Solaris 10 (SPARCx86) - sysinfo Kernel Memory Disclosure

Solaris 10 SPARCx86 - sysinfo Kernel Memory Disclosure / 07/2006: public release SPARC Solaris 10 without 118833-09 x86 Solaris 10 without 118855-06 Solaris sysinfo Kernel Memory Disclosure By qaaz / include include include include include include define PAGECOUNT 1000 int mainint argc, char argv...

Linux Kernel 2.6.20 with DCCP Support - Memory Disclosure (2)

Linux Kernel 2.6.20 with DCCP Support - Memory Disclosure 2 include include include include include include include define BUFSIZE 0x10000000 int mainint argc, char argv void mem = mmap0, BUFSIZE, PROTREAD | PROTWRITE, MAPANONYMOUS | MAPPRIVATE, 0, 0; if mem == void-1 printf"Alloc failed\n"; retu...

FreeBSD-SA-06:25.kmem

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:25.kmem Security Advisory The FreeBSD Project Topic: Kernel memory disclosure in firewire4 Category: core Module: sysdev Announced: 2006-12-06 Credits: Rodrigo...

Solaris <= 10 sysinfo() Local Kernel Memory Disclosure Exploit

Exploit for solaris platform in category local exploits ============================================================== Solaris include include include define bufsize 1294967293 int mainint argc,char argv int fd; ssizet out; char outputbuffer; ifargc \n"; exit1; printf" Solaris = 10 sysinfo kernel...

iDefense Security Advisory 07.20.06: Sun Microsystems Solaris sysinfo&#40;&#41; Kernel Memory Disclosure Vulnerability

Sun Microsystems Solaris sysinfo Kernel Memory Disclosure Vulnerability iDefense Security Advisory 07.20.06 http://www.idefense.com/application/poi/display?type=vulnerabilities July 20, 2006 I. BACKGROUND Solaris is a UNIX operating system developed by Sun Microsystems. II. DESCRIPTION Local...

Solaris 10 - 'sysinfo()' Local Kernel Memory Disclosure (1)

/ Sun Microsystems Solaris sysinfo Kernel Memory Disclosure exploit =================================================================== Local exploitation of an integer overflow vulnerability in Sun Microsystems Inc. Solaris allows attackers to read kernel memory from a non-privileged userspace...

CVE-2006-1588: Undefined Security Weakness

The bridge ioctl ifbridge code in NetBSD 1.6 through 3.0 does not clear sensitive memory before copying ioctl results to the requesting process, which allows local users to obtain portions of kernel memory...

Linux Kernel 2.4.x/2.5.x/2.6.x - 'Sockaddr_In.Sin_Zero' Kernel Memory Disclosure

/ source: https://www.securityfocus.com/bid/17203/info The Linux kernel is affected by local memory-disclosure vulnerabilities. These issues are due to the kernel's failure to properly clear previously used kernel memory before returning it to local users. These issues allow an attacker to read...

FreeBSD-SA-06:06.kmem

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:06.kmem Security Advisory The FreeBSD Project Topic: Local kernel memory disclosure Category: core Module: kernel Announced: 2006-01-25 Credits: Xin LI, Karl...

NetBSD Security Advisory 2006-001: Kernfs kernel memory disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NetBSD Security Advisory 2006-001 ================================= Topic: Kernfs kernel memory disclosure Version: NetBSD-current: source prior to November 23, 2005 NetBSD 3.0: not affected NetBSD 2.1: affected NetBSD 2.0.3: affected NetBSD 2.0:...

[ Suresec Advisories ] - Mac OS X &#40;xnu&#41; multiple information leaks

Suresec security advisory 8 3th November 2005 CVE ID: CVE-2005-1126, CVE-2005-2752 Mac OS X kernel xnu multiple information leaks. Vulnerability summary: The first information leak found in xnu is located in the ifconf function used to retrieve information about all used network interfaces. The...

FreeBSD-SA-05:07.ldt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:07.ldt Security Advisory The FreeBSD Project Topic: Local kernel memory disclosure in i386getldt Category: core Module: sysi386 Announced: 2005-05-06 Credits:...

Kernel memory disclosure in ifconf&#40;&#41;

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:04.ifconf Security Advisory The FreeBSD Project Topic: Kernel memory disclosure in ifconf Category: core Module: sysnet Announced: 2005-04-15 Credits: Ilja van...

FreeBSD-SA-05:04.ifconf

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:04.ifconf Security Advisory The FreeBSD Project Topic: Kernel memory disclosure in ifconf Category: core Module: sysnet Announced: 2005-04-15 Credits: Ilja van...

FreeBSD : SA-05:02.sendfile

The remote host is running a version of FreeBSD which contains a flaw in the sendfile API. There is an error in the sendfile API which may allow a local user to disclose parts of the contents of the kernel memory. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

[SA13352] FreeBSD procfs/linprocfs Process Argument Vector Handling Vulnerability

TITLE: FreeBSD procfs/linprocfs Process Argument Vector Handling Vulnerability SECUNIA ADVISORY ID: SA13352 VERIFY ADVISORY: http://secunia.com/advisories/13352/ CRITICAL: Less critical IMPACT: Exposure of system information, Exposure of sensitive information, DoS WHERE: Local system OPERATING...

[Full-Disclosure] FreeBSD Security Advisory FreeBSD-SA-04:17.procfs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-04:17.procfs Security Advisory The FreeBSD Project Topic: Kernel memory disclosure in procfs and linprocfs Category: core Module: sys Announced: 2004-12-01 Credit...

setsockopt(2) IPv6 sockets input validation error

From the FreeBSD Security Advisory: A programming error in the handling of some IPv6 socket options within the setsockopt2 system call may result in memory locations being accessed without proper validation. It may be possible for a local attacker to read portions of kernel memory, resulting in...

[Full-Disclosure] FreeBSD Security Advisory FreeBSD-SA-03:17.procfs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:17.procfs Security Advisory The FreeBSD Project Topic: kernel memory disclosure via procfs Category: core Module: sys Announced: 2003-10-03 Credits: Joost Pol...

NetBSD Security Advisory 2003-013: Kernel memory disclosure via ibcs2

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2003-013 ================================= Topic: Kernel memory disclosure via ibcs2 Version: NetBSD-current: source prior to August 7, 2002 NetBSD 1.6.1: not affected NetBSD 1.6: not affected NetBSD-1.5.3: affected NetBSD-1.5.2: affecte...