[ Suresec Advisories ] - Linux kernel ia32 compatibility (ia64/x86-64) race condition

Suresec Security Advisory - 00004 10/07/05 Linux kernel ia32 compatibility race condition Advisory: http://www.suresec.org/advisories/adv4.pdf http://www.suresec.org/advisories/adv3.pdf Description: A race condition vulnerability has been found in the ia32 compatibility execve systemcall. The rac...

CVE-2005-1768

Race condition in the ia32 compatibility code for the execve system call in Linux kernel 2.4 before 2.4.31 and 2.6 before 2.6.6 allows local users to cause a denial of service kernel panic and possibly execute arbitrary code via a concurrent thread that increments a pointer count after the nargs...

CVE-2005-1768

The CVE-2005-1768 issue is a race condition in the Linux kernel’s IA32 (x86) compatibility execve() handling, affecting amd64/Intel EM64T and Itanium platforms. A concurrent thread can increment a pointer count after nargs has counted pointers but before copying from user space to kernel space, l...

CVE-2005-1768

Race condition in the ia32 compatibility code for the execve system call in Linux kernel 2.4 before 2.4.31 and 2.6 before 2.6.6 allows local users to cause a denial of service kernel panic and possibly execute arbitrary code via a concurrent thread that increments a pointer count after the nargs...

linux/x86 chroot & standart 66 bytes

No description provided by source. Linux/x86 chroot and standart shellcode. By Okti http://okti.nm.ru ---------------------------------------------------------------------------------------------- / Mkdir and Chroot are written in C: / includestdio.h includeunistd.h includesys/types.h...

RHEL 3 : kernel (RHSA-2005:293)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

security flaw

The openexec function in the execve functionality exec.c in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter PTINTERP functionality...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

Aeon 0.2a - Local Linux (1)

Aeon 0.2a - Local Linux 1 !/usr/bin/perl Aeon-mail relay agent for Linux written by lammat just for practice purposes tested against aeon-0.2a http://grpower.ath.cx [email protected] execve/bin/sh for linux x86 29 bytes by Matias Sedalo $shellcode =...

CVE-2004-1073

The openexec function in the execve functionality exec.c in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter PTINTERP functionality...

linux/x86 setreuid/execve 31 bytes

Exploit for linux/x86 platform in category shellcode ================================== linux/x86 setreuid/execve 31 bytes ================================== / 31 byte setreuid shellcode - man shadow os: Slackware 9.1, Phlak 2.4, Knoppix 0.1 www.manshadow.org email protected irc.efnet.net manshad...

linux/x86 Radically Self Modifying Code 70 bytes

Exploit for linux/x86 platform in category shellcode ================================================ linux/x86 Radically Self Modifying Code 70 bytes ================================================ /-------------------------------------------------------/ / Radically Self Modifying Code for...

linux/x86 Magic Byte Self Modifying Code 76 bytes

Exploit for linux/x86 platform in category shellcode ================================================= linux/x86 Magic Byte Self Modifying Code 76 bytes ================================================= /-------------------------------------------------------/ / Magic Byte Self Modifying Code for...

linux/x86 Magic Byte Self Modifying Code 76 bytes

No description provided by source. /-------------------------------------------------------/ / Magic Byte Self Modifying Code for surviving / / toupper & tolower / / 76bytes execve exit code by XORt / /-------------------------------------------------------/ "\xeb\x34" / jmp $0x34 revert / "\x5e"...

linux/x86 Radically Self Modifying Code 70 bytes

linux/x86 Radically Self Modifying Code 70 bytes. Shellcode exploit for linx86 platform /-------------------------------------------------------/ / Radically Self Modifying Code for surviving / / toupper and tolower / / / / 70byte execve & exit code by XORt /...

linux/x86 Magic Byte Self Modifying Code 76 bytes

linux/x86 Magic Byte Self Modifying Code 76 bytes. Shellcode exploit for linx86 platform /-------------------------------------------------------/ / Magic Byte Self Modifying Code for surviving / / toupper & tolower / / 76bytes execve exit code by XORt /...

CVE-2004-0618

FreeBSD 5.1 for the Alpha processor allows local users to cause a denial of service crash via an execve system call with an unaligned memory address as an argument...

CVE-2004-1073

The CVE-2004-1073 entry affects the Linux kernel (2.4.x up to 2.4.27 and 2.6.x up to 2.6.8). It is caused by the open_exec path of the execve functionality (exec.c), where the interpreter (PT_INTERP) handling can allow local users to read non-readable ELF binaries. The description specifies local...

linux/x86 execve code 23 bytes

No description provided by source. / Linux 23 byte execve code. Greetz to preedator marcetam admin at marcetam.net / char linux= "\x99" / cdq / "\x52" / push %edx / "\x68\x2f\x2f\x73\x68" / push $0x68732f2f / "\x68\x2f\x62\x69\x6e" / push $0x6e69622f / "\x89\xe3" / mov %esp,%ebx / "\x52" / push...

linux/x86 execve("/bin/ash",0,0); 21 bytes

Exploit for linux/x86 platform in category shellcode ========================================== linux/x86 execve"/bin/ash",0,0; 21 bytes ========================================== / 21 byte execve"/bin/ash",0,0; shellcode for linux x86 by zasta zasta at darkircop.org / include include char...