4853 matches found
Linux kernel 2.2.12/2.2.14/2.3.99,RedHat 6.x Socket Denial of Service
No description provided by source. source: http://www.securityfocus.com/bid/1072/info A denial of service exists in Linux kernels, as related to Unix domain sockets ignoring limits as set in /proc/sys/net/core/wmemmax. By creating successive Unix domain sockets, it is possible to cause a denial o...
OpenBSD - ICMPv6 Fragment Remote Execution Exploit PoC
No description provided by source. The PoC executes the shellcode int 3 and returns. It overwrites the extfree function pointer on the mbuf and forces a mfreem on the overflowed packet. The Impacket library is used to craft and send packets http://oss.coresecurity.com/projects/impacket.html or...
Linux Kernel Stack Infoleaks Vulnerability
No description provided by source. //Enjoy... // //-Dan / You've done it. After hours of gdb and caffeine, you've finally got a shell on your target's server. Maybe next time they will think twice about running MyFirstCompSciProjectFTPD on a production machine. As you take another sip of Mountain...
LBL traceroute 1.4 a5 Heap Corruption Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/1739/info Traceroute is a well-known network diagnostic tool used for analyzing the path on a network between two hosts. On unix systems, traceroute is typically installed setuid root because of its use of raw sockets...
LBL traceroute 1.4 a5 Heap Corruption Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/1739/info Traceroute is a well-known network diagnostic tool used for analyzing the path on a network between two hosts. On unix systems, traceroute is typically installed setuid root because of its use of raw sockets...
PHP 4.3 socket_iovec_alloc() Integer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7187/info A vulnerability has been reported in PHP versions 4.3.1 and earlier. The problem occurs in the socketiovecalloc and may allow an attacker to corrupt memory. Specifically, the affected function fails to carry out...
AlienVault OSSIM av-centerd Command Injection
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include...
6Tunnel 0.6/0.7/0.8 Connection Close State Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3467/info 6tunnel is a freely available, open source software package designed to provide IPv6 functionality to hosts that do not comply with the standard. It works by creating IPv6 tunnels. A problem has been discovered ...
Linux Kernel Unix Sockets Local Denial of Service
No description provided by source. / Simple kernel attack using socketpair. easy, 100% reproductiblle, works under guest. no way to protect : Simple kernel attack using socketpair. easy, 100% reproductiblle, works under guest. no way to protect : See source attached. Process become in state...
LBL traceroute 1.4 a5 Heap Corruption Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/1739/info Traceroute is a well-known network diagnostic tool used for analyzing the path on a network between two hosts. On unix systems, traceroute is typically installed setuid root because of its use of raw sockets...
FreeBSD UIPC socket heap overflow proof-of-concept
No description provided by source. !/bin/sh fbsd-uipcsock-heap.sh, by Shaun Colley [email protected], 29/09/11 proof-of-concept crash for the freebsd unix domain sockets heap overflow. this was tested on freebsd 8.2-RELEASE. just a PoC for now. see advisory & patches for details:...
Linux Kernel < 2.4.36.9/2.6.27.5 Unix Sockets Local Kernel Panic Exploit
No description provided by source. include sys/socket.h include sys/un.h include unistd.h include assert.h include err.h include stdlib.h static int ownchildint us int pid; int s2; struct msghdr mh; char crap1024; struct iovec iov; struct cmsghdr c; int fd; int rc; pid = fork; if pid == -1 err1,...
i.Scribe SMTP Client <= 2.00b (wscanf) Remote Format String PoC
No description provided by source. ?php //I dont have c lol /=++++++++++++=--= 0-- -- i.Scribe smtp client v 1.88 to 2.00 beta Format String wscanf bug p0c vendor : Memecode Software grTs;SiD.psycho A.Luja 27.11.08 --++++++++++++++++++++--- 00- NOTE!!! you must enabled extension=phpsockets.dll in...
Ubuntu 12.04 LTS : linux-lts-trusty vulnerabilities (USN-2260-1)
A flaw was discovered in the Linux kernel's pseudo tty pty device. An unprivileged user could exploit this flaw to cause a denial of service system crash or potentially gain administrator privileges. CVE-2014-0196 Pinkie Pie discovered a flaw in the Linux kernel's futex subsystem. An unprivileged...
USN-2260-1: Linux kernel (Trusty HWE) vulnerabilities
A flaw was discovered in the Linux kernel's pseudo tty pty device. An unprivileged user could exploit this flaw to cause a denial of service system crash or potentially gain administrator privileges. CVE-2014-0196 Pinkie Pie discovered a flaw in the Linux kernel's futex subsystem. An unprivileged...
PT-2017-6406 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.15.2 Description: A race condition in the ip4 datagram release cb function allows local users to gain privileges or cause a denial of service use-after-free by leveraging incorrect expectations about locking...
openSUSE Security Update : privoxy (openSUSE-2013-242)
privoxy was updated to 3.0.21 stable fo fix CVE-2013-2503 bnc809123 - changes in 3.0.21 - On POSIX-like platforms, network sockets with file descriptor values above FDSETSIZE are properly rejected. Previously they could cause memory corruption in configurations that allowed the limit to be reache...
CVE-2014-3980
libfep 0.0.5 before 0.1.0 does not properly use UNIX domain sockets in the abstract namespace, which allows local users to gain privileges via unspecified vectors...
Design/Logic Flaw
libfep 0.0.5 before 0.1.0 does not properly use UNIX domain sockets in the abstract namespace, which allows local users to gain privileges via unspecified vectors...
CVE-2014-3980
CVE-2014-3980 affects the libfep library, where version 0.0.5 before 0.1.0 mishandles UNIX domain sockets in the abstract namespace, enabling local users to gain privileges through unspecified vectors. Affected: libfep up to 0.1.0 (upstream fixed in 0.1.0). Impact: local privilege escalation; imp...