7 matches found
CVE-2019-18425
A flaw was in Xen. Guest specified limits for descriptor table access, during PV guest operations, were found to not be enforced. An attacker with the ability to emulate 32-bit guest user mode calls through call gates, would be allowed to install and then use descriptors of their choice as long a...
Apple Mac OS X 'i386_set_ldt()' Privilege Escalation Vulnerability
This host is installed with Mac OS X and is prone to privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: gbmacosxi386setldtprvescvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Apple Mac OS X 'i386setldt' Privilege Escalation Vulnerability Authors: Sooraj KS Copyright: Copyright c 20...
CVE-2011-0182
The i386setldt system call in the kernel in Apple Mac OS X before 10.6.7 does not properly handle call gates, which allows local users to gain privileges via vectors involving the creation of a call gate entry...
Design/Logic Flaw
The i386setldt system call in the kernel in Apple Mac OS X before 10.6.7 does not properly handle call gates, which allows local users to gain privileges via vectors involving the creation of a call gate entry...
CVE-2011-0182
CVE-2011-0182 affects Apple macOS X kernels prior to 10.6.7, where the i386_set_ldt system call mishandles call gates. The root cause is improper handling of call gate entries, enabling a local attacker to escalate privileges by crafting a malicious call gate entry. The vulnerability yields a loc...
CVE-2011-0182
The i386setldt system call in the kernel in Apple Mac OS X before 10.6.7 does not properly handle call gates, which allows local users to gain privileges via vectors involving the creation of a call gate entry...
BSD i386_set_ldt syscall does not appropriately validate call gate targets
Overview There are a set of kernel interfaces called "call gates" which are code primitives used to build system-level calls into an operating system's kernel. A subset of these "calls gates" may be able to be manipulated on some operating systems which use improper privilege checking when...