netbsd/x86 execve /bin/sh 68 bytes

No description provided by source. / NetBSD execve of /bin/sh by humble of Rhino9 / char shellcode = "\xeb\x23" "\x5e" "\x8d\x1e" "\x89\x5e\x0b" "\x31\xd2" "\x89\x56\x07" "\x89\x56\x0f" "\x89\x56\x14" "\x88\x56\x19" "\x31\xc0" "\xb0\x3b" "\x8d\x4e\x0b" "\x89\xca" "\x52" "\x51" "\x53" "\x50"...

bsd/x86 - execve /bin/sh ENCRYPT* 57 bytes

bsd/x86 execve /bin/sh ENCRYPT 57 bytes. Shellcode exploit for bsdx86 platform / BSD version FreeBSD, OpenBSD, NetBSD. [email protected] 57 bytes. -Encriptado execve/bin/sh; Para mas informacion ver http://www.shellcode.com.ar/es/proyectos.html / char shellcode=...

bsd/x86 execve /bin/sh setuid (0) 29 bytes

Exploit for bsd/x86 platform in category shellcode ========================================== bsd/x86 execve /bin/sh setuid 0 29 bytes ========================================== / BSD version FreeBSD, OpenBSD, NetBSD. email protected 29 bytes. -setuid0; -execve/bin/sh; / char shellcode= "\x31\xc0...

DSA-551-1 lukemftpd - incorrect internal variable handling

Bulletin has no description...

CVE-2002-1543

Buffer overflow in trek on NetBSD 1.5 through 1.5.3 allows local users to gain privileges via long keyboard input...

CVE-2002-1490

NetBSD 1.4 through 1.6 beta allows local users to cause a denial of service kernel panic via a series of calls to the TIOCSCTTY ioctl, which causes an integer overflow in a structure counter and sets the counter to zero, which frees memory that is still in use by other processes...

CVE-2004-0257

OpenBSD 3.4 and NetBSD 1.6 and 1.6.1 allow remote attackers to cause a denial of service crash by sending an IPv6 packet with a small MTU to a listening port and then issuing a TCP connect to that port...

CVE-2002-1543

CVE-2002-1543 describes a buffer overflow in the trek component on NetBSD 1.5–1.5.3 that allows local users to gain privileges via long keyboard input. The underlying issue is a buffer overflow in trek’s handling of user input, enabling privilege escalation. Documented impact is local privilege e...

CVE-2002-1490

CVE-2002-1490 affects NetBSD 1.4–1.6 beta. The vulnerability is triggered by a sequence of TIOCSCTTY ioctl calls that overrun a structure counter, resetting it to zero and freeing memory still in use, leading to a local denial of service via kernel panic. The connected documents confirm the issue...

CVE-2004-0114

The shmat system call in the System V Shared Memory interface for FreeBSD 5.2 and earlier, NetBSD 1.3 and earlier, and OpenBSD 2.6 and earlier, does not properly decrement a shared memory segment's reference count when the vmmapfind function fails, which could allow local users to gain read or...

CVE-2002-1476

The CVE-2002-1476 entry describes a buffer overflow in the libc setlocale implementation on NetBSD 1.4.x–1.6 (and possibly other OSes) when LC_ALL is used with a locale string that contains more than 6 elements. This enables a local attacker to potentially execute arbitrary code via the compromis...

CVE-2004-0114

The CVE-2004-0114 issue is a reference-count bug in SHMAT (System V Shared Memory) on FreeBSD/NetBSD/OpenBSD where shmat(2) increments the vm_object reference count and then calls vm_map_find; if vm_map_find fails, the reference count is not decremented. This can allow local attackers to gain rea...

CVE-2002-1476

Buffer overflow in setlocale in libc on NetBSD 1.4.x through 1.6, and possibly other operating systems, when called with the LCALL category, allows local attackers to execute arbitrary code via a user-controlled locale string that has more than 6 elements, which exceeds the boundaries of the...

CVE-2004-0257

Technical details about CVE-2004-0257 are not publicly provided in the supplied documents. Available records describe a DoS condition via IPv6 MTU-related packets but do not specify affected products, versions, root cause, or mitigations. Monitor for updates.

NetBSD Security Advisory 2004-009: ftpd root escalation

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2004-009 ================================= Topic: ftpd root escalation Version: NetBSD-current: source prior to Aug 10, 2004 NetBSD 2.0 branch: source prior to Aug 15, 2004 NetBSD 1.6.2: affected NetBSD 1.6.1: affected NetBSD 1.6: affect...

NetBSD swapctl DoS

No description provided...

[Full-Disclosure] NetBSD kernel swapctl(2) vulnerability

Name: NetBSD kernel swapctl2 vulnerability Date: 11 June 2004 CVE candidate: not assigned Author: Evgeny Demidov Description: There exists a integer handling vulnerability in NetBSD swapctl2 system call. It seems that this vulnerability can not be exploited to gain super-user privilegies, but any...

TCP RST packets spoofing

By sending spoofed RST it's possible to terminate established TCP connection. unlike TPC hijacking attacks there is no need for exact TCP sequence number, and number can be any number from handshaked TCP window. It significantly increases attack efficiency. In NetBSD sequence number for RST is no...

NetBSD systrace privilege escalation

By using invalid handling of error condition it's possible to obtain superuser privileges...

NetBSD Security Advisory 2004-007: Systrace systrace_exit() local root

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2004-007 ================================= Topic: Systrace systraceexit local root Version: NetBSD-current: source prior to Apr 16, 2004 netBSD 2.0 branch: source prior to Apr 16, 2004 netBSD 1.6.2: not affected NetBSD 1.6.1: not affecte...