HP Tru64 4.0/5.1 - POSIX Threads Library Privilege Escalation

source: https://www.securityfocus.com/bid/21035/info HP Tru64 is prone to a local privilege-escalation vulnerability. Exploiting this issue allows local attackers to execute arbitrary code with superuser privileges. Successful exploits will result in a complete compromise of vulnerable computers...

MS Windows 2K POSIX Subsystem Privilege Escalation Exploit (MS04-020)

No description provided by source. / Microsoft Windows POSIX Subsystem Local Privilege Escalation Exploit MS04-020 Tested on windows 2k sp4 CN,NT/XP/2003 NOT TESTED Posixexp.c By bkbll bkbll cnhonker net,bkbll tom com www cnhonker com 2004/07/16 thanks to eyas xfocus org C:\whoami VITUALWIN2K\tes...

CVE-2006-5482

ufsvnops.c in FreeBSD 6.1 allows local users to cause an unspecified denial of service by calling the ftruncate function on a file type that is not VREG, VLNK or VDIR, which is not defined in POSIX...

CVE-2006-5482

CVE-2006-5482 affects FreeBSD 6.1. The vulnerable component is ufs_vnops.c where calling ftruncate on a file type that is not VREG, VLNK, or VDIR (an unsupported type per POSIX) allows a local user to cause an unspecified denial of service. The root cause is the operation on an unsupported file t...

CVE-2006-5482

ufsvnops.c in FreeBSD 6.1 allows local users to cause an unspecified denial of service by calling the ftruncate function on a file type that is not VREG, VLNK or VDIR, which is not defined in POSIX...

FreeBSD <= 6.1-RELEASE-p10 (ftruncate) Local Denial of Service Exploit

Exploit for bsd platform in category dos / poc ====================================================================== FreeBSD include include include int main mkfifo"lol",0x1b6; int fd = open"lol",ORDWR; ftruncatefd,12345; closefd; 0day.today 2018-03-14...

FreeBSD 6.1-RELEASE-p10 - ftruncate Local Denial of Service

FreeBSD 6.1-RELEASE-p10 - ftruncate Local Denial of Service / FreeBSD cvs commit: src/sys/ufs/ufs/ufsvnops.c maxim 2006-05-31 13:15:29 UTC Log: According to POSIX, the result of ftruncate2 is unspecified for file types other than VREG, VDIR and shared memory objects. We already handle VREG, VLNK...

FreeBSD 6.1-RELEASE-p10 - 'ftruncate' Local Denial of Service

/ FreeBSD cvs commit: src/sys/ufs/ufs/ufsvnops.c maxim 2006-05-31 13:15:29 UTC Log: According to POSIX, the result of ftruncate2 is unspecified for file types other than VREG, VDIR and shared memory objects. We already handle VREG, VLNK and VDIR cases. Silently ignore truncate requests for all th...

Heap overflow in the GT2 loader of libmikmod 3.2.2

Luigi Auriemma Application: libmikmod http://mikmod.raphnet.net http://sourceforge.net/projects/mikmod/ Versions: = 3.2.2 and current CVS versions 2.x.x and all the others in which the GT2 file format isn't implemented are not vulnerable Platforms: Windows, POSIX, Mac Bug: heap overflow in GT2's...

USN-311-1: Linux kernel vulnerabilities

A race condition was discovered in the doaddcounters functions. Processes which do not run with full root privileges, but have the CAPNETADMIN capability can exploit this to crash the machine or read a random piece of kernel memory. In Ubuntu there are no packages that are affected by this, so th...

CVE-2005-4784

CVE-2005-4784 involves multiple buffer overflows in the POSIX readdir_r function. The root cause is a race condition between opendir and pathconf, enabling a symlink attack that can move the filesystem to a state with a longer maximum directory-entry name length, or programmer-introduced errors o...

CVE-2005-4784

Multiple buffer overflows in the POSIX readdirr function, as used in multiple packages, allow local users to cause a denial of service and possibly execute arbitrary code via 1 a symlink attack that exploits a race condition between opendir and pathcon calls and changes the filesystem to one with...

CVE-2005-4784: Undefined Security Weakness

Multiple buffer overflows in the POSIX readdirr function, as used in multiple packages, allow local users to cause a denial of service and possibly execute arbitrary code via 1 a symlink attack that exploits a race condition between opendir and pathcon calls and changes the filesystem to one with...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:018)

A number of vulnerabilities have been corrected in the Linux kernel : A race condition in the 2.6 kernel could allow a local user to cause a DoS by triggering a core dump in one thread while another thread has a pending SIGSTOP CVE-2005-3527. The ptrace functionality in 2.6 kernels prior to...

CVE-2005-4784

Multiple buffer overflows in the POSIX readdirr function, as used in multiple packages, allow local users to cause a denial of service and possibly execute arbitrary code via 1 a symlink attack that exploits a race condition between opendir and pathcon calls and changes the filesystem to one with...

SUSE-SA:2005:068: kernel

The remote host is missing the patch for the advisory SUSE-SA:2005:068 kernel. The Linux kernel was updated to fix several security problems and several bugs, listed below: Security fixes: - CVE-2005-3783: A check in ptrace2 handling that finds out if a process is attaching to itself was incorrec...

Multiple linux kernels vulnerabilities

NAt feature DoS, sysgetthreadarea kernel memory content leak, ipvsconnflush race conditions, Posix timers DoS, rosertioctl DoS...

CVE-2005-3805

A locking problem in POSIX timer cleanup handling on exit in Linux kernel 2.6.10 to 2.6.14, when running on SMP systems, allows local users to cause a denial of service deadlock involving process CPU timers...

CVE-2005-3805

A locking problem in POSIX timer cleanup handling on exit in Linux kernel 2.6.10 to 2.6.14, when running on SMP systems, allows local users to cause a denial of service deadlock involving process CPU timers...

CVE-2005-3805

CVE-2005-3805 describes a locking issue in the POSIX timer cleanup on exit for Linux kernel 2.6.10–2.6.14 on SMP systems, enabling local users to cause a denial of service (deadlock) related to process CPU timers. Affected products/versions are Linux kernel 2.6.10–2.6.14 on SMP; the root cause is...