Race condition

Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service NULL pointer dereference and system crash or gain privileges by attempting to open an anonymous pipe via a /proc//fd/ pathname...

CVE-2009-3547

Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service NULL pointer dereference and system crash or gain privileges by attempting to open an anonymous pipe via a /proc//fd/ pathname...

FreeBSD <= 6.1 kqueue() NULL pointer Dereference Local Root Exploit

No description provided by source. FreeBSD = 6.1 suffers from classical check/use race condition on SMP systems in kevent syscall, leading to kernel mode NULL pointer dereference. It can be triggered by spawning two threads: 1st thread looping on open and close syscalls, and the 2nd thread loopin...

Solaris 5.4 (x86) : 104750-01

Solstice FireWall-1 2.1c: FD leak in fwd VPN. Date this patch was last updated by Sun : Mar/28/97 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

BlogWrite 0.91 Remote FD / SQL Injection Exploit

No description provided by source. !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

linux/amd64 flush iptables rules shellcode 84 bytes

No description provided by source. / /sbin/iptables -F shellcode for AMD64 84 bytes By gat3way gat3wayat gat3waydoteu The code to load the sc into an executable mmap-ed executable page was shamelessly stolen by hophet too lazy : Thanks Gustavo C. for the inspiration - x8664 assembly is fun : Here...

linux/x86 system-beep shellcode 45 bytes

No description provided by source. / By Thomas Rinsma meatth0mas.nl 16 apr. 2008 Shellcode makes system speaker beep once, 45 bytes: ; int fd = open"/dev/tty10", ORDONLY; push byte 5 pop eax cdq push edx push 0x30317974 push 0x742f2f2f push 0x7665642f mov ebx, esp mov ecx, edx int 80h ; ioctlfd,...

DEBIAN-CVE-2008-0948

Buffer overflow in the RPC library lib/rpc/rpcdtablesize.c used by libgssrpc and kadmind in MIT Kerberos 5 krb5 1.2.2, and probably other versions before 1.3, when running on systems whose unistd.h does not define the FDSETSIZE macro, allows remote attackers to cause a denial of service crash and...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds. Buffer overflow in the RPC library lib/rpc/rpcdtablesize.c used by libgssrpc and kadmind in MIT Kerberos 5 krb5 1.2.2, and probably other versions before 1.3, when running on systems whose unistd.h does not define the...

Simple Forum 3.2 (FD/XSS) Multiple Remote Vulnerabilities

No description provided by source. SIMPLE FORUM v 3.2 MULTIPLE VULNERABILITIES author : tomplixsee my email : [email protected] &n...

DEBIAN-CVE-2007-6562

Multiple stack-based buffer overflows in the use of FDSET in TCPreen before 1.4.4 allow remote attackers to cause a denial of service via multiple concurrent connections, which result in overflows in the 1 SocketAddress::Connect function in libsolve/sockprot.cpp and 2 monitorbridge function in...

CVE-2007-0620

download.php in FD Script 1.3.2 and earlier allows remote attackers to read source of files under the web document root with certain extensions, including .php, via a relative pathname in the fname parameter, as demonstrated by downloading config.php...

Code injection

download.php in FD Script 1.3.2 and earlier allows remote attackers to read source of files under the web document root with certain extensions, including .php, via a relative pathname in the fname parameter, as demonstrated by downloading config.php...

CVE-2007-0620

CVE-2007-0620 affects FD Script prior to or including 1.3.2. The vulnerability exists in download.php, where a relative pathname supplied by the fname parameter can cause the web server to disclose source files under the document root (e.g., config.php) with certain extensions (including .php). T...

FD Script 1.3.x - FName Information Disclosure

FD Script 1.3.x - FName Information Disclosure source: https://www.securityfocus.com/bid/22265/info FD Script is prone to an information-disclosure vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve...

FD Script 1.3.x - 'FName' Information Disclosure

source: https://www.securityfocus.com/bid/22265/info FD Script is prone to an information-disclosure vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the...

Solaris 2.5.1 (i386) : 104749-01

The remote host is missing Sun Security Patch number 104749-01 Solstice FireWall-1 2.1c: FD leak in fwd Non-VPN. Date this patch was last updated by Sun : Thu Mar 27 17:00:00 MST 1997 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has...

Solaris 2.5.1 (i386) : 104750-01

The remote host is missing Sun Security Patch number 104750-01 Solstice FireWall-1 2.1c: FD leak in fwd VPN. Date this patch was last updated by Sun : Thu Mar 27 17:00:00 MST 1997 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has bee...

FreeBSD : gnupg -- false positive signature verification (63fe4189-9f97-11da-ac32-0001020eed82)

Werner Koch reports : The Gentoo project identified a security related bug in GnuPG. When using any current version of GnuPG for unattended signature verification e.g. by scripts and mail programs, false positive signature verification of detached signatures may occur. This problem affects the to...