1060 matches found
Apple Mac OSX xnu 1228.3.13 - zip-notify Remote Kernel Overflow (PoC)
Apple Mac OSX xnu 1228.3.13 - zip-notify Remote Kernel Overflow PoC / xnu-appletalk-zip.c Copyright c 2008 by Apple MACOS X xnu include include include include include include include include include include include int main int argc, char argv struct sockaddrat daddr, saddr; char p, buf1024; int...
Apple MACOS X xnu <= 1228.x Local Kernel Memory Disclosure Exploit
No description provided by source. / xnu-getldt.c Copyright c 2008 by [email protected] Apple MACOS X xnu = 1228.x local kernel memory disclosure by mu-b - Wed 17 Dec 2008 - Tested on: Apple MACOS X 10.5.5 xnu-1228.8.201/RELEASEI386 props to christer who originally found the bug in FreeBSD...
Apple MACOS X xnu <= 1228.x Local Kernel Memory Disclosure Exploit
Exploit for macOS platform in category local exploits ================================================================== Apple MACOS X xnu Apple MACOS X xnu include include include include include include include define TMPFILE "/tmp/xnu-getldt" define READSIZE 0x2000000 int main int argc, char...
FileMaker Pro 5.0 Web Companion Software 安全问题
Web Companion 是包含在Filemaker Pro 5.0软件包中的一个程序。用来提供XML发布 功能，它并不受Filemaker Pro的web安全策略的限制。任何远程用户都可能通过XML 来访问web数据库的数据，而并不受web安全设置的影响。 Filemaker Pro 5.0也将email功能整合进了基于web的数据库应用程序中。其中的一个 功能就是可以将数据库中的内容用email发送出去。这将允许远程用户将数据库数据发送 到任意email地址，而不管web安全设置。攻击者也可以利用这一特性发送匿名邮件。 FileMaker FileMaker Pro 5.0 -...
Apple Mac OS X 2008-002更新修复多个安全漏洞
BUGTRAQ ID: 28304 CVECAN ID:...
Apple Mac OS X xnu <= 1228.3.13 ipv6-ipcomp Remote kernel DoS PoC
No description provided by source. / xnu-ipv6-ipcomp.c Copyright c 2008 by [email protected] Apple MACOS X xnu = 1228.3.13 ipv6-ipcomp remote kernel DoS POC by mu-b - Sun 24 Feb 2008 - Tested on: Apple MACOS X 10.5.1 xnu-1228.0.21/RELEASEI386...
Apple Mac OSX xnu 1228.3.13 - IPv6-ipcomp Remote kernel Denial of Service (PoC)
Apple Mac OSX xnu 1228.3.13 - IPv6-ipcomp Remote kernel Denial of Service PoC / xnu-ipv6-ipcomp.c Copyright c 2008 by Apple MACOS X xnu md typo?. md = mpulldownm, off, sizeofipcomp, NULL; if !m - md = mpulldownm, off, sizeofipcomp, NULL; if !md bsd/netinet6/ipcompinput.c curiosly the same bug...
Apple Mac OSX xnu 1228.3.13 - IPv6-ipcomp Remote kernel Denial of Service (PoC)
/ xnu-ipv6-ipcomp.c Copyright c 2008 by Apple MACOS X xnu md typo?. md = mpulldownm, off, sizeofipcomp, NULL; if !m - md = mpulldownm, off, sizeofipcomp, NULL; if !md bsd/netinet6/ipcompinput.c curiosly the same bug exists in ipcomp4input, but an explicit check is made to ensure there is enough...
Apple Mac OSX xnu 1228.0 - super_blob Local kernel Denial of Service (PoC)
Apple Mac OSX xnu 1228.0 - superblob Local kernel Denial of Service PoC / xnu-superblob-dos.c Copyright c 2007 by Apple MACOS X xnu include include include include include include include define MAXPATHLEN 128 / change this value if no panic / define CSLOTSDIFF 0x69696969 define CSSLOTCODEDIRECTO...
Design/Logic Flaw
CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 does not properly validate ftp: URIs, which allows remote attackers to trigger the transmission of arbitrary FTP commands to arbitrary FTP servers...
Multiple Apple MacOS X vulnerabilities
NeST buffer overflow. Выполнение javascript in local context with Help Viewer, insufficient input balidation in URL Protocol Messaging, insufficient input validation in x-man-path:, insufficient input validation in terminal emulators. Multiple bluetooth vulnerabilities. vpnd buffer overflow...
Apple Mac OSX 10.3.8 - CF_CHARSET_PATH Local Buffer Overflow Local Privilege Escalation
Apple Mac OSX 10.3.8 - CFCHARSETPATH Local Buffer Overflow Local Privilege Escalation / MacOS XCFCHARSETPATH: local root exploit. by: [email protected] fakehalo/realhalo found by: iDefense anon finder saw the advisory on bugtraq and figured i'd slap this together, so simple i had to. exploits via th...
Apple MacOS X environment variable buffer overflow
Buffer overflow on oversized CFCHARSETPATH variable...
Apple Mac OSX 10.x - SecurityServer Daemon Local Denial of Service
// source: https://www.securityfocus.com/bid/9332/info Apple MacOS X SecurityServer has been reported prone to a denial of service vulnerability that may be triggered by a local user. The issue may be triggered under certain circumstances when a large password for a SecKeychainUnlock call is...
CVE-2001-0806
Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop when it is created in some languages...
CVE-2001-0806
Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop when it is created in some languages...
OSX remote root
I have seen mention of nidump being used local to an OSX box to take root... I have found that with the use of "tags" it is also a remote root. I have not notified apple due to the fact that they did nothing about the original local exploit. Any machine with a "network" nidomain is vulnerable. It...
CVE-1999-1412
A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service crash via a flood of HTTP GET requests to CGI programs, which generates a large number of processes...
Apple Mac OSX 10 - nidump Password File Disclosure
source: https://www.securityfocus.com/bid/2953/info A vulnerability exists in all versions of Apple MacOS X. It has been found to contain a vulnerability which could allow disclosure of passwords and other sensitive system information. nidump is a Mac OS X system data extraction utility which can...
CVE-1999-1412
A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service crash via a flood of HTTP GET requests to CGI programs, which generates a large number of processes...