FreeBSD Kernel nfs_mount() Exploit

Exploit for freebsd platform in category local exploits ================================== FreeBSD Kernel nfsmount Exploit ================================== / nfsmountex.c -- Patroklos Argyroudis, argp at domain census-labs.com Local kernel exploit for FreeBSD 8.0, 7.3 and 7.2. FreeBSD...

Debian DSA-1907-1 : kvm - several vulnerabilities

Several vulnerabilities have been discovered in kvm, a full virtualization system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-5714 Chris Webb discovered an off-by-one bug limiting KVM's VNC passwords to 7 characters. This flaw might make it...

CentOS 4 : kernel (CESA-2008:0237)

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

CentOS 5 : kernel (CESA-2008:0275)

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Kaspersky Anti-Virus 2010 'kl1.sys' Driver DoS Vulnerability

Kaspersky Anti-Virus 2010 is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Kaspersky Anti-Virus 2010 'kl1.sys' Driver DoS Vulnerability

The host is installed with Kaspersky Anti-Virus 2010 and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbkasperskyav2010dosvuln.nasl 4918 2017-01-02 14:56:10Z cfi $ Kaspersky Anti-Virus 2010 'kl1.sys' Driver DoS Vulnerability Authors: Veerendra GG Copyright: Copyrig...

Windows 7 Remote Kernel Crash

============================================= - Release date: November 11th, 2009 - Discovered by: Laurent Gaffié - Severity: Medium/High ============================================= I. VULNERABILITY ------------------------- Windows 7 , Server 2008R2 Remote Kernel Crash II. BACKGROUND...

Windows 7 / Server 2008R2 Remote Kernel Crash

Exploit for unknown platform in category dos / poc ============================================= Windows 7 / Server 2008R2 Remote Kernel Crash ============================================= Title: Windows 7 / Server 2008R2 Remote Kernel Crash CVE-ID: OSVDB-ID: Author: Laurent Gaffie Published:...

Windows 7 / Server 2008R2 Remote Kernel Crash

No description provided by source. !/usr/bin/python win7-crash.py: Trigger a remote kernel crash on Win7 and server 2008R2 infinite loop Crash in KeAccumulateTicks due to NTASSERT/DbgRaiseAssertionFailure caused by an infinite loop. NO BSOD, YOU GOTTA PULL THE PLUG. To trigger it fast; from the...

Microsoft Windows 72008 R2 - Remote Kernel Crash

Microsoft Windows 72008 R2 - Remote Kernel Crash !/usr/bin/python win7-crash.py: Trigger a remote kernel crash on Win7 and server 2008R2 infinite loop Crash in KeAccumulateTicks due to NTASSERT/DbgRaiseAssertionFailure caused by an infinite loop. NO BSOD, YOU GOTTA PULL THE PLUG. To trigger it...

Microsoft Windows 7/2008 R2 - Remote Kernel Crash

!/usr/bin/python win7-crash.py: Trigger a remote kernel crash on Win7 and server 2008R2 infinite loop Crash in KeAccumulateTicks due to NTASSERT/DbgRaiseAssertionFailure caused by an infinite loop. NO BSOD, YOU GOTTA PULL THE PLUG. To trigger it fast; from the target: \thisscriptipaddr\BLAH ,...

Apple Mac OSX 10.5.x - 'ptrace' Mutex Handling Local Denial of Service

// source: https://www.securityfocus.com/bid/36915/info Apple Mac OS X is prone to a local denial-of-service vulnerability that is caused by a race condition. Exploiting this issue allows local, unprivileged users to crash affected kernels, denying further service to legitimate users. / Mac OS X...

OpenBSD getsockopt(2)空指针引用拒绝服务漏洞

BUGTRAQ ID: 36859 OpenBSD是一款开放源代码Unix类操作系统。 OpenBSD的sys/netinet/ipoutput.c文件中的ipctloutput函数和sys/netinet6 /ip6output.c文件中的ip6ctloutput函数存在空指针引用错误。远程攻击者可以通过IPAUTHLEVEL、 IPESPTRANSLEVEL、IPESPNETWORKLEVEL或IPIPCOMPLEVEL参数调用getsockopt来触发这些错误，导致受影响的内核崩溃。成功利用这个漏洞要求拥有root用户权限。 OpenBSD OpenBSD 4.6 OpenBSD...

Debian: Security Advisory (DSA-1907-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1907-1] New kvm packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1907-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano October 13, 2009 http://www.debian.org/security/faq -...

DSA-1907-1 kvm - several vulnerabilities

Bulletin has no description...

FreeBSD -- Devfs / VFS NULL pointer race condition

Problem Description: Due to the interaction between devfs and VFS, a race condition exists where the kernel might dereference a NULL pointer. Impact: Successful exploitation of the race condition can lead to local kernel privilege escalation, kernel data corruption and/or crash. To exploit this...

Linux Kernel sg_build_indirect函数本地拒绝服务漏洞

CVE ID: CVE-2009-3288 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的drivers/scsi/sg.c文件中的sgbuildindirect函数在访问数组时使用了错误的变量，这允许本地攻击者通过使用xcdroast复制CD导致内核崩溃和空指针引用。仅有可打开光驱设备的用户才可以利用这个漏洞。 Linux kernel 2.6.28-rc1 - 2.6.31-rc8 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

kernel: r8169: fix crash when large packets are received

Buffer overflow in the RTL8169 NIC driver drivers/net/r8169.c in the Linux kernel before 2.6.30 allows remote attackers to cause a denial of service kernel memory corruption and crash via a long packet...

Linux Kernel 2.6.31 - 'perf_counter_open()' Local Buffer Overflow

source: https://www.securityfocus.com/bid/36423/info The Linux kernel is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Local attackers may be able to exploit this issue to run arbitrary code with elevated privileges...