Linux PowerPC Kernel Restore_Sigcontext本地拒绝服务漏洞

BUGTRAQ ID: 24845 CVE ID:CVE-2007-3107 CNCVE ID:CNCVE-20073107 Linux PowerPC是一款嵌入式Linux操作系统。 Linux PowerPC存在一个信号处理缺陷，本地攻击者可以利用漏洞对系统进行拒绝服务攻击。...

CVE-2007-3107

The signal handling in the Linux kernel before 2.6.22, including 2.6.2, when running on PowerPC systems using HTX, allows local users to cause a denial of service via unspecified vectors involving floating point corruption and concurrency, related to clearing of MSR bits...

Design/Logic Flaw

The signal handling in the Linux kernel before 2.6.22, including 2.6.2, when running on PowerPC systems using HTX, allows local users to cause a denial of service via unspecified vectors involving floating point corruption and concurrency, related to clearing of MSR bits...

CVE-2007-3107

The CVE-2007-3107 entry concerns a flaw in the Linux kernel signal handling on PowerPC systems using HTX. The issue allows local users to cause a denial of service via floating point corruption and concurrency issues related to clearing MSR bits, as described in the initial document. Connected so...

CVE-2007-3107

The signal handling in the Linux kernel before 2.6.22, including 2.6.2, when running on PowerPC systems using HTX, allows local users to cause a denial of service via unspecified vectors involving floating point corruption and concurrency, related to clearing of MSR bits...

security flaw

The signal handling in the Linux kernel before 2.6.22, including 2.6.2, when running on PowerPC systems using HTX, allows local users to cause a denial of service via unspecified vectors involving floating point corruption and concurrency, related to clearing of MSR bits...

Mozilla Firefox JavaScript处理程序竞争条件内存破坏漏洞

Mozilla Firefox是一款开放源代码的WEB浏览器。 Mozilla Firefox处理信号存在竞争条件问题，远程攻击者可以利用漏洞进行内存破坏攻击，可能以进程权限执行任意指令。 Firefox当处理深层嵌套的XML文档显示时被javascript处理程序中断，如果浏览器之后通过脚本重定向到新的位置，那么所有未完成的解析过程会中断，其所有结构也被释放，之间就可能存在两次释放而造成的内存破坏问题，可使应用程序崩溃，可能以进程权限执行任意指令。 Mozilla Firefox 1.5 beta 2 Mozilla Firefox 1.5 beta 1 Mozilla Firefox...

SOL6736 - OpenSSH vulnerabilities CAN-2006-5051, CAN-2006-4924

This security advisory describes an OpenSSH Signal Handling vulnerability CVE-2006-5051. A remote attacker could possibly leverage this flaw to cause a denial of service. This security advisory also describes a denial of service bug CVE-2006-4924 in the OpenSSH sshd server. A remote attacker can...

USN-355-1: openssh vulnerabilities

Tavis Ormandy discovered that the SSH daemon did not properly handle authentication packets with duplicated blocks. By sending specially crafted packets, a remote attacker could exploit this to cause the ssh daemon to drain all available CPU resources until the login grace time expired...

PT-2024-4415

Name of the Vulnerable Software and Affected Versions OpenSSH versions 8.5p1 through 9.6p1 Description A race condition exists in the signal handler of the OpenSSH server sshd. When a client fails to authenticate within the LoginGraceTime defaulting to 120 seconds, the SIGALRM handler is invoked...

kernel security update

CentOS Errata and Security Advisory CESA-2006:0575 Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel...

Sendmail 8.13.5 - Remote Signal Handling (PoC)

Sendmail 8.13.5 - Remote Signal Handling PoC !/usr/bin/env python [email protected] Sendmail 8.13.5 and below Remote Signal Handling exploit usage: rbl4ck-sendmail.py 127.0.0.1 0 25 this exploit was leaked to the PHC Phrack High Council so instead of only letting them have a copy, we figu...

Sendmail 8.13.5 - Remote Signal Handling (PoC)

!/usr/bin/env python [email protected] Sendmail 8.13.5 and below Remote Signal Handling exploit usage: rbl4ck-sendmail.py 127.0.0.1 0 25 this exploit was leaked to the PHC Phrack High Council so instead of only letting them have a copy, we figure everyone should have what they have. :-...

Sendmail <= 8.13.5 Remote Signal Handling Exploit PoC

Exploit for linux platform in category dos / poc ===================================================== Sendmail 1: IP = sys.argv1 ifargc 2: defarch = intsys.argv2 ifargc 3: PORT = intsys.argv3 def ia32o: s='' w=chri % 256 o = o 8 x=chri % 256 o = o 8 y=chri % 256 o =...

Low: Red Hat Bug Fix Advisory: perl bug fix update

Updated perl packages that fix various bugs are now available. Perl is a high-level programming language with roots in C, sed, awk and shell scripting. This update addresses the following issues: - perl operation in UTF-8 enabled locales - handling an alarm signal while a waitpid is in progress -...

Fedora Core 5 : kernel-2.6.16-1.2096_FC5 (2006-421)

This update includes a number of security issues that have been fixed upstream over the last week or so. i386/x86-64: Fix x87 information leak between processes CVE-2006-1056 iprouteinput panic fix CVE-2006-1525 fix MADVREMOVE vulnerability CVE-2006-1524 shmat: stop mprotect from giving write...

Fedora Core 4 : kernel-2.6.16-1.2096_FC4 (2006-423)

This update includes a number of security issues that have been fixed upstream over the last week or so. i386/x86-64: Fix x87 information leak between processes CVE-2006-1056 iprouteinput panic fix CVE-2006-1525 fix MADVREMOVE vulnerability CVE-2006-1524 shmat: stop mprotect from giving write...

CVE-2006-1523

The groupcompletesignal function in the RCU signal handling signal.c in Linux kernel 2.6.16, and possibly other versions, has unknown impact and attack vectors related to improper use of BUGON...

CVE-2006-1523

The groupcompletesignal function in the RCU signal handling signal.c in Linux kernel 2.6.16, and possibly other versions, has unknown impact and attack vectors related to improper use of BUGON...

Design/Logic Flaw

The groupcompletesignal function in the RCU signal handling signal.c in Linux kernel 2.6.16, and possibly other versions, has unknown impact and attack vectors related to improper use of BUGON...