CVE-2002-0973

Integer signedness error in several system calls for FreeBSD 4.6.1 RELEASE-p10 and earlier may allow attackers to access sensitive kernel memory via large negative values to the 1 accept, 2 getsockname, and 3 getpeername system calls, and the 4 vesa FBIOGETPALETTE ioctl...

CVE-2002-0973

The CVE-2002-0973 entry describes an integer signedness error in FreeBSD 4.6.1 RELEASE-p10 and earlier affecting the (1) accept, (2) getsockname, (3) getpeername system calls, and (4) vesa FBIO_GETPALETTE ioctl. This vulnerability can allow attackers to access sensitive kernel memory by supplying...

FreeBSD-SA-02:38.signed-error

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:38.signed-error Security Advisory The FreeBSD Project Topic: Boundary checking errors involving signed integers Category: core Module: sys Announced: 2002-08-19 Credits:...

d_path() truncating excessive long path name vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Name: Linux kernel Version: up to 2.2.20 and 2.4.18 Homepage: http://www.kernel.org/ Author: Wojciech Purczynski [email protected] Date: March 26, 2002 Issue: ====== In case of excessively long path names dpath kernel internal function returns truncated...

PT-2001-2644 · Openbsd · Openbsd

Name of the Vulnerable Software and Affected Versions: OpenBSD versions 2.9 through 3.0 Description: The issue allows local users to cause a denial of service and trigger a null dereference due to the uipc system calls providing user mode return instead of kernel mode values to the fdrelease...

CVE-1999-1493

Vulnerability in crp in Hewlett Packard Apollo Domain OS SR10 through SR10.3 allows remote attackers to gain root privileges via insecure system calls, 1 pad$dmcmd and 2 pad$defpfk...

CVE-1999-1493

The CVE-1999-1493 entry describes a vulnerability in the crp component of Hewlett Packard Apollo Domain OS SR10 through SR10.3. It allows remote attackers to gain root privileges via insecure system calls, specifically pad_$dm_cmd and pad_$def_pfk(). The provided documents do not include concrete...

xxman.sh

xman doesn't drop privileges anywheres in the program. but, does support suid installation. so, exploiting via a system call is much easier than the buffer overflow in MANPATH, mentioned in another bugtraq posting. here is an example of such an exploitation possibility: -- xxman.sh -- !/bin/sh...

CVE-2000-0276

BeOS 4.5 and 5.0 are affected by CVE-2000-0276: local users can cause a denial of service through malformed direct system calls using interrupt 37. The vulnerability is described as affecting BeOS versions 4.5 and 5.0, with a partial impact on availability. The provided documents do not detail ex...

CVE-2000-0276

BeOS 4.5 and 5.0 allow local users to cause a denial of service via malformed direct system calls using interrupt 37...

ml2 - Local users can Crash processes

ml2 - Local users can Crash processes include include include include error int mainint argc, char argv char foo1000; char bigmsg10000; char s, holds; int i = 0; memsetbigmsg, 'X', sizeofbigmsg-1; if argc \n", argv0; exit1; // fork; memsetfoo, 0, sizeoffoo; snprintffoo, sizeoffoo, "/proc/%s/stat"...

BSD Passive Connection Shellcode

BSD Passive Connection Shellcode. Shellcode exploit for bsd platform ; Passive Connection Shellcode ; ; Coded by Scrippie - [email protected] - http://b0f.freebsd.lublin.pl ; Buffer0verfl0w Security ; Why? This evades firewalls... ; ; YES, this is for NASM, I detest AT&T syntaxis - it's gross and...

BSD Passive Connection Shellcode

Exploit for bsd platform in category shellcode ================================ BSD Passive Connection Shellcode ================================ ; Passive Connection Shellcode ; ; Coded by Scrippie - email protected - http://b0f.freebsd.lublin.pl ; Buffer0verfl0w Security ; Why? This evades...

CVE-2000-0456

NetBSD 1.4.2 and earlier allows local users to cause a denial of service by repeatedly running certain system calls in the kernel which do not yield the CPU, aka "cpu-hog"...

CVE-2000-0456

NetBSD CVE-2000-0456 affects NetBSD 1.4.2 and earlier. The vulnerability stems from certain kernel system calls that do not yield the CPU, allowing local users to cause a denial of service (cpu-hog). The NVD/metrics indicate a low severity (CVSS v2 base score 2.1) with local attack vector and no ...

CVE-1999-1493

Vulnerability in crp in Hewlett Packard Apollo Domain OS SR10 through SR10.3 allows remote attackers to gain root privileges via insecure system calls, 1 pad$dmcmd and 2 pad$defpfk...