kernel: kvm: buffer overflow in handling of MSR_KVM_SYSTEM_TIME

The kvmsetmsrcommon function in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 does not ensure a required timepage alignment during an MSRKVMSYSTEMTIME operation, which allows guest OS users to cause a denial of service buffer overflow and host OS memory corruption or possibly have...

kernel: kvm: after free issue with the handling of MSR_KVM_SYSTEM_TIME

Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a denial of service host OS memory corruption or possibly have unspecified other impact via a crafted application that triggers use of a guest physical address GPA in 1 movable or 2...

DEBIAN-CVE-2013-1797

Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a denial of service host OS memory corruption or possibly have unspecified other impact via a crafted application that triggers use of a guest physical address GPA in 1 movable or 2...

DEBIAN-CVE-2013-1796

The kvmsetmsrcommon function in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 does not ensure a required timepage alignment during an MSRKVMSYSTEMTIME operation, which allows guest OS users to cause a denial of service buffer overflow and host OS memory corruption or possibly have...

UBUNTU-CVE-2013-1797

Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a denial of service host OS memory corruption or possibly have unspecified other impact via a crafted application that triggers use of a guest physical address GPA in 1 movable or 2...

UBUNTU-CVE-2013-1796

The kvmsetmsrcommon function in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 does not ensure a required timepage alignment during an MSRKVMSYSTEMTIME operation, which allows guest OS users to cause a denial of service buffer overflow and host OS memory corruption or possibly have...

Nmap NSE 6.01: smb-os-discovery

Attempts to determine the operating system, computer name, domain, workgroup, and current time over the SMB protocol ports 445 or 139. This is done by starting a session with the anonymous account or with a proper user account, if one is given; it likely doesn't make a difference; in response to ...

SCADA DNP3 write system time

...

Green Dam Change System Time

// Green Dam listen on udp port 1234 and wait for the 4 bytes time value // We can send some bytes to change the time of the dest system // testgreendamatgmail.com include include include int mainint argc, char argv try if argc != 3 std::cerr " std::endl; std::cerr "Example: testgd 192.168.0.12...

Green Dam Remote Change System Time Exploit

Exploit for windows platform in category remote exploits =========================================== Green Dam Remote Change System Time Exploit =========================================== // Green Dam listen on udp port 1234 and wait for the 4 bytes time value // We can send some bytes to change...

CVE-2008-5659

The CVE-2008-5659 issue affects the GNU Classpath project’s gnu.java.security.util.PRNG class (version 0.97.2 and earlier). The vulnerability stems from a predictable seed based on the system time, enabling context‑dependent attackers to perform brute‑force attempts against cryptographic routines...

“A few lines of code make the“Kaspersky”hell-vulnerability warning-the black bar safety net

A few days ago, Kaspersky just bragging that your user does not have one by Panda burning incense Virus, the big blow special blow them Russians the anti-virus capabilities, the Chinese antivirus derogatory worthless, and Oh, the results confused many Internet users group situation excitement,...

A simple modification to turn off Kaspersky all monitoring and protection-vulnerability warning-the black bar safety net

In fact the method is very simple, this also is many foreign antivirus software the existence of a common problem, hope Kaspersky company of the relevant person attention about the associated vulnerabilities. The following is the code, users can also try their own system time is changed to 1 9 8 ...

CVE-2007-1056

VMware Workstation 5.5.3 build 34685 does not provide per-user restrictions on certain privileged actions, which allows local users to perform restricted operations such as changing system time, accessing hardware components, and stopping the "VMware tools service" service. NOTE: exploitation is...

CVE-2007-1056

VMware Workstation 5.5.3 build 34685 does not provide per-user restrictions on certain privileged actions, which allows local users to perform restricted operations such as changing system time, accessing hardware components, and stopping the "VMware tools service" service. NOTE: exploitation is...

linux/x86 set system time to 0 and exit 15 bytes

No description provided by source. / By Kris Katterjohn 11/14/2006 15 byte shellcode to set system time to 0 and exit. No real damage : exit code is the last 5 bytes 0x6a - 0x80 for Linux/x86 section .text global start start: ; stime0 push byte 25 pop eax xor ecx, ecx push ecx mov ebx, esp int 0x...

linux/x86 - set system time to 0 and exit 12 bytes

linux/x86 set system time to 0 and exit 12 bytes. Shellcode exploit for linx86 platform / By Kris Katterjohn 11/18/2006 12 byte shellcode to set system time to 0 and exit. No real damage : exit code is the last 5 bytes 0x6a - 0x80 for Linux/x86 section .text global start start: ; stime0 push byte...

linux/x86 set system time to 0 and exit 12 bytes

Exploit for linux/x86 platform in category shellcode ================================================ linux/x86 set system time to 0 and exit 12 bytes ================================================ / By Kris Katterjohn 11/18/2006 12 byte shellcode to set system time to 0 and exit. No real damag...

linux/x86 set system time to 0 and exit 12 bytes

No description provided by source. / By Kris Katterjohn 11/18/2006 12 byte shellcode to set system time to 0 and exit. No real damage : exit code is the last 5 bytes 0x6a - 0x80 for Linux/x86 section .text global start start: ; stime0 push byte 25 pop eax cdq push edx mov ebx, esp int 0x80 ; exit...

Skills Delivery: the Blackice firewall magical little discovery-vulnerability warning-the black bar safety net

Currently using Blackice firewall friends a lot, I also use it, when using the Blackice Firewall the process there is an interesting little find, here to share with you explore. This fun little discovery is:as long as we put the system time is adjusted to 2 0 9 9 years, you can end Blackice...