37 matches found
CVE-2011-1249
The Ancillary Function Driver AFD in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows local users to gain privileges v...
CVE-2011-1249
CVE-2011-1249 concerns the Ancillary Function Driver (afd.sys) in Windows, where local input validation flaws allow privilege escalation. Affected OSes include Windows XP SP2/SP3, Server 2003 SP2, Windows Vista SP1/SP2, Server 2008 (Gold/SP2/R2), and Windows 7 (Gold/SP1). The vulnerability stems ...
CVE-2011-1249
The Ancillary Function Driver AFD in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows local users to gain privileges v...
Microsoft Windows Ancillary Function Driver Privilege Elevation Vulnerability
This host is missing an important security update according to Microsoft Bulletin MS11-046. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MyBackup 1.4.0 (AFD/RFI) Multiple Remote Vulnerabilities
No description provided by source. + MyBackup 1.4.0 Remote File Inclusion AFD/RFI Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download Script : http://www.tufat.com/fileslgpl/script96.zip + Arbitrary File Download - PoC...
MyBackup 1.4.0 (AFD/RFI) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ======================================================== MyBackup 1.4.0 AFD/RFI Multiple Remote Vulnerabilities ======================================================== + MyBackup 1.4.0 Remote File Inclusion AFD/RFI Multiple Remote...
Microsoft Windows AFD Exploits(ms08-066)
No description provided by source. include stdio.h include winsock2.h include windows.h pragma commentlib, "ws232.lib" define NTSTATUS int typedef struct PROCESSBASICINFORMATION NTSTATUS ExitStatus; PVOID PebBaseAddress; ULONG AffinityMask; ULONG BasePriority; ULONG UniqueProcessId; ULONG...
Microsoft Windows AFD driver privilege escalation
Kernel memory access is possible...
Exploit for MS08-066 - AFD.sys kernel memory overwrite.
Hi, I have just uploaded a k-plugin for Kartoffel, which exploits a flaw patched in the recent MS08-066 bulletin. http://kartoffel.reversemode.com/downloads.php For those researchers interesting in digging a little bit more into this flaw, just take a look at afd!AfdGetRemoteAddress and/or check...
Design/Logic Flaw
afd.sys in the Ancillary Function Driver AFD component in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP1 and SP2 does not properly validate input sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, as demonstrated using crafted...
CVE-2008-3464
afd.sys in the Ancillary Function Driver AFD component in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP1 and SP2 does not properly validate input sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, as demonstrated using crafted...
CVE-2008-3464
CVE-2008-3464 (AFD Kernel Overwrite Vulnerability) is an elevation-of-privilege bug in the Microsoft AFD driver (afd.sys). It arises from improper validation of input passed from user mode to the Windows kernel, allowing a local attacker to execute arbitrary code with kernel privileges. Affected ...
Microsoft Windows AFD驱动本地权限提升漏洞（MS08-066）
BUGTRAQ ID: 31673 CVECAN ID: CVE-2008-3464 Microsoft Windows是微软发布的非常流行的操作系统。 Windows错误地验证了从用户态传递到内核的输入，导致辅助功能驱动（afd.sys）中存在权限提升漏洞。成功利用此漏洞的本地攻击者可执行任意指令，并可完全控制受影响的系统。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2003 SP1 Microsoft...
Microsoft Windows AFD Driver Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability in the Ancillary Function Driver 'afd.sys'. A successful exploit of this vulnerability will let a local attacker completely compromise an affected computer. Technologies Affected Microsoft Windows Server 2003...
CVE-2007-2053
Multiple stack-based buffer overflows in AFFLIB before 2.2.6 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via 1 a long LastModified value in an S3 XML response in lib/s3.cpp; 2 a long a path or b bucket in an S3 URL in lib/vnodes3.cpp; or 3 a long c...
CVE-2002-1503
CVE-2002-1503 affects Automatic File Distributor (AFD) 1.2.14 and earlier. A buffer overflow is triggered by a long MON_WORK_DIR environment variable or -w (workdir) argument passed to any of: afd, afdcmd, afd_ctrl, init_afd, mafd, mon_ctrl, show_olog, or udc. The vulnerability allows local users...