IBM AIX chcons命令本地溢出漏洞

IBM AIX是一款商业性质的UNIX操作系统。 IBM AIX chcons命令中存在本地溢出漏洞，成功利用这个漏洞的攻击者可以以当前用户的权限执行任意代码。 如果启用了DEBUG MALLOC的话，则攻击者可以通过发送超长的输入参数导致chcon发生核心转储（coredump）。 IBM AIX 5.3L IBM AIX 5.3 IBM AIX 5.2L IBM AIX 5.2 IBM AIX 5.1L IBM AIX 5.1 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.ers.ibm.com/...

SquirrelMail chpasswd buffer overflow

No description provided by source. / 0x3142-sq-chpasswd.c Squirremail chpasswd buffer overflow. Tested on SuSE 9. The bug was found by Matias Neiff matias neiff com ar Coded by x314 0x3142 hushmail.com c 2004 Copyright by x314. All Rights Reserved. Greets: m0s krewz. / include stdlib.h char...

Dr.Web Antivirus 4.33 (LHA long directory name) Local Overflow Exploit

Exploit for linux platform in category local exploits ====================================================================== Dr.Web Antivirus 4.33 LHA long directory name Local Overflow Exploit ====================================================================== / stetoscope.c: Dr.Web 4.33...

Dr.Web AntiVirus 4.33 - LHA long Directory name Local Overflow

Dr.Web AntiVirus 4.33 - LHA long Directory name Local Overflow / stetoscope.c: Dr.Web 4.33 antivirus LHA directory name heap overflow for linux - Howto: Find a valid GOT entry to hijack with objdump -R /opt/drweb/drweb . I guess that you can use the address of free, but my exploit uses the addres...

solaris/sparc connect-back (with XNOR encoded session) 600 bytes

Exploit for solaris/sparc platform in category shellcode ================================================================ solaris/sparc connect-back with XNOR encoded session 600 bytes ================================================================ / black-RXenc-con-back-SOLARIS.c MIPS This is a...

FreeBSD : bogofilter -- heap corruption through malformed input (92140bc9-7bde-11da-8ec4-0002b3b60e4c)

Matthias Andree reports : When using Unicode databases default in more recent bogofilter installations, upon encountering invalid input sequences, bogofilter or bogolexer could overrun a malloc'd buffer, corrupting the heap, while converting character sets. Bogofilter would usually be processing...

CVE-2006-1648: Undefined Security Weakness

SMART SynchronEyes Student and Teacher 6.0, and possibly earlier versions, allows remote attackers to cause a denial of service memory consumption via a certain packet to the Teacher discovery port that causes SynchronEyes to connect to the attacker's machine and read a value that is used as a...

Freeciv <= 2.0.7 (Jumbo Malloc) Denial of Service Crash

Exploit for unknown platform in category dos / poc ======================================================= Freeciv include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include...

Freeciv &lt;= 2.0.7 (Jumbo Malloc) Denial of Service Crash

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include time.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include string.h...

Freeciv 2.0.7 - Jumbo Malloc Crash (Denial of Service)

Freeciv 2.0.7 - Jumbo Malloc Crash Denial of Service / by Luigi Auriemma / include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error;...

Freeciv 2.0.7 - Jumbo Malloc Crash (Denial of Service)

/ by Luigi Auriemma / include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupte...

CVE-2005-4271: Undefined Security Weakness

Buffer overflow in the malloc debug system in IBM AIX 5.3 allows local users to execute arbitrary code...

CVE-2005-3504

Buffer overflow in swcons in IBM AIX 5.2, when debug malloc is enabled, allows remote attackers to cause a core dump and possibly execute arbitrary code...

CVE-2005-3396

CVE-2005-3396 : The issue is in IBM AIX 5.2 and 5.3, affecting the chcons (chcon) command. The root cause is a buffer overflow when DEBUG MALLOC is enabled, which could allow an attacker to execute arbitrary code via a long command line argument. The connected documents (NVD entry and related adv...

CVE-2005-3396

Buffer overflow in the chcons chcon command in IBM AIX 5.2 and 5.3, when DEBUG MALLOC is enabled, might allow attackers to execute arbitrary code via a long command line argument...

CVE-2005-3396: Undefined Security Weakness

Buffer overflow in the chcons chcon command in IBM AIX 5.2 and 5.3, when DEBUG MALLOC is enabled, might allow attackers to execute arbitrary code via a long command line argument...

CVE-2005-2748

The malloc function in the libSystem library in Apple Mac OS X 10.3.9 and 10.4.2 allows local users to overwrite arbitrary files by setting the MallocLogFile environment variable to the target file before running a setuid application...

CVE-2005-2748

The CVE-2005-2748 issue affects Apple Mac OS X 10.3.9 and 10.4.2, where the malloc function in libSystem can be manipulated via the MallocLogFile environment variable before running a setuid application. This allows local users to overwrite arbitrary files. Root cause: environment-controlled log ...

CVE-2005-2748

The malloc function in the libSystem library in Apple Mac OS X 10.3.9 and 10.4.2 allows local users to overwrite arbitrary files by setting the MallocLogFile environment variable to the target file before running a setuid application...

CVE-2005-2748: Undefined Security Weakness

The malloc function in the libSystem library in Apple Mac OS X 10.3.9 and 10.4.2 allows local users to overwrite arbitrary files by setting the MallocLogFile environment variable to the target file before running a setuid application...