iDefense Security Advisory 03.23.07: DataRescue IDA Pro Remote Debugger Server Authentication Bypass Vulnerability

DataRescue IDA Pro Remote Debugger Server Authentication Bypass Vulnerability iDefense Security Advisory 03.23.07 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 23, 2007 I. BACKGROUND DataRescue Inc.'s IDA Pro is a disassembler and debugger for Windows, Linux, or Macintosh. It support...

MOPB-01-2007:PHP 4 Userland ZVAL Reference Counter Overflow Vulnerability

Summary The Month of PHP Bugs starts with a PHP 4 security vulnerability that exploits a problem known for many years among the PHP developers. When a PHP application is run in PHP 4 it can overflow the variable reference counter because it is only 16 bit wide. Whenever this happens it will resul...

Plan 9 Kernel (devenv.c OTRUNC/pwrite) Local Exploit

No description provided by source. / !!! DO NOT DISTRIBUTE !!! / / identity theft this exploit uses my devenv.c OTRUNC/pwrite vulnerability to overwrite specific kernel addresses to help elevate our privileges. this exploit is very picky, so you must understand the plan9 kernel and know what you...

Plan 9 Kernel - 'devenv.c OTRUNC/pwrite' Local Privilege Escalation

/ !!! DO NOT DISTRIBUTE !!! / / identity theft this exploit uses my devenv.c OTRUNC/pwrite vulnerability to overwrite specific kernel addresses to help elevate our privileges. this exploit is very picky, so you must understand the plan9 kernel and know what you are doing, though a best-practice...

devhelp, seamonkey security update

CentOS Errata and Security Advisory CESA-2006:0759 Updated seamonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open sour...

ZipCentral 4.01 ZIP File Handling Local Buffer Overflow Exploit

No description provided by source. / ZipCentral 4.01 Exploit by bratax http://www.bratax.be/ Soooooo many thanks to BuzzDee and c0rrupt for helping me with all the problems I encountered : Wouldn't have finished this without you guys! Greetz to everyone I like... no, that doesn't include you...

GDB GNU debugger buffer overflow

Buffer overflow on DWARF section parsing...

PowerZip <= 7.06.3895 Long Filename Handling Buffer Overflow Exploit

No description provided by source. / PowerZip 7.06 Exploit by bratax http://www.bratax.be/ Just a quick one as I was able to reuse most of my zipcentral eploit code.. Greetz to everyone I like...special greetz to mobbie and DT as they were sad I didn't mention them the previous time :p Some...

PowerZip 7.06.38950 - Filename Handling Local Buffer Overflow

PowerZip 7.06.38950 - Filename Handling Local Buffer Overflow / PowerZip 7.06 Exploit by bratax http://www.bratax.be/ Just a quick one as I was able to reuse most of my zipcentral eploit code.. Greetz to everyone I like...special greetz to mobbie and DT as they were sad I didn't mention them the...

PowerZip 7.06.38950 - 'Filename Handling' Local Buffer Overflow

/ PowerZip 7.06 Exploit by bratax http://www.bratax.be/ Just a quick one as I was able to reuse most of my zipcentral eploit code.. Greetz to everyone I like...special greetz to mobbie and DT as they were sad I didn't mention them the previous time :p Some technical info: - Original advisory +...

CVE-2006-4146

Buffer overflow in the 1 DWARF dwarfread.c and 2 DWARF2 dwarf2read.c debugging code in GNU Debugger GDB 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code via a crafted file with a location block DWFORMblock that contains a large number of operations...

DEBIAN-CVE-2006-4146

Buffer overflow in the 1 DWARF dwarfread.c and 2 DWARF2 dwarf2read.c debugging code in GNU Debugger GDB 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code via a crafted file with a location block DWFORMblock that contains a large number of operations...

CVE-2006-4146

Buffer overflow in the 1 DWARF dwarfread.c and 2 DWARF2 dwarf2read.c debugging code in GNU Debugger GDB 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code via a crafted file with a location block DWFORMblock that contains a large number of operations...

CVE-2006-4146

CVE-2006-4146 describes a buffer overflow in GDB 6.5 affecting the DWARF and DWARF2 debugging code (dwarfread.c and dwarf2read.c). A crafted file with a DW_FORM_block containing a large number of operations can allow user‑assisted or restricted users to execute arbitrary code. The issue arises fr...

ZipCentral 4.01 ZIP File Handling Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits =============================================================== ZipCentral 4.01 ZIP File Handling Local Buffer Overflow Exploit =============================================================== / ZipCentral 4.01 Exploit by bratax...

CVE-2006-3782

The CVE-2006-3782 entry describes an unspecified vulnerability in the Solaris 10 kernel debugger (kmdb) when running on x86, enabling local users to cause a denial of service (system hang). Vulnerable component: kmdb in Solaris 10 on x86. Impact is DoS with local access; no remote access required...

CVE-2006-3782

Unspecified vulnerability in the kernel debugger kmdb in Sun Solaris 10, when running on x86, allows local users to cause a denial of service system hang via unspecified vectors...

Microsoft Excel 20002003 (French) - Hlink Local Buffer Overflow

Microsoft Excel 20002003 French - Hlink Local Buffer Overflow / -/\NSRocket/- presents Microsoft Excel 2000 and 2003 exploit for WinXP SP2 french with shellcode source integrated Description: Microsoft Excel is prone to a remote code execution issue which may be triggered when a malformed Excel...

Microsoft Excel 2000/2003 Hlink Local Buffer Overflow Exploit (french)

Exploit for unknown platform in category local exploits ====================================================================== Microsoft Excel 2000/2003 Hlink Local Buffer Overflow Exploit french ====================================================================== / -/\NSRocket/- presents...

Microsoft Excel 2000/2003 (French) - Hlink Local Buffer Overflow

/ -/\NSRocket/- presents Microsoft Excel 2000 and 2003 exploit for WinXP SP2 french with shellcode source integrated Description: Microsoft Excel is prone to a remote code execution issue which may be triggered when a malformed Excel document is opened. The issue is due to an error in Excel while...