7864 matches found
Novell eDirectory 8.x - iMonitor HTTPSTK Buffer Overflow (2)
Novell eDirectory 8.x - iMonitor HTTPSTK Buffer Overflow 2 // source: https://www.securityfocus.com/bid/20655/info The Novell eDirectory server iMonitor is prone to a stack-based buffer-overflow vulnerability because it fails to perform sufficient bounds checking on client-supplied data before...
Novell eDirectory <= 9.0 DHost Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ============================================================= Novell eDirectory | \ / / / / 30\10\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through...
Novell eDirectory 9.0 - DHost Remote Buffer Overflow
Novell eDirectory 9.0 - DHost Remote Buffer Overflow / . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 30\10\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through "MbdMP Going forward may not be the answer...
Microsoft .NET Framework SDK MSIL工具堆溢出漏洞
Microsoft .NET Framework是一个流行的软件开发工具包。 Microsoft .NET Framework SDK的ildasm在反汇编DLL文件时存在堆溢出漏洞，导致在反汇编特制的DLL时可能出现拒绝服务。 出现异常的部分如下： pvReturn = HeapAlloccrtheap, HEAPZEROMEMORY, size; if pvReturn == NULL cmp dword ptr pvReturn,ebx jne $L19640+1 7C3423B6h pvReturn = HeapAlloccrtheap, HEAPZEROMEMORY, size...
Microsoft Windows未处理异常远程代码执行漏洞（MS06-051）
Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows处理内存中常驻的应用程序时没有正确的处理异常，如果用户受骗访问了恶意站点或WEB页面的话就可能导致执行任意代码。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows Server 2003 SP1 Microsoft Windows Server 2003 Microsoft Windows 2000SP4 Microsoft已经为此发布了一个安全公告（MS06-051）以及相应补丁:...
CVE-2006-4392
The Mach kernel, as used in operating systems including 1 Mac OS X 10.4 through 10.4.7 and 2 OpenStep before 4.2, allows local users to gain privileges via a parent process that forces an exception in a setuid child and uses Mach exception ports to modify the child's thread context and task addre...
CVE-2006-4392
The Mach kernel, as used in operating systems including 1 Mac OS X 10.4 through 10.4.7 and 2 OpenStep before 4.2, allows local users to gain privileges via a parent process that forces an exception in a setuid child and uses Mach exception ports to modify the child's thread context and task addre...
Matasano Advisory: MacOS X Mach Exception Server Privilege Escalation
Matasano Security Advisory MacOS X Mach Exception Server Privilege Escalation Release Date: Fri Sep 29 2006 Affects: MacOS X 10.4 10.4.8, 10.3., OpenStep 4.2 Severity: High - Local root privilege escalation Credit: Dino Dai Zovi ddz at matasano.com Vendor Status: MacOS X 10.4.8 fixes vulnerabilit...
Apple Mac OSX 10.4.7 - Mach Exception Handling Local (10.3.x)
/ excploit.c - 28 Nov 2005 - [email protected] Exploitable Mach Exception Handling Affected: Mac OS X 10.4.6 darwin 8.6.0 and older When a process executes a setuid executable, all existing rights to the task port are invalidated, to make sure unauthorized processes do not retain control o...
Apple Mac OSX 10.4.7 - Mach Exception Handling Privilege Escalation
Apple Mac OSX 10.4.7 - Mach Exception Handling Privilege Escalation / excploit.c - 28 Nov 2005 - [email protected] Exploitable Mach Exception Handling Affected: Mac OS X 10.4.6 darwin 8.6.0 and older When a process executes a setuid executable, all existing rights to the task port are...
Mac OS X <= 10.4.7 Mach Exception Handling Local Root Exploit
No description provided by source. / excploit.c - 28 Nov 2005 - [email protected] Exploitable Mach Exception Handling Affected: Mac OS X 10.4.6 darwin 8.6.0 and older When a process executes a setuid executable, all existing rights to the task port are invalidated, to make sure unauthorize...
Apple Mac OSX 10.4.7 - Mach Exception Handling Local (10.3.x)
Apple Mac OSX 10.4.7 - Mach Exception Handling Local 10.3.x / excploit.c - 28 Nov 2005 - [email protected] Exploitable Mach Exception Handling Affected: Mac OS X 10.4.6 darwin 8.6.0 and older When a process executes a setuid executable, all existing rights to the task port are invalidated,...
Mac OS X <= 10.4.7 Mach Exception Handling Local Exploit (10.3.x 0day)
Exploit for macOS platform in category local exploits ====================================================================== Mac OS X = 10.4.7 Mach Exception Handling Local Exploit 10.3.x 0day ====================================================================== / excploit.c - 28 Nov 2005 -...
Apple Mac OSX 10.4.7 - Mach Exception Handling Privilege Escalation
/ excploit.c - 28 Nov 2005 - [email protected] Exploitable Mach Exception Handling Affected: Mac OS X 10.4.6 darwin 8.6.0 and older When a process executes a setuid executable, all existing rights to the task port are invalidated, to make sure unauthorized processes do not retain control o...
Mac OS X <= 10.4.7 Mach Exception Handling Local Exploit (10.3.x 0day)
No description provided by source. / excploit.c - 28 Nov 2005 - [email protected] Exploitable Mach Exception Handling Affected: Mac OS X 10.4.6 darwin 8.6.0 and older When a process executes a setuid executable, all existing rights to the task port are invalidated, to make sure unauthorize...
Mac OS X <= 10.4.7 Mach Exception Handling Local Root Exploit
Exploit for macOS platform in category local exploits ============================================================= Mac OS X include include include extern booleant excservermachmsgheadert , machmsgheade...
CVE-2006-4982
Cisco NAC maintains an exception list that does not record device properties other than MAC address, which allows physically proximate attackers to bypass control methods and join a local network by spoofing the MAC address of a different type of device, as demonstrated by using the MAC address o...
CVE-2006-4982
Cisco NAC has a vulnerability where an exception list only records MAC addresses, enabling physically proximate attackers to bypass controls and join a local network by spoofing the MAC address of a different device type (example: MAC of a disconnected printer). Affected/software component: Cisco...
CVE-2006-4981
Symantec Sygate NAC allows physically proximate attackers to bypass control methods and join a local network by selecting a forged MAC address associated with an exception rule that 1 permits all non-Windows devices or 2 whitelists certain sets of Organizationally Unique Identifiers OUIs...
CVE-2006-4982
Cisco NAC maintains an exception list that does not record device properties other than MAC address, which allows physically proximate attackers to bypass control methods and join a local network by spoofing the MAC address of a different type of device, as demonstrated by using the MAC address o...