CVE-2009-1350

CVE-2009-1350 affects Novell NetIdentity Client (xtagent.exe). A remote attacker can trigger a dereference of an arbitrary pointer via the XTIERRPCPIPE named pipe by sending crafted RPC messages, leading to remote code execution. Affected product/version: Novell Client NetIdentity Agent prior to ...

IPC$ Password Crack-the-BAT-vulnerability warning-the black bar safety net

Author: TheLostMind Sometimes in the broiler below want to a whole other chickens, with SOCK5 reverse proxy, cumbersome and slow, there are N multi-threaded IPC$password crack tool, but the others filled with soft kill wow, make afree to killIntuit trouble, the city's use cow knife, a little soft...

Linux Kernel /ipc/shm.c文件本地拒绝服务漏洞

BUGTRAQ ID: 34020 CVECAN ID: CVE-2009-0859 Linux Kernel是开放源码操作系统Linux所使用的内核。 如果禁用了CONFIGSHMEM的话，Linux Kernel的shm子系统中ipc/shm.c文件的shmgetstat函数没有正确地解释inode的数据类型，这允许本地用户通过SHMINFO shmctl调用导致系统挂起。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Microsoft Windows Server - Code Execution (PoC) (MS08-067)

Microsoft Windows Server - Code Execution PoC MS08-067 In vstudio command prompt: mk.bat next: attach debugger to services.exe 2k or the relevant svchost xp/2k3/... net use \IPADDRESS\IPC$ /user:user creds die \IPADDRESS \pipe\srvsvc In some cases, /user:"" "", will suffice i.e., anonymous...

MS Windows Server Service Code Execution PoC (MS08-067)

Exploit for unknown platform in category dos / poc ======================================================= MS Windows Server Service Code Execution PoC MS08-067 ======================================================= In vstudio command prompt: mk.bat next: attach debugger to services.exe 2k or th...

Heap overflow

Heap-based buffer overflow in the local IPC component in the EAPOLController plugin for configd Networking component in Mac OS X 10.4.11 and 10.5.5 allows local users to execute arbitrary code via unknown vectors...

CVE-2008-3645

Heap-based buffer overflow in the local IPC component in the EAPOLController plugin for configd Networking component in Mac OS X 10.4.11 and 10.5.5 allows local users to execute arbitrary code via unknown vectors...

Cisco Security Advisory: Cisco 10000, uBR10012, uBR7200 Series Devices IPC Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco 10000, uBR10012, uBR7200 Series Devices IPC Vulnerability Advisory ID: cisco-sa-20080924-ipc http://www.cisco.com/warp/public/707/cisco-sa-20080924-ipc.shtml Revision 1.0 For Public Release 2008 September 24 1600 UTC GMT...

Cisco IOS远程IPC拒绝服务漏洞

BUGTRAQ ID: 31363 CVE ID: CVE-2008-3805 CNCVE ID：CNCVE-20083805 Cisco 10000, uBR10012和uBR7200系列设备使用基于UDP的IPC通道，这个通道使用127.0.0.0/8范围的地址和UDP 1975端口。Cisco 10000, uBR10012和uBR7200系列设备运行受此漏洞影响的Cisco IOS会去处理从设备外部发送给UDP 1975端口的IPC消息。这种行为可导致攻击者发送大量数据包导致设备，线路卡重载，造成拒绝服务攻击。 此漏洞的Cisco bug...

Cisco 10000, uBR10012, uBR7200 Series Devices IPC Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Design/Logic Flaw

Unspecified vulnerability in the Inter-Process Communication IPC message queue subsystem in Sun Solaris 10 allows local users to cause a denial of service reboot via blocked I/O message queues...

CVE-2008-1317

Unspecified vulnerability in the Inter-Process Communication IPC message queue subsystem in Sun Solaris 10 allows local users to cause a denial of service reboot via blocked I/O message queues...

CVE-2008-1317

CVE-2008-1317 affects Solaris 10 with an unspecified vulnerability in the Inter-Process Communication (IPC) message queue subsystem. The issue allows local users to cause a denial of service (reboot) through blocked I/O message queues. The provided documents confirm the affected platform (Sun Sol...

CVE-2008-1317

Unspecified vulnerability in the Inter-Process Communication IPC message queue subsystem in Sun Solaris 10 allows local users to cause a denial of service reboot via blocked I/O message queues...

D-Bus 'send_interface'属性安全策略绕过漏洞

BUGTRAQ ID: 28023 CVE ID:CVE-2008-0595 CNCVE ID:CNCVE-20080595 D-Bus是一款进程间通信IPC实现。用于在应用程序间发送消息。 D-Bus使用的安全策略存在问题，本地攻击者可以利用漏洞连接D-Bus守护程序执行本身没有权限访问的部分方法调用。 当评估是否能调用方法调用，bus守护程序会查看安全策略然后尝试判断是否调用者允许访问方法调用。 多个dbus服务以如下安全策略形式存在： allow sendinterface="some.interface.WithMethods"/ 来精确的列出特定接口方法的白名单。...

netOctopus Agent nantsys.sys MSR Write Local Privilege Escalation

netOctopus Agent, an asset management agent, is installed on the remote host. The installed version of netOctopus Agent includes a driver, named 'nantsys.sys', that exposes a device interface writable by all local users, allowing them to read and write arbitrary CPU Model Specific Registers MSRs....

Session fixation

IBM Lotus Notes before 6.5.6, and 7.x before 7.0.3; and Domino before 6.5.5 FP3, and 7.x before 7.0.2 FP1; uses weak permissions Everyone:Full Control for memory mapped files shared memory in IPC, which allows local users to obtain sensitive information, or inject Lotus Script or other character...

CVE-2007-5544

IBM Lotus Notes before 6.5.6, and 7.x before 7.0.3; and Domino before 6.5.5 FP3, and 7.x before 7.0.2 FP1; uses weak permissions Everyone:Full Control for memory mapped files shared memory in IPC, which allows local users to obtain sensitive information, or inject Lotus Script or other character...

SYMSA-2007-013: Lotus Notes Memory Mapped Files Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-013 Advisory Title: Lotus Notes Memory Mapped Files Vulnerability Author: Ollie Whitehouse / [email protected] Release Date: 23-10-20...

CVE-2004-2730

CVE-2004-2730 describes a local privilege escalation in Sysinternals PsTools: an improper disconnection from remote IPC$ and ADMIN$ shares allows local users to access these shares with elevated privileges by reusing existing mappings. The connected Kaspersky entry (KLA10264) confirms a local-exp...