DESlock+ 3.2.7 - 'vdlptokn.sys' Local Denial of Service

//////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | Data Encryption Systems Ltd. - http://www.deslock.com/ | // // | Data Encryption Systems DESlock+ - 3.2.7 | // /...

DESlock+ <= 3.2.7 Local Kernel Race Condition Denial of Service PoC

Exploit for unknown platform in category dos / poc =================================================================== DESlock+ DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xDEADBEEF define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; voi...

DESlock+ <= 3.2.7 (probe read) Local Kernel Denial of Service PoC

Exploit for unknown platform in category dos / poc ================================================================= DESlock+ DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xC001D00D define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; void...

DESlock+ <= 3.2.7 Local Kernel Overflow PoC

Exploit for unknown platform in category dos / poc =========================================== DESlock+ DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xC001D00D define DLMFENCBUZSZ 0x1000 define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum;...

DESlock+ 3.2.7 - Local Kernel Overflow (PoC)

DESlock+ 3.2.7 - Local Kernel Overflow PoC / deslock-overflow.c Copyright c 2008 by DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xC001D00D define DLMFENCBUZSZ 0x1000 define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; void argARGSIZE0x20;...

DESlock+ 3.2.7 - Local Kernel Race Condition Denial of Service (PoC)

DESlock+ 3.2.7 - Local Kernel Race Condition Denial of Service PoC / deslock-probe-race.c Copyright c 2008 by DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xDEADBEEF define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; void argARGSIZE0x20; ...

DESlock+ < 3.2.7 - 'probe read' Local Kernel Denial of Service (PoC)

/ deslock-probe-read.c Copyright c 2008 by DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xC001D00D define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; void argARGSIZE0x20; ; static void xormaskreq struct ioctlreq req DWORD i, pid; PCHAR pt...

DESlock+ < 3.2.7 - Local Kernel Race Condition Denial of Service (PoC)

/ deslock-probe-race.c Copyright c 2008 by DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xDEADBEEF define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; void argARGSIZE0x20; ; void hammerthread void zpage BOOL result; printf " child using pa...

DESlock+ < 3.2.7 - Local Kernel Overflow (PoC)

/ deslock-overflow.c Copyright c 2008 by DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xC001D00D define DLMFENCBUZSZ 0x1000 define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; void argARGSIZE0x20; ; static void xormaskreq struct ioctlreq r...

Design/Logic Flaw

DESlock+ 3.2.6 and earlier, when DLMFENC.sys 1.0.0.26 and DLMFDISK.sys 1.2.0.27 are present, allows local users to gain privileges via a certain DLMFENCIOCTL request to \.\DLKPFSDDevice that overwrites a pointer, aka the "ring0 link list zero SYSTEM" vulnerability...

Design/Logic Flaw

DLMFDISK.sys 1.2.0.27 in DESlock+ 3.2.6 and earlier allows local users to gain privileges via a certain DLKFDISKIOCTL request to \.\DLKFDiskControl that overwrites a data structure associated with a mounted pseudo-filesystem, aka the "ring0 SYSTEM" vulnerability...

Memory corruption

Memory leak in DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service kernel memory consumption via a series of DLMFENCIOCTL requests to \.\DLKPFSDDevice that allocate "link list structures."...

Design/Logic Flaw

DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service system crash via a certain ZEROMEM DLMFENCIOCTL request to \.\DLKPFSDDevice, aka the "ring0 link list zero" vulnerability...

CVE-2008-1139

DESlock+ 3.2.6 and earlier, when DLMFENC.sys 1.0.0.26 and DLMFDISK.sys 1.2.0.27 are present, allows local users to gain privileges via a certain DLMFENCIOCTL request to \.\DLKPFSDDevice that overwrites a pointer, aka the "ring0 link list zero SYSTEM" vulnerability...

CVE-2008-1140

DLMFDISK.sys 1.2.0.27 in DESlock+ 3.2.6 and earlier allows local users to gain privileges via a certain DLKFDISKIOCTL request to \.\DLKFDiskControl that overwrites a data structure associated with a mounted pseudo-filesystem, aka the "ring0 SYSTEM" vulnerability...

CVE-2008-1138

DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service system crash via a certain ZEROMEM DLMFENCIOCTL request to \.\DLKPFSDDevice, aka the "ring0 link list zero" vulnerability...

CVE-2008-1138

DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service system crash via a certain ZEROMEM DLMFENCIOCTL request to \.\DLKPFSDDevice, aka the "ring0 link list zero" vulnerability...

CVE-2008-1139

DESlock+ 3.2.6 and earlier, when DLMFENC.sys 1.0.0.26 and DLMFDISK.sys 1.2.0.27 are present, allows local users to gain privileges via a certain DLMFENCIOCTL request to \.\DLKPFSDDevice that overwrites a pointer, aka the "ring0 link list zero SYSTEM" vulnerability...

CVE-2008-1141

Memory leak in DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service kernel memory consumption via a series of DLMFENCIOCTL requests to \.\DLKPFSDDevice that allocate "link list structures."...

CVE-2008-1138

CVE-2008-1138 affects DESlock+ (DESlock+) up to version 3.2.6, where the kernel driver DLMFENC.sys (1.0.0.26) is vulnerable to a local denial-of-service via a ZERO_MEM DLMFENC_IOCTL to \.�DLKPFSD_Device, known as the “ring0 link list zero” issue. Impact is a system crash from local privilege-exec...