[Full-disclosure] Remote DOS HP JetDirect Print Servers

Vulnerability : Remote DOS HP JetDirect Print Servers Product : HP JetDirect Print Servers "HP LaserJet Series" By: Handrix handrixatmorxorg 26 March 2007 MorX security research team www.morx.org +-------------+ | Description...

etherleak.txt

!/usr/bin/perl -w etherleak, code that has been 5 years coming. On 04/27/2002, I disclosed on the Linux Kernel Mailing list, a vulnerability that would be come known as the 'etherleak' bug. In various situations an ethernet frame must be padded to reach a specific size or fall on a certain...

Ethernet Device Drivers Frame Padding Info Leakage Exploit (Etherleak)

No description provided by source. !/usr/bin/perl -w etherleak, code that has been 5 years coming. On 04/27/2002, I disclosed on the Linux Kernel Mailing list, a vulnerability that would be come known as the 'etherleak' bug. In various situations an ethernet frame must be padded to reach a specif...

Ethernet Device Drivers Frame Padding - 'Etherleak' Infomation Leakage

!/usr/bin/perl -w etherleak, code that has been 5 years coming. On 04/27/2002, I disclosed on the Linux Kernel Mailing list, a vulnerability that would be come known as the 'etherleak' bug. In various situations an ethernet frame must be padded to reach a specific size or fall on a certain...

Ethernet Device Drivers Frame Padding Info Leakage Expl (Etherleak)

Exploit for multiple platform in category remote exploits ====================================================================== Ethernet Device Drivers Frame Padding Info Leakage Exploit Etherleak ====================================================================== !/usr/bin/perl -w etherleak,...

Linux Kernel 2.0.x2.2.x2.4.x (FreeBSD 4.x) - Network Device Driver Frame Padding Information Disclosure

Linux Kernel 2.0.x2.2.x2.4.x FreeBSD 4.x - Network Device Driver Frame Padding Information Disclosure source: https://www.securityfocus.com/bid/6535/info Network device drivers for several vendors have been reported to disclose potentially sensitive information to attackers. Frames that are small...

Mandrake Linux Security Advisory : kernel (MDKSA-2007:047)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : A double free vulnerability in the squashfs module could allow a local user to cause a Denial of Service by mounting a crafted squashfs filesystem CVE-2006-5701. The zlibinflate function allows local users to cause a cra...

Mac OS X Airport Update 2007-001

The remote host is running a version of Mac OS X 10.4 that does not have Airport Update 2007-001 applied. This update fixes a flaw in the wireless drivers that may allow an attacker to crash a host by sending a malformed frame. TRUSTED...

CVE-2006-6952

Computer Associates Host Intrusion Prevention System HIPS drivers 1 Core kmxstart.sys 6.5.4.31 and 2 Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers...

CVE-2006-6952

CVE-2006-6952 affects CA Personal Firewall/CA Internet Security Suite 2007: HIPS Core (KmxStart.sys) and HIPS Firewall (KmxFw.sys) allow local privilege escalation by using privileged IOCTLs to modify callback pointers. Impact is local privilege escalation; affected products include CA Personal F...

CVE-2006-6952

Computer Associates Host Intrusion Prevention System HIPS drivers 1 Core kmxstart.sys 6.5.4.31 and 2 Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers...

Intel Centrino ipw2200 wireless drivers buffer overflow

Buffer overflow on oversized SSID...

Design/Logic Flaw

Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into the product's installation directory by creating links using FileLinkInformation requests with the ZwSetInformationFile function, as demonstrated by modifying SandBox.sys...

CVE-2007-0333

Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into the product's installation directory by creating links using FileLinkInformation requests with the ZwSetInformationFile function, as demonstrated by modifying SandBox.sys...

CVE-2007-0333: Undefined Security Weakness

Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into the product's installation directory by creating links using FileLinkInformation requests with the ZwSetInformationFile function, as demonstrated by modifying SandBox.sys...

Kaspersky Antivirus privilege escalation

Privilege escalation with KLIN and KLICK system drivers IOCTL...

Design/Logic Flaw

The PML Driver HPZ12 HPZipm12.exe in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICECHANGECONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by modifying the binpath argument, a related issue to...

CVE-2007-0161

The PML Driver HPZ12 HPZipm12.exe in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICECHANGECONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by modifying the binpath argument, a related issue to...

CVE-2007-0161: Undefined Security Weakness

The PML Driver HPZ12 HPZipm12.exe in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICECHANGECONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by modifying the binpath argument, a related issue to...

CVE-2007-0161

The CVE-2007-0161 entry concerns the HP PML Driver HPZ12 (HPZipm12.exe) used in HP all‑in‑one drivers. It states that insecure SERVICE_CHANGE_CONFIG DACL permissions on the driver allow a local user to gain privileges and run arbitrary programs by modifying the binpath, a scenario related to CVE-...