Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (1)

// / Local r00t Exploit for: / / Linux Kernel PRCTL Core Dump Handling / / BID 18874 / CVE-2006-2451 / / Kernel 2.6.x = 2.6.13 && main PoC code / / - RoMaNSoFt local root code / / 10.Jul.2006 / // include include include include include include include include char...

Linux Kernel 2.6.13 <= 2.6.17.4 sys_prctl() Local Root Exploit

Exploit for linux platform in category local exploits ============================================================== Linux Kernel 2.6.13 = 2.6.13 && main PoC code / / - RoMaNSoFt local root code / / 10.Jul.2006 / // include include include include include include include include char...

RHEL 4 : kernel (RHSA-2006:0574)

Updated kernel packages that fix a privilege escalation security issue in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the...

kernel security update

CentOS Errata and Security Advisory CESA-2006:0574 Updated kernel packages that fix a privilege escalation security issue in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. Th...

CVE-2006-2451

The suiddumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service disk consumption and possibly gain privileges via the PRSETDUMPABLE argument of the prctl function and a program that causes a core dump fi...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix a privilege escalation security issue in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the...

security flaw

sqlparse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain sensitive information via a COMTABLEDUMP request with an incorrect packet length, which includes portions of memory in an error message...

CVE-2006-1173

Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and migh...

portmap 5 beta (Set/Dump) Local Denial of Service Exploit

Exploit for linux platform in category dos / poc ========================================================= portmap 5 beta Set/Dump Local Denial of Service Exploit ========================================================= ///////////////////////////////////// // portmap Set+Dump Local DoS - PoC...

MySQL <= 5.0.20 COM_TABLE_DUMP Memory Leak/Remote BoF Exploit

Exploit for linux platform in category remote exploits ============================================================= MySQL = 5.0.20 COMTABLEDUMP Memory Leak/Remote BoF Exploit ============================================================= / April 21.st 2006 myexploit.c MySql COMTABLEDUMP Memory Le...

E107 v.6.17d vuln.

SQL Injection Существует из-за того, что не проверяется значение $order, преданное в POST-запросе к /user.php В случае, если: злоумышленник знает полный путь к каталогу, в котором размещен контент; magicquotesgpc=off; пользователь, с чьими правами идет обращение к БД имеет права Filepriv; то, он...

Fedora Core 5 : gdm-2.14.1-1.fc5.2 (2006-338)

Notes taken from upstream release mail - The sockets connection between the slaves and the GDM daemon is now better managed to better ensure that sockets are never left open. Brian Cameron - Corrected bug that causes a core dump when you click on gdmgreeter fields that have an id. Brian Cameron -...

security flaw

Race condition in Linux 2.6, when threads are sharing memory mapping via CLONEVM such as linuxthreads and vfork, might allow local users to cause a denial of service deadlock by triggering a core dump while waiting for a thread that has just performed an exec...

Unclassified NewsBoard 1.5.3 Patch 3 - Blind SQL Injection

Unclassified NewsBoard 1.5.3pl3 blind SQL injection...

CVE-2005-3527

Race condition in docoredump in signal.c in Linux kernel 2.6 allows local users to cause a denial of service by triggering a core dump in one thread while another thread has a pending SIGSTOP...

CVE-2005-3504

Buffer overflow in swcons in IBM AIX 5.2, when debug malloc is enabled, allows remote attackers to cause a core dump and possibly execute arbitrary code...

CVE-2005-3504

CVE-2005-3504 is a buffer overflow in swcons within IBM AIX 5.2 (with debug malloc enabled) that could allow a remote attacker to trigger a core dump and potentially execute arbitrary code. The connected documents corroborate the affected component (swcons) and the underlying cause (buffer overfl...

CVE-2005-3106

Race condition in Linux 2.6, when threads are sharing memory mapping via CLONEVM such as linuxthreads and vfork, might allow local users to cause a denial of service deadlock by triggering a core dump while waiting for a thread that has just performed an exec...

CVE-2005-3106

Race condition in Linux 2.6, when threads are sharing memory mapping via CLONEVM such as linuxthreads and vfork, might allow local users to cause a denial of service deadlock by triggering a core dump while waiting for a thread that has just performed an exec...

CVE-2005-3106

Race condition in Linux 2.6, when threads are sharing memory mapping via CLONEVM such as linuxthreads and vfork, might allow local users to cause a denial of service deadlock by triggering a core dump while waiting for a thread that has just performed an exec...