53 matches found
Exploit for MS08-066 - AFD.sys kernel memory overwrite.
Hi, I have just uploaded a k-plugin for Kartoffel, which exploits a flaw patched in the recent MS08-066 bulletin. http://kartoffel.reversemode.com/downloads.php For those researchers interesting in digging a little bit more into this flaw, just take a look at afd!AfdGetRemoteAddress and/or check...
Microsoft Windows AFD driver privilege escalation
Kernel memory access is possible...
Design/Logic Flaw
afd.sys in the Ancillary Function Driver AFD component in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP1 and SP2 does not properly validate input sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, as demonstrated using crafted...
CVE-2008-3464
CVE-2008-3464 (AFD Kernel Overwrite Vulnerability) is an elevation-of-privilege bug in the Microsoft AFD driver (afd.sys). It arises from improper validation of input passed from user mode to the Windows kernel, allowing a local attacker to execute arbitrary code with kernel privileges. Affected ...
CVE-2008-3464
afd.sys in the Ancillary Function Driver AFD component in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP1 and SP2 does not properly validate input sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, as demonstrated using crafted...
Microsoft Windows AFD驱动本地权限提升漏洞（MS08-066）
BUGTRAQ ID: 31673 CVECAN ID: CVE-2008-3464 Microsoft Windows是微软发布的非常流行的操作系统。 Windows错误地验证了从用户态传递到内核的输入，导致辅助功能驱动（afd.sys）中存在权限提升漏洞。成功利用此漏洞的本地攻击者可执行任意指令，并可完全控制受影响的系统。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2003 SP1 Microsoft...
CVE-2008-3464: Undefined Security Weakness
afd.sys in the Ancillary Function Driver AFD component in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP1 and SP2 does not properly validate input sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, as demonstrated using crafted...
Microsoft Windows AFD Driver Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability in the Ancillary Function Driver 'afd.sys'. A successful exploit of this vulnerability will let a local attacker completely compromise an affected computer. Technologies Affected Microsoft Windows Server 2003...
CVE-2007-2053
Multiple stack-based buffer overflows in AFFLIB before 2.2.6 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via 1 a long LastModified value in an S3 XML response in lib/s3.cpp; 2 a long a path or b bucket in an S3 URL in lib/vnodes3.cpp; or 3 a long c...
CVE-2002-1503
CVE-2002-1503 affects Automatic File Distributor (AFD) 1.2.14 and earlier. A buffer overflow is triggered by a long MON_WORK_DIR environment variable or -w (workdir) argument passed to any of: afd, afdcmd, afd_ctrl, init_afd, mafd, mon_ctrl, show_olog, or udc. The vulnerability allows local users...