Linux kernel ia32 compatibility for 64 bit platforms race condtions

Race conditions with heap memory corruption in execve syscall...

CVE-2005-1768

The CVE-2005-1768 issue is a race condition in the Linux kernel’s IA32 (x86) compatibility execve() handling, affecting amd64/Intel EM64T and Itanium platforms. A concurrent thread can increment a pointer count after nargs has counted pointers but before copying from user space to kernel space, l...

CVE-2005-1765

syscall in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform, when running in 32-bit compatibility mode, allows local users to cause a denial of service kernel hang via crafted arguments...

CVE-2005-1765

syscall in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform, when running in 32-bit compatibility mode, allows local users to cause a denial of service kernel hang via crafted arguments...

phpFusion501.txt

Note added to this advisory - This is not part of PHP Fusion v5.01 This is an available mod addon supplied by the main developer Digitanium for an IIS Compatibility. This setuser.php will not implemented into PHP Fusion until v5.02 and is not mainstream accross the fusion community. I have notifi...

Solaris 8 (x86) : 109932-10

CDE 1.4x86: sdtimage Patch. Date this patch was last updated by Sun : Mar/24/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

RealPlayer 10 ".smil" File Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ======================================================== RealPlayer 10 ".smil" File Local Buffer Overflow Exploit ======================================================== / RealPlayer .smil file buffer overflow Coded by email protected &...

RealNetworks RealPlayer 10 - '.smil' Local Buffer Overflow

/ RealPlayer .smil file buffer overflow Coded by nolimit@CiSO & Buzzdee greets to COREiSO & news & flare & class101 & ESI & RVL & everyone else I forget This uses a seh overwrite method, which takes advantage of the SEH being placed in multiple locations over the different OS's. Because of this, ...

HP-UX PHCO_28481 : s700_800 11.11 cumulative 10.20 libc compatibility support

s700800 11.11 cumulative 10.20 libc compatibility support : The remote HP-UX host is affected by multiple vulnerabilities : - Potential buffer overflow in xdrmemgetbytes and related functions. HPSBUX00252 SSRT2439 - Potential buffer overflow in XDR library. HPSBUX00215 SSRT2336 %NASLMINLEVEL 7030...

HP-UX PHCO_28480 : s700_800 11.00 cumulative 10.20 libc compatibility support

s700800 11.00 cumulative 10.20 libc compatibility support : The remote HP-UX host is affected by multiple vulnerabilities : - Potential buffer overflow in XDR library. HPSBUX00215 SSRT2336 - Potential buffer overflow in xdrmemgetbytes and related functions. HPSBUX00252 SSRT2439 %NASLMINLEVEL 7030...

RHEL 3 : kernel (RHSA-2005:043)

Updated kernel packages that fix several security issues in Red Hat Enterprise Linux 3 are now available. The Linux kernel handles the basic functions of the operating system. This advisory includes fixes for several security issues : iSEC Security Research discovered a VMA handling flaw in the...

Veritas Backup Exec Agent 8.x/9.x - Browser Overflow

/ Got to give it to class101 on this one. Tested and penetrated. / str0ke / / VERITAS Backup Exec v9.1.4691.SP1 v9.1.4691.SP0 v8.5.3572 Agent Browser Service, Remote Stack Overflow Highly Critical All credits to: -iDEFENSEdiscovery-www.iDEFENSE.com, -Thor Doomeniat-syscallatinbox.lv, -H.D...

CVE-2004-1323

CVE-2004-1323 affects NetBSD prior to 2.0. The issue arises in the compat subsystem where multiple syscalls (notably xxx_sys_kill and xxx_sys_sigaction) can be misused by passing a large signal number, potentially triggering a kernel crash and denial of service. The available documents consistent...

RHEL 2.1 : ncompress (RHSA-2004:536)

An updated ncompress package that fixes a buffer overflow and problem in the handling of files larger than 2 GB is now available. The ncompress package contains the compress and uncompress file compression and decompression utilities, which are compatible with the original UNIX compress utility ....

NetNote Server (<= 2.2 build 230) Crafted String DoS Exploit

No description provided by source. / NetNote Server v2.2 build 230, crafted string vulnerability. Poc included crash the server. Full disclosure and poc exploit by class101 at DFind.kd-team.com & n3ws at EFnet 13 november 2004 ------------------ WHAT IS NETNOTE ------------------ Homepage -...

YahooPOPs 1.6 - SMTP Port Buffer Overflow

/ YahooPOPS v1.6 and prior SMTP port buffer overflow exploit v0.1 Exploit code by class101 at DFind.kd-team.com Bind a shellcode to the port 101. Thanx to Behrang [email protected] for the bug discovery Thanx to HDMoore and Metasploit.com for their kickass ASM work Instead of to move...

[slackware-security] Mozilla

New Mozilla 1.7.3 packages are available for Slackware 10.0 and -current to fix security issues. Here are the details from the Slackware 10.0 ChangeLog: patches/packages/mozilla-1.7.3-i486-1.tgz: Upgraded to mozilla-1.7.3. The Mozilla page says this fixes some "minor security holes". It also brea...

LibPNG 1.2.5 - 'png_jmpbuf()' Local Buffer Overflow

include include include "png.h" / The pngjmpbuf macro, used in error handling, became available in libpng version 1.0.6. If you want to be able to run your code with older versions of libpng, you must define the macro yourself but only if it is not already defined by libpng!. / ifndef pngjmpbuf...

FreeBSD : libpng stack-based buffer overflow and other code concerns (94)

The following package needs to be updated: firefox %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgf9e3e60be65011d89b0a000347a4fa7d.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

Mandrake Linux Security Advisory : file (MDKSA-2003:030-1)

A memory allocation problem in file was found by Jeff Johnson, and a stack overflow corruption problem was found by David Endler. These problems have been corrected in file version 3.41 and likely affect all previous version. These problems pose a security threat as they can be used to execute...