636 matches found
gtar -- invalid headers buffer overflow
GNU tar is vulnerable to a buffer overflow, caused by improper bounds checking of the PAX extended headers. By tricking an user into processing a specially crafted tar archive, this could be exploited to execute arbitrary code with the privileges of the user...
CVE-2004-1983
CVE-2004-1983 involves the arch_get_unmapped_area function in mmap.c within the PaX patches for the Linux kernel 2.6. When ASLR is enabled, it allows local users to trigger a Denial of Service via an infinite loop. Connected sources (Gentoo GLSA 200407-02 and related advisories) confirm the issue...
CVE-2004-1983
The archgetunmappedarea function in mmap.c in the PaX patches for Linux kernel 2.6, when Address Space Layout Randomization ASLR is enabled, allows local users to cause a denial of service infinite loop via unknown attack vectors...
CVE-2005-0666
Unknown vulnerability in PaX from the September 2003 release to 2.2 before 2005.03.05, related to SEGMEXEC or RANDEXEC and VMA mirroring, allows local users and possibly remote attackers to bypass intended access restrictions and execute arbitrary code...
PaX Double-Mirrored VMA munmap Local Root Exploit
No description provided by source. / PaX double-mirrored VMA munmap local root exploit Copyright C 2005 Christophe Devine This exploit has only been tested on Debian 3.0 running Linux 2.4.29 patched with grsecurity-2.1.1-2.4.29-200501231159 $ gcc paxomatic.c $ ./chpax -m a.out $ ./a.out ... usage...
PaX - Double-Mirrored VMA munmap Privilege Escalation
PaX - Double-Mirrored VMA munmap Privilege Escalation / PaX double-mirrored VMA munmap local root exploit Copyright C 2005 Christophe Devine This exploit has only been tested on Debian 3.0 running Linux 2.4.29 patched with grsecurity-2.1.1-2.4.29-200501231159 $ gcc paxomatic.c $ ./chpax -m a.out ...
PaX Double-Mirrored VMA munmap Local Root Exploit
Exploit for linux platform in category local exploits ================================================= PaX Double-Mirrored VMA munmap Local Root Exploit ================================================= / PaX double-mirrored VMA munmap local root exploit Copyright C 2005 Christophe Devine This...
PaX - Double-Mirrored VMA munmap Privilege Escalation
/ PaX double-mirrored VMA munmap local root exploit Copyright C 2005 Christophe Devine This exploit has only been tested on Debian 3.0 running Linux 2.4.29 patched with grsecurity-2.1.1-2.4.29-200501231159 $ gcc paxomatic.c $ ./chpax -m a.out $ ./a.out ... usage: ping -LRdfnqrv -c count -i wait -...
CVE-2005-0666
Unknown vulnerability in PaX from the September 2003 release to 2.2 before 2005.03.05, related to SEGMEXEC or RANDEXEC and VMA mirroring, allows local users and possibly remote attackers to bypass intended access restrictions and execute arbitrary code...
CVE-2005-0666
The CVE-2005-0666 entry describes an unknown vulnerability in PaX (Sept 2003 release to 2.2 before 2005.03.05) related to SEGMEXEC or RANDEXEC and VMA mirroring that allows local users and possibly remote attackers to bypass access restrictions and execute arbitrary code. The provided sources rei...
[Full-Disclosure] PaX privilege elevation security bug
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PaX privilege elevation security bug Severity: critical Description: unprivileged users can execute arbitrary code with the privileges of the target in any program they or other users can execute it is definitely exploitable for local users, remote...
PaX 2.6 Kernel Patch - Denial of Service
PaX 2.6 Kernel Patch - Denial of Service / source: https://www.securityfocus.com/bid/10264/info PaX for 2.6 series Linux kernels has been reported prone to a local denial of service vulnerability. The issue is reported to present itself when PaX Address Space Layout Randomization Layout ASLR is...
PaX 2.6 Kernel Patch - Denial of Service
/ source: https://www.securityfocus.com/bid/10264/info PaX for 2.6 series Linux kernels has been reported prone to a local denial of service vulnerability. The issue is reported to present itself when PaX Address Space Layout Randomization Layout ASLR is enabled. The vulnerability may be exploite...
linux PAX DoS
Bug during memory allocation handling...
[Full-Disclosure] Bug in PaX Linux Kernel 2.6 Patches
http://www.cr-secure.net Found by: borg ChrisR- A small bug in PaX was found. What is PaX? ----------------------- PaX is a collection of intrusion prevention patches for the Linux Kernel 2.2, 2.4, and 2.6. This advisory only affects the PaX patches for the 2.6 linux kernel. PaX is located at...