mpg123 0.59r Malformed mp3 (SIGSEGV) Proof of Concept

Exploit for linux platform in category dos / poc ===================================================== mpg123 0.59r Malformed mp3 SIGSEGV Proof of Concept ===================================================== !/usr/bin/perl Affected product: mpg123-0.59r - http://mpg123.de I'm not sure what kind ...

mpg123 0.59r - Malformed .mp3 (SIGSEGV) (PoC)

!/usr/bin/perl Affected product: mpg123-0.59r - http://mpg123.de I'm not sure what kind of vulnerability is it, but the program receives a SIGSEGV when I play it. My gdb skillz r p00r, but anybody with more experience than me can find the real bug. $./mpg1DoS3 0 | mpg123 - - switch tells mpg123 t...

Snort <= 2.4.0 SACK TCP Option Error Handling

Snort = 2.4.0 SACK TCP Option Error Handling Package: Snort 2.4.0 And previous versions Vendor url: http://www.snort.org Class: Error Handling Exceptional Conditions Risk: High Credits: A. Alejandro Hernndez Hernndez Contact: nitrousatvulnfactdotcom BACKGROUND Snort is an open source network...

Bug in IO bitmap handling? Probably exploitable (2.6.5)

Hello. The attached is the small program that tries to write 0x20 to port 0x20. Normally this should cause SIGSEGV, so the program should crash. I think there is a bug in the 2.6 kernels though, which makes it to not crash if some trivial conditions are met. Basically it seems that if any process...

HPUX dtmailpr buffer overflow vulnerability

======================================================= HPUX dtmailpr buffer overflow vulnerability ======================================================= Davide Del Vecchio Adv8 Discovered in: 14/07/2003 Date: 19/11/2003 Tested on HP-UX B.11.00 Description: The dtmailpr program reads a...

Musicqueue multiple local vulnerabilities

======================================== INetCop Security Advisory 2003-0x82-020 ======================================== Title: Musicqueue multiple local vulnerabilities 0x01. Description Musicqueue is a CGI music jukebox using external tools to play the files. Because of that it supports severa...

Musicqueue 1.2 - SIGSEGV Signal Handler Insecure File Creation

// source: https://www.securityfocus.com/bid/8899/info A vulnerability has been reported for Musicqueue. The problem specifically occurs within a signal handling procedure used invoked when a segmentation violation occurs. The procedure invokes a library function, passing it the name of a...

IRCnet IRCD 2.10 - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/8817/info IRCnet IRCD has been reported prone to a buffer overflow vulnerability that may be exploited by local users. This issue may be exploited to crash the affected server. Although unconfirmed, due to the nature of this vulnerability it has been...

CVE-2003-0362

CVE-2003-0362 is a buffer overflow in gPS before 0.10.2 that may allow local users to trigger a denial of service (SIGSEGV) in rgpsp via long command lines. The NVD entry notes the vulnerability originates from processing lengthy arguments, with a CVSSv2 base score of 5.0 (Partial availability im...

QNX

Shouts Zen-parse, lockdown, sloth, ^ChAoS, elfan, Albert E., S. Hawking, Ali G, Jenna Jameson flur, FreeBSD Security Officers, the guy that used to clean our desks every morning and still cleans jaguars desk., QNX developers, Jon Lasser col/67, merlions girlfriend, ourselves and Jenna again. Issu...

QNX RTOS 4.25/6.1 - su Password Hash Disclosure

source: https://www.securityfocus.com/bid/4914/info It has been reported that the 'su' utility for QNX RTOS accepts the SIGSEGV signal and dumps a world readable core file. An attacker is able to analyze the core file and obtain very sensitive information. It is very probable that this is a...

updated squid advisory

Apologies - it should be stable6, not stable5. Here's the updated one: Squid Proxy Cache Security Update Advisory SQUID-2002:2 Advisory ID: SQUID-2002:2 Date: March 26, 2002 Affected versions: Squid-2.x up to and including 2.4.STABLE4 Reported by: zen-parse [email protected]...

kosch suid wrapper 1.1.1 - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/2837/info A boundary condition error exists in suid wrapper or 'su-wrapper.' The overflow occurs when a string exceeding approximately 1032 characters is given as the first argument when the program is run. Because the program is installed setuid root,...