ptrace suids local root.txt

bash-2.05a$ uname -a QNX muh 6.3.2 2006/03/16-14:19:50EST x86pc x86 bash-2.05a$ gdb -q /usr/bin/ping we use some ret-to-libc-type-shellcode gdb p system $1 = text variable, no debug info 0xb031897c system gdb p exit $2 = text variable, no debug info 0xb0321ff8 exit gdb q bash-2.05a$ export...

CVE-2006-6656

Unspecified vulnerability in ptrace in NetBSD-current before 20061027, NetBSD 3.0 and 3.0.1 before 20061027, and NetBSD 2.x before 20061119 allows local users to read kernel memory and obtain sensitive information via certain manipulations of a PTLWPINFO request, which leads to a memory leak and...

CVE-2006-6656

Unspecified vulnerability in ptrace in NetBSD-current before 20061027, NetBSD 3.0 and 3.0.1 before 20061027, and NetBSD 2.x before 20061119 allows local users to read kernel memory and obtain sensitive information via certain manipulations of a PTLWPINFO request, which leads to a memory leak and...

CVE-2006-6014

CVE-2006-6014 affects the NetBSD-current kernel prior to 20061028. The flaw is a bounds-checking issue in the ptrace system call during PT_DUMPCORE, where an unspecified userspace parameter is not properly validated. This allows local users to cause an unknown impact. The vulnerability and its de...

CVE-2006-6014

The NetBSD-current kernel before 20061028 does not properly perform bounds checking of an unspecified userspace parameter in the ptrace system call during a PTDUMPCORE request, which allows local users to have an unknown impact...

SCO Unixware 7.1.3 (ptrace) Local Privilege Escalation Exploit

No description provided by source. / SCO Unixware 7.1.3 ptrace local root exploit ============================================ SCO Unixware 7.1.3 kernel allows unprivledged users to debug binaries. The condition can be exploited by an attacker when he has execute permissions to a file which has t...

Debian DSA-1018-2 : kernel-source-2.4.27 - several vulnerabilities

The original update lacked recompiled ALSA modules against the new kernel ABI. Furthermore, kernel-latest-2.4-sparc now correctly depends on the updated packages. For completeness we're providing the original problem description : Several local and remote vulnerabilities have been discovered in t...

Debian DSA-1017-1 : kernel-source-2.6.8 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2004-1017 Multiple overflows exist in the ioedgepor...

Debian DSA-921-1 : kernel-source-2.4.27 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-0756 Alexander Nyberg discovered that the ptra...

Debian DSA-1184-2 : kernel-source-2.6.8 - several vulnerabilities

This advisory covers the S/390 components of the recent security update for the Linux 2.6.8 kernel that were missing due to technical problems. For reference, please see the text of the original advisory. Several security related problems have been discovered in the Linux kernel which may lead to...

FreeBSD 5.4 / 6.0 (ptrace PT_LWPINFO) Local Denial of Service Exploit

No description provided by source. include sys/types.h include sys/ptrace.h include unistd.h / lol lol, exploit for http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=419 thank you oh unknown, sincerely kokanin@gmail. usage: ./blah pid you own / int mainint argc, char argv struc...

FreeBSD 5.4 / 6.0 (ptrace PT_LWPINFO) Local Denial of Service Exploit

Exploit for bsd platform in category dos / poc ===================================================================== FreeBSD 5.4 / 6.0 ptrace PTLWPINFO Local Denial of Service Exploit ===================================================================== include include include / lol lol, exploit...

FreeBSD 5.46.0 - ptrace PT_LWPINFO Local Denial of Service

FreeBSD 5.46.0 - ptrace PTLWPINFO Local Denial of Service include include include / lol lol, exploit for http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=419 thank you oh unknown, sincerely kokanin@gmail. usage: ./blah / int mainint argc, char argv struct ptracelwpinfo lol;...

FreeBSD 5.4/6.0 - 'ptrace PT_LWPINFO' Local Denial of Service

include include include / lol lol, exploit for http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=419 thank you oh unknown, sincerely kokanin@gmail. usage: ./blah / int mainint argc, char argv struct ptracelwpinfo lol; ptracePTATTACH,atoiargv1,NULL,0; waitNULL;...

CVE-2006-4516

CVE-2006-4516 affects FreeBSD 6.0-RELEASE. The kernel’s PT_LWPINFO ptrace handling has a signedness flaw: a large negative data value can bypass the signed check and be passed to copyout, causing memory corruption and kernel panic. Impact is a local denial-of-service condition. Described in iDefe...

CVE-2006-4516

Integer signedness error in FreeBSD 6.0-RELEASE allows local users to cause a denial of service memory corruption and kernel panic via a PTLWPINFO ptrace command with a large negative data value that satisfies a signed maximum value check but is used in an unsigned copyout function call...

FreeBSD ptrace() DoS

Integer overflow in PTLWPINFO...

iDefense Security Advisory 10.10.06: FreeBSD ptrace PT_LWPINFO Denial of Service Vulnerability

FreeBSD ptrace PTLWPINFO Denial of Service Vulnerability iDefense Security Advisory 10.10.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 10, 2006 I. BACKGROUND FreeBSD is a modern operating system for x86, amd64, Alpha, IA-64, PC-98 and SPARC architectures. It's based on the UNIX...

[SECURITY] [DSA 1184-1] New Linux 2.6.8 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1184-1 [email protected] http://www.debian.org/security/ Dann Frazier September 25th, 2006 http://www.debian.org/security/faq -...

kernel security update

CentOS Errata and Security Advisory CESA-2006:0575 Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel...