28 matches found
libsafe-CVE-2005-1125
Libsafe 仅适用于 32 位架构 1. make build:构建 Libsafe,编译概念验证漏洞利用程序 'thread',并编译库插桩代码 'interpose.so'。 make random MAXDELAY=x:随机化 'interpose.so' 中的插桩延迟, 最大延迟为 MAXDELAY 每次插桩。 2. bug.sh:在预加载了 Libsafe 的环境中运行 PoC 漏洞利用程序 'thread'。 3. repeatbug.py:运行 bug.sh 1000 次并报告 Libsafe 正常运行的次数。 4. bug-interpose.sh:在同时预加载了...
UBUNTU-CVE-2026-74957
Mitigation bypass in the Safe Browsing component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...
EUVD-2002-0174
Malware in sbrugna...
EUVD-2005-1128
Malware in sbrugna...
EUVD-2002-0173
Malware in sbrugna...
Exploit for CVE-2005-1125
PoC exploit for CVE-2005-1125. The exploit targets a vulnerability in the Libsafe library, which is a safety net for applications to prevent buffer overflows. The exploit is designed to bypass the Libsafe protection and execute arbitrary code. The repository contains a Makefile that builds the...
Libsafe 2.0 Multi-threaded Process Race Condition Security Bypass Weakness
No description provided by source. source: http://www.securityfocus.com/bid/13190/info Libsafe will normally kill an application when certain types of memory corruption are detected, preventing exploitation of some buffer overflow and format string vulnerabilities. A weakness has been reported th...
CVE-2005-1125
Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit other vulnerabilities before the libsafedie function call is completed...
CVE-2005-1125
Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit other vulnerabilities before the libsafedie function call is completed...
CVE-2005-1125
Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit other vulnerabilities before the libsafedie function call is completed...
CVE-2005-1125
CVE-2005-1125 describes a race condition in the Libsafe library (versions up to 2.0.16) that can occur in multi-threaded applications. The issue allows an attacker to bypass Libsafe protection and potentially trigger other vulnerabilities before the _libsafe_die function completes. Public details...
[Overflow.pl] Libsafe - Safety Check Bypass Vulnerability
Overflow.pl Security Advisory 2 Libsafe - Safety Check Bypass Vulnerability URL: http://www.overflow.pl/adv/libsafebypass.txt Date: 04.05.2005 1. Background Libsafe is a library that protect critical elements of stacks http://www.research.avayalabs.com/project/libsafe/ 2. Description Attacker can...
[Overflow.pl] Libsafe - Safety Check Bypass Vulnerability
Overflow.pl Security Advisory 2 Libsafe - Safety Check Bypass Vulnerability URL: http://www.overflow.pl/adv/libsafebypass.txt Date: 04.05.2005 1. Background Libsafe is a library that protect critical elements of stacks http://www.research.avayalabs.com/project/libsafe/ 2. Description Attacker can...
Libsafe 2.0 - Multi-threaded Process Race Condition Security Bypass
Libsafe 2.0 - Multi-threaded Process Race Condition Security Bypass // source: https://www.securityfocus.com/bid/13190/info Libsafe will normally kill an application when certain types of memory corruption are detected, preventing exploitation of some buffer overflow and format string...
Libsafe 2.0 - Multi-threaded Process Race Condition Security Bypass
// source: https://www.securityfocus.com/bid/13190/info Libsafe will normally kill an application when certain types of memory corruption are detected, preventing exploitation of some buffer overflow and format string vulnerabilities. A weakness has been reported that may allow Libsafe security...
Mandrake Linux Security Advisory : libsafe (MDKSA-2002:026)
Wojciech Purczynski discovered that format string protection in libsafe can be easily bypassed by using flag characters that are implemented in glibc but are not implemented in libsafe. It was also discovered that printf function wrappers incorrectly parse argument indexing in format strings,...
CVE-2002-0176
The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe...
CVE-2002-0175
libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not libsafe...
CVE-2002-0176
CVE-2002-0176 concerns the printf wrappers in libsafe, affected in versions 2.0-11 and earlier. The vulnerability arises because the wrappers do not properly handle argument indexing specifiers, allowing certain calls to proceed with unverified arguments. Mandrake’s MDKSA-2002:026 notes that form...
CVE-2002-0175
The CVE-2002-0175 issue concerns libsafe 2.0-11 and earlier, where format-string protection can be bypassed by using certain characters ("'" and "I") that are implemented in glibc but not in libsafe. The connected Mandrake advisory (MDKSA-2002:026) states that this bypass arises from how printf w...