23 matches found
CVE-2011-0513
DCR.sys driver in SecurStar DriveCrypt 5.4, 5.3, and earlier allows local users to execute arbitrary code via a crafted argument to the 0x00073800 IOCTL...
EUVD-2011-0533
Malware in sbrugna...
DriveCrypt <= 5.3 - Local Kernel ring0 SYSTEM Exploit
No description provided by source. / drivecrypt-dcr.c Copyright c 2009 by [email protected] DriveCrypt = 5.3 local kernel ring0 SYSTEM exploit by mu-b - Sun 16 Aug 2009 - Tested on: DCR.sys Compile: MinGW + -lntdll - Private Source Code -DO NOT DISTRIBUTE - http://www.digit-labs.org/ --...
Multiple Vendor BIOS Keyboard Buffer Password Persistence Weakness (1)
No description provided by source. source: http://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on the operating system running o...
Securstar - DriveCrypt - Local Kernel Denial of Service/Memory Disclosure/Privilege Escalation
===============================ADVISORY=============================== Advisory: Securstar - DriveCrypt - Local Kernel Denial of Service/Memory Disclosure/Privilege Escalation Advisory ID: DSEC-2011-0001 Author: Neil Kettle, Digit Security Ltd Affected Software: Securstar DriveCrypt Vendor URL:...
Securstar DriveCrypt multiple security vulnerabilities
DoS, information leakage, privilege escalation...
SecurStar DriveCrypt 'DCR.sys' IOCTL Handling Privilege Escalation Vulnerability
This host is installed with SecurStar DriveCrypt and is prone to privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: gbdrivecryptioctlprivescvulnwin.nasl 7019 2017-08-29 11:51:27Z teissa $ SecurStar DriveCrypt 'DCR.sys' IOCTL Handling Privilege Escalation Vulnerability Authors:...
SecurStar DriveCrypt 'DCR.sys' IOCTL Handling Privilege Escalation Vulnerability
SecurStar DriveCrypt is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-0513
DCR.sys driver in SecurStar DriveCrypt 5.4, 5.3, and earlier allows local users to execute arbitrary code via a crafted argument to the 0x00073800 IOCTL...
Code injection
DCR.sys driver in SecurStar DriveCrypt 5.4, 5.3, and earlier allows local users to execute arbitrary code via a crafted argument to the 0x00073800 IOCTL...
CVE-2011-0513
DCR.sys driver in SecurStar DriveCrypt 5.4, 5.3, and earlier allows local users to execute arbitrary code via a crafted argument to the 0x00073800 IOCTL...
CVE-2011-0513
CVE-2011-0513 concerns the DCR.sys driver in SecurStar DriveCrypt (versions 5.4, 5.3 and earlier). The vulnerability allows local privilege escalation by passing a crafted argument to the 0x00073800 IOCTL, enabling arbitrary code execution on the affected host. Reported impact in the public recor...
DriveCrypt <= 5.3 Local Kernel ring0 SYSTEM Exploit
Exploit for windows platform in category local exploits / drivecrypt-dcr.c Copyright c 2009 by DriveCrypt include include include define DCRIOCTL 0x00073800 static unsigned char win32fixup = "\x89\xe5" "\x81\xc5\xb4\x0c\x00\x00"; / Win2k3 SP1/2 - kernel EPROCESS token switcher by mu-b / static...
DriveCrypt 5.3 - Local Kernel Ring0 SYSTEM
/ drivecrypt-dcr.c Copyright c 2009 by DriveCrypt include include include define DCRIOCTL 0x00073800 static unsigned char win32fixup = "\x89\xe5" "\x81\xc5\xb4\x0c\x00\x00"; / Win2k3 SP1/2 - kernel EPROCESS token switcher by mu-b / static unsigned char win2k3ring0shell = / ring0 /...
DriveCrypt 5.3 - Local Kernel Ring0 SYSTEM
DriveCrypt 5.3 - Local Kernel Ring0 SYSTEM / drivecrypt-dcr.c Copyright c 2009 by DriveCrypt include include include define DCRIOCTL 0x00073800 static unsigned char win32fixup = "\x89\xe5" "\x81\xc5\xb4\x0c\x00\x00"; / Win2k3 SP1/2 - kernel EPROCESS token switcher by mu-b / static unsigned char...
CVE-2008-3898
Secu Star DriveCrypt Plus Pack 3.9 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...
Design/Logic Flaw
Secu Star DriveCrypt Plus Pack 3.9 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...
CVE-2008-3898
CVE-2008-3898 affects Secu Star DriveCrypt Plus Pack 3.9. Local attackers can read pre-boot authentication passwords stored in the BIOS keyboard buffer because the buffer is not cleared before/after use, enabling partial disclosure of sensitive data via memory locations associated with that buffe...
[IVIZ-08-007] DriveCrypt Security Model bypass exploiting wrong BIOS API usage
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- iViZ Security Advisory 08-007 25/08/2008 - ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com -...
Multiple Vendor BIOS - Keyboard Buffer Password Persistence (1)
Multiple Vendor BIOS - Keyboard Buffer Password Persistence 1 source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on th...