Solar FTP Server 2.2 Remote DOS crash POC

Exploit for windows platform in category dos / poc Exploit Title: Solar FTP Server 2.2 Remote DOS crash POC crash:http://img542.imageshack.us/img542/7633/solar.jpg Date: July 4, 2012 Author: coolkaveh email protected https://twitter.com/coolkaveh Vendor Homepage: http://solarftp.com/ Version: 2.2...

DEBIAN-CVE-2011-4127

The Linux kernel before 3.2.2 does not properly restrict SGIO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to 1 a partition block device or 2 an LVM volume...

Design/Logic Flaw

The gdkpixbufgifimageload function in gdk-pixbuf/io-gif.c in gdk-pixbuf before 2.23.5 does not properly handle certain return values, which allows remote attackers to cause a denial of service memory consumption via a crafted GIF image file...

CVE-2011-2495

fs/proc/base.c in the Linux kernel before 2.6.39.4 does not properly restrict access to /proc//io files, which allows local users to obtain sensitive I/O statistics by polling a file, as demonstrated by discovering the length of another user's password...

ComSndFTP 1.3.7 Beta Format String Overflow

Title: ComSndFTP Server Remote Format String Overflow Vulnerability Software : ComSndFTP FTP Server Software Version : ComSndFTP 1.3.7 Beta Vendor: http://ftp.comsnd.com/ Vulnerability Published : 2012-06-07 Vulnerability Update Time : Status : Impact : MediumCVSS2 Base : 5.0,...

Tftpd32 DNS服务器拒绝服务漏洞

BUGTRAQ ID: 53704 Tftpd32是Windows平台上的TFTP和DHCP服务器。 TFTPD32 4.00之前版本在实现上存在拒绝服务漏洞，DNS服务器绑定了UDP端口53，但没有验证域选项大小，在发送超过127个字符时，攻击者可利用此漏洞造成服务器崩溃。 0 TFTPD32 4.00 厂商补丁： TFTPD32 ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://tftpd32.jounin.net Proof Of Concept :...

tomcat: security manager restrictions bypass

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service infinite lo...

SuSE 10 Security Update : Linux Kernel (x86_64) (ZYPP Patch Number 6697)

This update fixes various bugs and some security issues in the SUSE Linux Enterprise 10 SP 3 kernel. The following security issues were fixed: CVE-2009-3939: A sysctl variable of the megaraidsas driver was worldwriteable, allowing local users to cause a denial of service or potential code...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 7599)

This kernel update for the SUSE Linux Enterprise 10 SP3 kernel fixes a regression in the last security update, which due to a version checking mismatch disabled multipath IO support. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : Linux kernel (x86_64) (ZYPP Patch Number 2096)

This kernel update fixes the following security problems : - A double userspace copy in a SCTP ioctl allows local attackers to overflow a buffer in the kernel, potentially allowing code execution and privilege escalation. 199441. CVE-2006-3745 - Local attackers were able to crash PowerPC systems...

PT-2012-1030 · Debian +4 · Debian +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.33 Description: The issue is related to the I/O implementation for block devices in the Linux kernel, which does not properly handle the CLONE IO feature. This can be exploited by local users to cause a deni...

kernel security, bug fix, and enhancement update

2.6.32-220.13.1.el6 - Revert: fs NFSv4: include bitmap in nfsv4 get acl data Sachin Prabhu 753231 753232 CVE-2011-4131 2.6.32-220.12.1.el6 - net netsched: qdiscallochandle can be too slow Jiri Pirko 805458 785891 - fs procfs: add hidepid= and gid= mount options Jerome Marchand 770651 770652 - fs...

kernel: possible privilege escalation via SG_IO ioctl

The Linux kernel before 3.2.2 does not properly restrict SGIO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to 1 a partition block device or 2 an LVM volume...

kernel: possible privilege escalation via SG_IO ioctl

The Linux kernel before 3.2.2 does not properly restrict SGIO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to 1 a partition block device or 2 an LVM volume...

TYPSoft FTP Server 1.10 - Multiple Denial of Service Vulnerabilities

!/usr/bin/perl Exploit Title: Typsoft FTP Server DoS CWD command Date: 02/06/2012 Author: Balazs Makany Software Link: http://sourceforge.net/projects/ftpserv/ Version: 1.10 Tested on: Windows 7 does not work on Windows XP Please note, that you need to have a valid username/password to execute th...

Glances v1.3.7 released - System monitoring tool for Linux

Glances v1.3.7 released - System monitoring tool for Linux Glances is a system monitoring tool for GNU/Linux distributions. It grabs information from your system and display its in a CLI curses screen.Glances can monitor CPU, average load, memory, network interface, disk IO, file system space and...

PHP Command Shell, Bind TCP (via perl) IPv6

Listen for a connection and spawn a command shell via perl persistent over IPv6 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = :dynamic include Msf::Payload::Single include...

kernel: taskstats io infoleak

kernel/taskstats.c in the Linux kernel before 3.1 allows local users to obtain sensitive I/O statistics by sending taskstats commands to a netlink socket, as demonstrated by discovering the length of another user's password...

kernel: nfs: diotest4 from LTP crash client null pointer deref

The NFS implementation in Linux kernel before 2.6.31-rc6 calls certain functions without properly initializing certain data, which allows local users to cause a denial of service NULL pointer dereference and ODIRECT oops, as demonstrated using diotest4 from LTP...

Unix Command Shell, Bind TCP (via perl) IPv6

Listen for a connection and spawn a command shell via perl This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 152 include Msf::Payload::Single include Msf::Sessions::CommandShellOptio...