DMA[2007-0109a] - 'Apple Finder Disk Image Volume Label Overflow / DoS'

DMA2007-0109a - 'Apple Finder Disk Image Volume Label Overflow / DoS' Author: Kevin Finisterre Vendors: http://www.apple.com Product: '= OSX 10.4 ?' References: http://www.digitalmunition.com/DMA2007-0109a.txt http://www.apple.com/macosx/features/finder/...

Phrack55:Klog

Rewrite pointer to memory window ------- Phrack Magazine --- Vol. 9 | Issue 55 --- 09.09.99 --- 08 of 19 ------------------------ Rewrite pointer to memory window -------- klog ---- Introduction If buffers can be overflowed, then by overwriting critical data, stored in the address space of the...

GDB DWARF多个缓冲区溢出漏洞

GDB是一个用来调试C和C++程序的强力调试器。 GDB的DWARF和DWARF2代码中存在多个缓冲区溢出漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 DWARF规范允许使用包含有操作列表的位置描述块确定一些调试符的最终真实地址。GDB在一个未经检查的64字节栈缓冲区执行这些操作，这就允许任何包含有多于64个操作的位置块（DWFORMblock）使用用户数据覆盖当前的栈帧。dwarfread.c和dwarfread2.c中都存在这个问题。 GNU GDB 6.0 - 6.4 不要使用GDB调试可能包含有DWARF2调试信息的不可信任文件。 厂商补丁： GNU ---...

USN-356-1: gdb vulnerability

Will Drewry, of the Google Security Team, discovered buffer overflows in GDB's DWARF processing. This would allow an attacker to execute arbitrary code with user privileges by tricking the user into using GDB to load an executable that contained malicious debugging information...

[SA21713] GDB "DWARF" Buffer Overflow Vulnerabilities

TITLE: GDB "DWARF" Buffer Overflow Vulnerabilities SECUNIA ADVISORY ID: SA21713 VERIFY ADVISORY: http://secunia.com/advisories/21713/ CRITICAL: Less critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: GDB 6.x http://secunia.com/product/5137/ DESCRIPTION: Will Drewry has reported some...

GDB GNU debugger buffer overflow

Buffer overflow on DWARF section parsing...

CVE-2006-4146

Buffer overflow in the 1 DWARF dwarfread.c and 2 DWARF2 dwarf2read.c debugging code in GNU Debugger GDB 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code via a crafted file with a location block DWFORMblock that contains a large number of operations...

CVE-2006-4146

CVE-2006-4146 describes a buffer overflow in GDB 6.5 affecting the DWARF and DWARF2 debugging code (dwarfread.c and dwarf2read.c). A crafted file with a DW_FORM_block containing a large number of operations can allow user‑assisted or restricted users to execute arbitrary code. The issue arises fr...

CVE-2006-4146

Buffer overflow in the 1 DWARF dwarfread.c and 2 DWARF2 dwarf2read.c debugging code in GNU Debugger GDB 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code via a crafted file with a location block DWFORMblock that contains a large number of operations...

CVE-2006-4146

Buffer overflow in the 1 DWARF dwarfread.c and 2 DWARF2 dwarf2read.c debugging code in GNU Debugger GDB 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code via a crafted file with a location block DWFORMblock that contains a large number of operations...

From head to toe understanding the buffer overflow-vulnerability warning-the black bar safety net

In this guide, we will discuss what is buffer overflow and how to use it. You must understand the C language and Assembly language, if you are familiar with GDB while more is good, of course it is not very necessary. Memory organizationmemory is divided into 3 parts 1. The text areaprogram area...

kadu-fun.txt

Kadu Remote Denial Of Service Fun by Piotr Bania http://www.piotrbania.com All rights reserved. Original location: http://www.piotrbania.com/all/adv/kadu-fun.txt Severity: Medium - remote denial of service. Software affected: Tested on Kadu 0.4.3, others maybe also affected. 0. DISCLAIMER Author...

Command injection

QNX Neutrino RTOS 6.3.0 allows local users to cause a denial of service hang by supplying a "break 0xb032d59f" command to gdb...

CVE-2006-0622

QNX Neutrino RTOS 6.3.0 allows local users to cause a denial of service hang by supplying a "break 0xb032d59f" command to gdb...

CVE-2006-0622

QNX Neutrino RTOS 6.3.0 allows local users to cause a denial of service hang by supplying a "break 0xb032d59f" command to gdb...

CVE-2006-0622

CVE-2006-0622 affects QNX Neutrino RTOS 6.3.0 . The vulnerability allows local users to cause a denial of service (hang) by supplying a command to gdb: specifically triggering with the string "break *0xb032d59f". The associated sources in the connected documents corroborate the page-level descrip...

[Full-disclosure] iDefense Security Advisory 02.07.06: QNX RTOS 6.3.0 Local Denial of Service Vulnerability

QNX RTOS 6.3.0 Local Denial of Service Vulnerability iDefense Security Advisory 02.07.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=386 February 7, 2006 I. BACKGROUND QNX Software Systems Ltd.'s Neutrino RTOS QNX is a real-time operating system designed for use in embedde...

linux/x86 anti-debug trick INT 3h trap + execve /bin/sh 39 bytes

linux/x86 anti-debug trick INT 3h trap + execve /bin/sh 39 bytes. Shellcode exploit for linx86 platform / linux/x86 anti-debug trick INT 3h trap + execve"/bin/sh", "/bin/sh", NULL, NULL - 39 bytes The idea behind a shellcode w/ an anti-debugging trick embedded in it, is if for any reason the IDS...

[Full-disclosure] DMA[2005-1112a] - 'Veritas Storage Foundation VCSI18N_LANG buffer overflow'

DMA2005-1112a - 'Veritas Storage Foundation VCSI18NLANG buffer overflow' Author: Kevin Finisterre Vendor: http://www.Veritas.com Product: 'Veritas Cluster Server for UNIX' References: http://www.digitalmunition.com/DMA2005-1112a.txt http://www.symantec.com/avcenter/security/Content/2005.11.08a.ht...

gpsdrive <= 2.09 (friendsd2) Remote Format String Exploit (ppc)

Exploit for linux platform in category remote exploits =============================================================== gpsdrive = 2.09 friendsd2 Remote Format String Exploit ppc =============================================================== !/usr/bin/perl -w Heh - Code by KF...