eDisplay Personal FTP Server 1.0.0 - (Authenticated) Multiple Stack Buffer Overflows (1)

Exploit Title : eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF Type of sploit: Remote Code Execution Bug found by : loneferret march 19, 2010 Reference : http://www.exploit-db.com/exploits/11810 Exploit date : March 20, 2010 Author : corelanc0d3r Version : 1.0.0 OS :...

kernel: create_elf_tables can leave urandom in a bad state

Use-after-free vulnerability in the fasynchelper function in fs/fcntl.c in the Linux kernel before 2.6.33-rc4-git1 allows local users to gain privileges via vectors that include enabling OASYNC aka FASYNC or FIOASYNC on a locked file, and then closing this file...

Embedthis Appweb 3.1.2 Denial Of Service

!/usr/bin/perl +------------------------------------------------------------------------+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | | .'xxxxxxxxxxxxxxxxxxxxx''...... ... .....

Httpdx 1.5.3 Remote Break Services

!/usr/bin/perl Program : Httpdx v1.5.3 PoC : Remote Break Services Homepage : http://sourceforge.net/projects/httpdx/ Found by : Jonathan Salwan This Advisory : Jonathan Salwan Contact : [email protected] //----- Application description Single-process HTTP1.1/FTP server; no threads or process...

CVE-2010-0419

The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing SMP, does not properly restrict writing of segment selectors to segment registers, which might allow guest OS users to cause a denial of service guest OS crash or gain privileges on the guest OS by leveraging...

Design/Logic Flaw

The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing SMP, does not properly restrict writing of segment selectors to segment registers, which might allow guest OS users to cause a denial of service guest OS crash or gain privileges on the guest OS by leveraging...

CVE-2010-0419

The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing SMP, does not properly restrict writing of segment selectors to segment registers, which might allow guest OS users to cause a denial of service guest OS crash or gain privileges on the guest OS by leveraging...

kvm: emulator privilege escalation segment selector check

The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing SMP, does not properly restrict writing of segment selectors to segment registers, which might allow guest OS users to cause a denial of service guest OS crash or gain privileges on the guest OS by leveraging...

iFTPStorage For iPhone / iPod Denial Of Service

!/usr/bin/perl Exploit: iFTPStorage for Iphone\Ipod - Remote Dos Exploit Date: 20/02/10 Author: Ale46 Software Link: http://itunes.apple.com/us/app/iftpstorage/id333357690?mt=8 Version: 1.2 Tested on: Iphone 3GS with 3.1.2 firmware Note: iFTSTorage Lite is also vulnerable Greetz: Gandalf use...

iPhone FTP Server By Zhang Boyang Remote DoS Exploit

Exploit for unknown platform in category dos / poc ==================================================== iPhone FTP Server By Zhang Boyang Remote DoS Exploit ==================================================== !/usr/bin/perl Exploit: FTP Server By Zhang Boyang - Remote Dos Exploit Date: 24/02/10...

iPhone FTP Server By Zhang Boyang - Remote Denial of Service

!/usr/bin/perl Exploit: FTP Server By Zhang Boyang - Remote Dos Exploit Date: 24/02/10 Author: Ale46 Software Link: http://itunes.apple.com/us/app/ftp-server/id356055128?mt=8 Version: 1.0 Tested on: Iphone 3GS with 3.1.2 firmware Greetz: Gandalf use IO::Socket; if @ARGV\n"; exit; my $host = $ARGV...

iFTPStorage v1.2 for Iphone\Ipod - Remote Dos Exploit

No description provided by source. !/usr/bin/perl Exploit: iFTPStorage for Iphone\Ipod - Remote Dos Exploit Date: 20/02/10 Author: Ale46 Software Link: http://itunes.apple.com/us/app/iftpstorage/id333357690?mt=8 Version: 1.2 Tested on: Iphone 3GS with 3.1.2 firmware Note: iFTSTorage Lite is also...

iFTPStorage v1.2 for Iphone\Ipod - Remote Dos Exploit

Exploit for unknown platform in category dos / poc ===================================================== iFTPStorage v1.2 for Iphone\Ipod - Remote Dos Exploit ===================================================== !/usr/bin/perl Exploit: iFTPStorage for Iphone\Ipod - Remote Dos Exploit Date:...

FileApp 1.7 For iPhone / iPod Remote Denial Of Service

!/usr/bin/perl Exploit: FileApp - Remote Dos Exploit Date: 17/02/10 Author: Ale46 Software Link: http://www.digidna.net/products/fileapp Version: 1.7 Tested on: Iphone 3GS with 3.1.2 firmware Go in the sharing section of FileApp and run this script, the application crash and your Iphone\Ipod...

FileApp v1.7 for iPhone/iPod Remote DoS Exploit

Exploit for unknown platform in category dos / poc =============================================== FileApp v1.7 for iPhone/iPod Remote DoS Exploit =============================================== !/usr/bin/perl Exploit: FileApp - Remote Dos Exploit Date: 17/02/10 Author: Ale46 Software Link:...

AZL-6514 CVE-2010-0298 affecting package kernel for versions less than 5.10.78.1-1

The x86 emulator in KVM 83 does not use the Current Privilege Level CPL and I/O Privilege Level IOPL in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the guest OS by leveraging access to a 1 IO...

Design/Logic Flaw

The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing SMP, does not use the Current Privilege Level CPL and I/O Privilege Level IOPL to restrict instruction execution, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the...

Design/Logic Flaw

The x86 emulator in KVM 83 does not use the Current Privilege Level CPL and I/O Privilege Level IOPL in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the guest OS by leveraging access to a 1 IO...

CVE-2010-0306

The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing SMP, does not use the Current Privilege Level CPL and I/O Privilege Level IOPL to restrict instruction execution, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the...

CVE-2010-0306

The connected MiracleLinux AXSA advisory references CVE-2010-0306, describing a vulnerability in the KVM x86 emulator: when a guest is SMP-configured, CPL/IOPL checks are not applied to memory access for CPL3 code. This allows guest OS users to crash the guest or potentially gain privileges by ab...