7592 matches found
security flaw
Raw character devices raw.c in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589...
Kaspersky AntiVirus "klif.sys" Privilege Escalation Vulnerability
Exploit for unknown platform in category local exploits ================================================================= Kaspersky AntiVirus "klif.sys" Privilege Escalation Vulnerability ================================================================= / Added NOSTRICT to 1 on line 2 /str0ke !...
FUSE 2.22.3 - Local Information Disclosure
FUSE 2.22.3 - Local Information Disclosure // source: https://www.securityfocus.com/bid/13857/info FUSE is susceptible to a local information disclosure vulnerability. This issue is due to a failure of the kernel module to properly clear used memory prior to its reuse. This vulnerability allows...
FUSE 2.2/2.3 - Local Information Disclosure
// source: https://www.securityfocus.com/bid/13857/info FUSE is susceptible to a local information disclosure vulnerability. This issue is due to a failure of the kernel module to properly clear used memory prior to its reuse. This vulnerability allows malicious local users to gain access to...
Alwil Software Avast Antivirus device driver privilege escalation
No bounds checking on signal arguments processing in device driver allows to overwrite any kernel memory area...
CVE-2005-1400
Summary (CVE-2005-1400) The vulnerability affects FreeBSD/i386 via the i386_get_ldt(2) system call in 4.7–4.11 and 5.x–5.4. Insufficient validation allows local users to copy kernel memory to userland when arguments are negative or very large, potentially disclosing sensitive data. The issue is d...
CVE-2005-1400
The i386getldt system call in FreeBSD 4.7 to 4.11 and 5.x to 5.4 allows local users to access sensitive kernel memory via arguments with negative or very large values...
CVE-2005-1400
The i386getldt system call in FreeBSD 4.7 to 4.11 and 5.x to 5.4 allows local users to access sensitive kernel memory via arguments with negative or very large values...
CVE-2005-1400
The i386getldt system call in FreeBSD 4.7 to 4.11 and 5.x to 5.4 allows local users to access sensitive kernel memory via arguments with negative or very large values...
FreeBSD-SA-05:08.kmem
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:08.kmem Security Advisory The FreeBSD Project Topic: Local kernel memory disclosure Category: core Module: sys Announced: 2005-05-06 Credits: Christian S.J...
FreeBSD-SA-05:07.ldt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:07.ldt Security Advisory The FreeBSD Project Topic: Local kernel memory disclosure in i386getldt Category: core Module: sysi386 Announced: 2005-05-06 Credits:...
Multiple FreeBSD vulnerabilities
/dev/iir weak permissions, kernel memory disclosure...
CVE-2005-0708
The sendfile system call in FreeBSD 4.8 through 4.11 and 5 through 5.4 can transfer portions of kernel memory if a file is truncated while it is being sent, which could allow remote attackers to obtain sensitive information...
CVE-2005-0637
The copy functions in locore.s such as copyout in OpenBSD 3.5 and 3.6, and possibly other BSD based operating systems, may allow attackers to exceed certain address boundaries and modify kernel memory...
CVE-2005-0530
Signedness error in the copyfromreadbuf function in ntty.c for Linux kernel 2.6.10 and 2.6.11rc1 allows local users to read kernel memory via a negative argument...
CVE-2005-0708
The sendfile system call in FreeBSD 4.8 through 4.11 and 5 through 5.4 can transfer portions of kernel memory if a file is truncated while it is being sent, which could allow remote attackers to obtain sensitive information...
CVE-2005-0867
Integer overflow in Linux kernel 2.6 allows local users to overwrite kernel memory by writing to a sysfs file...
CVE-2005-0530
Signedness error in the copyfromreadbuf function in ntty.c for Linux kernel 2.6.10 and 2.6.11rc1 allows local users to read kernel memory via a negative argument...
security flaw
The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw devic...