MS Windows Server Service Code Execution PoC (MS08-067)

Exploit for unknown platform in category dos / poc ======================================================= MS Windows Server Service Code Execution PoC MS08-067 ======================================================= In vstudio command prompt: mk.bat next: attach debugger to services.exe 2k or th...

Heap overflow

Heap-based buffer overflow in the local IPC component in the EAPOLController plugin for configd Networking component in Mac OS X 10.4.11 and 10.5.5 allows local users to execute arbitrary code via unknown vectors...

CVE-2008-3645

Heap-based buffer overflow in the local IPC component in the EAPOLController plugin for configd Networking component in Mac OS X 10.4.11 and 10.5.5 allows local users to execute arbitrary code via unknown vectors...

Cisco Security Advisory: Cisco 10000, uBR10012, uBR7200 Series Devices IPC Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco 10000, uBR10012, uBR7200 Series Devices IPC Vulnerability Advisory ID: cisco-sa-20080924-ipc http://www.cisco.com/warp/public/707/cisco-sa-20080924-ipc.shtml Revision 1.0 For Public Release 2008 September 24 1600 UTC GMT...

Cisco IOS远程IPC拒绝服务漏洞

BUGTRAQ ID: 31363 CVE ID: CVE-2008-3805 CNCVE ID：CNCVE-20083805 Cisco 10000, uBR10012和uBR7200系列设备使用基于UDP的IPC通道，这个通道使用127.0.0.0/8范围的地址和UDP 1975端口。Cisco 10000, uBR10012和uBR7200系列设备运行受此漏洞影响的Cisco IOS会去处理从设备外部发送给UDP 1975端口的IPC消息。这种行为可导致攻击者发送大量数据包导致设备，线路卡重载，造成拒绝服务攻击。 此漏洞的Cisco bug...

Cisco 10000, uBR10012, uBR7200 Series Devices IPC Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Design/Logic Flaw

Unspecified vulnerability in the Inter-Process Communication IPC message queue subsystem in Sun Solaris 10 allows local users to cause a denial of service reboot via blocked I/O message queues...

CVE-2008-1317

Unspecified vulnerability in the Inter-Process Communication IPC message queue subsystem in Sun Solaris 10 allows local users to cause a denial of service reboot via blocked I/O message queues...

CVE-2008-1317

CVE-2008-1317 affects Solaris 10 with an unspecified vulnerability in the Inter-Process Communication (IPC) message queue subsystem. The issue allows local users to cause a denial of service (reboot) through blocked I/O message queues. The provided documents confirm the affected platform (Sun Sol...

CVE-2008-1317

Unspecified vulnerability in the Inter-Process Communication IPC message queue subsystem in Sun Solaris 10 allows local users to cause a denial of service reboot via blocked I/O message queues...

D-Bus 'send_interface'属性安全策略绕过漏洞

BUGTRAQ ID: 28023 CVE ID:CVE-2008-0595 CNCVE ID:CNCVE-20080595 D-Bus是一款进程间通信IPC实现。用于在应用程序间发送消息。 D-Bus使用的安全策略存在问题，本地攻击者可以利用漏洞连接D-Bus守护程序执行本身没有权限访问的部分方法调用。 当评估是否能调用方法调用，bus守护程序会查看安全策略然后尝试判断是否调用者允许访问方法调用。 多个dbus服务以如下安全策略形式存在： allow sendinterface="some.interface.WithMethods"/ 来精确的列出特定接口方法的白名单。...

netOctopus Agent nantsys.sys MSR Write Local Privilege Escalation

netOctopus Agent, an asset management agent, is installed on the remote host. The installed version of netOctopus Agent includes a driver, named 'nantsys.sys', that exposes a device interface writable by all local users, allowing them to read and write arbitrary CPU Model Specific Registers MSRs....

Session fixation

IBM Lotus Notes before 6.5.6, and 7.x before 7.0.3; and Domino before 6.5.5 FP3, and 7.x before 7.0.2 FP1; uses weak permissions Everyone:Full Control for memory mapped files shared memory in IPC, which allows local users to obtain sensitive information, or inject Lotus Script or other character...

CVE-2007-5544

IBM Lotus Notes before 6.5.6, and 7.x before 7.0.3; and Domino before 6.5.5 FP3, and 7.x before 7.0.2 FP1; uses weak permissions Everyone:Full Control for memory mapped files shared memory in IPC, which allows local users to obtain sensitive information, or inject Lotus Script or other character...

SYMSA-2007-013: Lotus Notes Memory Mapped Files Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-013 Advisory Title: Lotus Notes Memory Mapped Files Vulnerability Author: Ollie Whitehouse / [email protected] Release Date: 23-10-20...

CVE-2004-2730

CVE-2004-2730 describes a local privilege escalation in Sysinternals PsTools: an improper disconnection from remote IPC$ and ADMIN$ shares allows local users to access these shares with elevated privileges by reusing existing mappings. The connected Kaspersky entry (KLA10264) confirms a local-exp...

Outpost firewall DoS

Local user can cause partial denial of system services by manipulating outpostipchdr mutex...

Computer Associates eTrust InoTask.exe Antivirus Buffer Overflow Vulnerability

Hi, Here binagres aka ..., for all the "vinagreta" : ---------------------------------------------------------------------- | 48Bits Advisory -=- Privilege Elevation in eTrust Antivirus Agent r8 | ---------------------------------------------------------------------- Affected versions : - eTrust...

eTrust AntiVirus Agent r8 - Local Privilege Escalation

/ ---------------------------------------------------------------------- | 48Bits Advisory -=- Privilege Elevation in eTrust Antivirus Agent r8 | ---------------------------------------------------------------------- Affected versions : I have tested with: - eTrust Antivirus Agent r8 -...

Novice school: share the hacking techniques of the seven cheats-exploits warning-the black bar safety net

Have some hacking knowledge is very necessary, not to attack others, but by simply hacking Knowledge Network/system security technology, pioneering ideas, and thereby better protect their computer. That is, the so-called“know thyself know yourself” is. 1. To simplify the CMD with IPC$login chicke...