91 matches found
Linux Kernel 'truncate()'本地特权提升漏洞
BUGTRAQ ID: 31368 CVE ID：CVE-2008-4210 CNCVE ID：CNCVE-20084210 Linux是一款开放源代码的操作系统。 Linux内核'truncate'和'ftruncate'函数存在设计错误，本地攻击者可以利用漏洞提升特权。 当建立文件时，open/creat允许通过模式参数设置setgid位，由于bsdgroups mount选项或在setgid目录中建立文件，用户不属于新文件的组的成员。用户可以使用ftruncate和memory-mapped I/O使新文件成为任意两进制，获得此组的特权，原因是这些操作没有清除setgid位。...
CVE-2006-5482
ufsvnops.c in FreeBSD 6.1 allows local users to cause an unspecified denial of service by calling the ftruncate function on a file type that is not VREG, VLNK or VDIR, which is not defined in POSIX...
CVE-2006-5482
ufsvnops.c in FreeBSD 6.1 allows local users to cause an unspecified denial of service by calling the ftruncate function on a file type that is not VREG, VLNK or VDIR, which is not defined in POSIX...
FreeBSD <= 6.1-RELEASE-p10 (ftruncate) Local Denial of Service Exploit
No description provided by source. / FreeBSD cvs commit: src/sys/ufs/ufs/ufsvnops.c maxim 2006-05-31 13:15:29 UTC Log: According to POSIX, the result of ftruncate2 is unspecified for file types other than VREG, VDIR and shared memory objects. We already handle VREG, VLNK and VDIR cases. Silently...
FreeBSD <= 6.1-RELEASE-p10 (ftruncate) Local Denial of Service Exploit
Exploit for bsd platform in category dos / poc ====================================================================== FreeBSD include include include int main mkfifo"lol",0x1b6; int fd = open"lol",ORDWR; ftruncatefd,12345; closefd; 0day.today 2018-03-14...
FreeBSD 6.1-RELEASE-p10 - ftruncate Local Denial of Service
FreeBSD 6.1-RELEASE-p10 - ftruncate Local Denial of Service / FreeBSD cvs commit: src/sys/ufs/ufs/ufsvnops.c maxim 2006-05-31 13:15:29 UTC Log: According to POSIX, the result of ftruncate2 is unspecified for file types other than VREG, VDIR and shared memory objects. We already handle VREG, VLNK...
FreeBSD 6.0/6.1 - Ftrucante Local Denial of Service
// source: https://www.securityfocus.com/bid/20522/info FreeBSD is prone to a local denial-of-service vulnerability because it fails to handle exceptional conditions. An attacker may leverage this issue to crash the affected computer, denying service to legitimate users. Under certain conditions,...
FreeBSD 6.1-RELEASE-p10 - 'ftruncate' Local Denial of Service
/ FreeBSD cvs commit: src/sys/ufs/ufs/ufsvnops.c maxim 2006-05-31 13:15:29 UTC Log: According to POSIX, the result of ftruncate2 is unspecified for file types other than VREG, VDIR and shared memory objects. We already handle VREG, VLNK and VDIR cases. Silently ignore truncate requests for all th...
Code injection
Linux kernel 2.6 before 2.6.15.5 allows local users to obtain sensitive information via a crafted XFS ftruncate call, which may return stale data...
