containing "" characters...

Stack overflow

Stack-based buffer overflow in the commandExpandInterpret function in command.c in ppp aka user-ppp, as distributed in FreeBSD 6.3 and 7.0, OpenBSD 4.1 and 4.2, and the net/userppp package for NetBSD, allows local users to gain privileges via long commands containing "" characters...

CVE-2008-1215

Stack-based buffer overflow in the commandExpandInterpret function in command.c in ppp aka user-ppp, as distributed in FreeBSD 6.3 and 7.0, OpenBSD 4.1 and 4.2, and the net/userppp package for NetBSD, allows local users to gain privileges via long commands containing "" characters...

CVE-2008-1215

CVE-2008-1215 is a stack-based buffer overflow in the command_Expand_Interpret function of command.c used by ppp (user-ppp) in FreeBSD 6.3/7.0, OpenBSD 4.1/4.2, and NetBSD net/userppp. The overflow can let local users gain privileges via long commands containing ~ characters. CVSS2 metrics indica...

CVE-2008-1215: Undefined Security Weakness

Stack-based buffer overflow in the commandExpandInterpret function in command.c in ppp aka user-ppp, as distributed in FreeBSD 6.3 and 7.0, OpenBSD 4.1 and 4.2, and the net/userppp package for NetBSD, allows local users to gain privileges via long commands containing "" characters...

Code injection

A certain pseudo-random number generator PRNG algorithm that uses XOR and 2-bit random hops aka "Algorithm X2", as used in OpenBSD 2.6 through 3.4, Mac OS X 10 through 10.5.1, FreeBSD 4.4 through 7.0, and DragonFlyBSD 1.0 through 1.10.1, allows remote attackers to guess sensitive values such as I...

Design/Logic Flaw

A certain pseudo-random number generator PRNG algorithm that uses ADD with 0 random hops aka "Algorithm A0", as used in OpenBSD 3.5 through 4.2 and NetBSD 1.6.2 through 4.0, allows remote attackers to guess sensitive values such as 1 DNS transaction IDs or 2 IP fragmentation IDs by observing a...