93 matches found
DESlock+ 3.2.7 - Local Kernel Overflow (PoC)
DESlock+ 3.2.7 - Local Kernel Overflow PoC / deslock-overflow.c Copyright c 2008 by DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xC001D00D define DLMFENCBUZSZ 0x1000 define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; void argARGSIZE0x20;...
DESlock+ < 3.2.7 - Local Kernel Race Condition Denial of Service (PoC)
/ deslock-probe-race.c Copyright c 2008 by DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xDEADBEEF define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; void argARGSIZE0x20; ; void hammerthread void zpage BOOL result; printf " child using pa...
Design/Logic Flaw
DESlock+ 3.2.6 and earlier, when DLMFENC.sys 1.0.0.26 and DLMFDISK.sys 1.2.0.27 are present, allows local users to gain privileges via a certain DLMFENCIOCTL request to \.\DLKPFSDDevice that overwrites a pointer, aka the "ring0 link list zero SYSTEM" vulnerability...
Memory corruption
Memory leak in DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service kernel memory consumption via a series of DLMFENCIOCTL requests to \.\DLKPFSDDevice that allocate "link list structures."...
Design/Logic Flaw
DLMFDISK.sys 1.2.0.27 in DESlock+ 3.2.6 and earlier allows local users to gain privileges via a certain DLKFDISKIOCTL request to \.\DLKFDiskControl that overwrites a data structure associated with a mounted pseudo-filesystem, aka the "ring0 SYSTEM" vulnerability...
CVE-2008-1139
DESlock+ 3.2.6 and earlier, when DLMFENC.sys 1.0.0.26 and DLMFDISK.sys 1.2.0.27 are present, allows local users to gain privileges via a certain DLMFENCIOCTL request to \.\DLKPFSDDevice that overwrites a pointer, aka the "ring0 link list zero SYSTEM" vulnerability...
CVE-2008-1138
DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service system crash via a certain ZEROMEM DLMFENCIOCTL request to \.\DLKPFSDDevice, aka the "ring0 link list zero" vulnerability...
Design/Logic Flaw
DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service system crash via a certain ZEROMEM DLMFENCIOCTL request to \.\DLKPFSDDevice, aka the "ring0 link list zero" vulnerability...
CVE-2008-1140
DLMFDISK.sys 1.2.0.27 in DESlock+ 3.2.6 and earlier allows local users to gain privileges via a certain DLKFDISKIOCTL request to \.\DLKFDiskControl that overwrites a data structure associated with a mounted pseudo-filesystem, aka the "ring0 SYSTEM" vulnerability...
CVE-2008-1140
The CVE-2008-1140 entry describes a local privilege-escalation in DESlock+ prior to 3.2.7 due to a flaw in the DLMFDISK.sys kernel driver (version 1.2.0.27). Exploitation involves a specific DLKFDISK_IOCTL to .\DLKFDisk_Control that overwrites a data structure associated with a mounted pseudo-fil...
CVE-2008-1141
Memory leak in DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service kernel memory consumption via a series of DLMFENCIOCTL requests to \.\DLKPFSDDevice that allocate "link list structures."...
CVE-2008-1140
DLMFDISK.sys 1.2.0.27 in DESlock+ 3.2.6 and earlier allows local users to gain privileges via a certain DLKFDISKIOCTL request to \.\DLKFDiskControl that overwrites a data structure associated with a mounted pseudo-filesystem, aka the "ring0 SYSTEM" vulnerability...
CVE-2008-1138
DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service system crash via a certain ZEROMEM DLMFENCIOCTL request to \.\DLKPFSDDevice, aka the "ring0 link list zero" vulnerability...
CVE-2008-1139
DESlock+ 3.2.6 and earlier, when DLMFENC.sys 1.0.0.26 and DLMFDISK.sys 1.2.0.27 are present, allows local users to gain privileges via a certain DLMFENCIOCTL request to \.\DLKPFSDDevice that overwrites a pointer, aka the "ring0 link list zero SYSTEM" vulnerability...
CVE-2008-1139
DESlock+ 3.2.6 and earlier are affected when DLMFENC.sys 1.0.0.26 and DLMFDISK.sys 1.2.0.27 are present. A DLMFENC_IOCTL request to the device .\DLKPFSD_Device can overwrite a pointer, enabling local privilege escalation to SYSTEM (the “ring0 link list zero SYSTEM” issue). Affected components are...
CVE-2008-1141
CVE-2008-1141 affects DESlock+ on Windows through the DLMFENC.sys 1.0.0.26 driver (and earlier). The vulnerability arises from a memory leak in the DLMFENC_IOCTL handling invoked via the .\
CVE-2008-1138
CVE-2008-1138 affects DESlock+ (DESlock+) up to version 3.2.6, where the kernel driver DLMFENC.sys (1.0.0.26) is vulnerable to a local denial-of-service via a ZERO_MEM DLMFENC_IOCTL to \.�DLKPFSD_Device, known as the “ring0 link list zero” issue. Impact is a system crash from local privilege-exec...
DESlock+ <= 3.2.6 local kernel ring0 link list zero SYSTEM Exploit
No description provided by source. / deslock-list-zero-v2.c Copyright c 2008 by [email protected] DESlock+ = 3.2.6 local kernel ring0 link list zero SYSTEM exploit by mu-b - Fri 28 Dec 2007 - Tested on: DLMFENC.sys 1.0.0.26, DLMFDISK.sys 1.2.0.27 - Microsoft Windows 2003 SP2 - Microsoft Windows...
DESlock+ <= 3.2.6 DLMFENC.sys Local Kernel ring0 link list zero PoC
No description provided by source. / deslock-list-zero.c Copyright c 2008 by [email protected] DESlock+ = 3.2.6 local kernel ring0 link list zero POC by mu-b - Fri 21 Dec 2007 - Tested on: DLMFENC.sys 1.0.0.26 - Private Source Code -DO NOT DISTRIBUTE - http://www.digit-labs.org/ -- Digit-Labs...
DESlock+ <= 3.2.6 (list) Local Kernel Memory Leak PoC
No description provided by source. / deslock-list-leak.c Copyright c 2008 by [email protected] DESlock+ = 3.2.6 local kernel mem leak POC by mu-b - Fri 21 Dec 2007 - Tested on: DLMFENC.sys 1.0.0.26 kernel pool memory leak by continually allocating link list structures and never freeing them. Th...