FreeBSD mbuf本地权限提升漏洞

BUGTRAQ ID: 41577 CVE ID: CVE-2010-2693 FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 mbuf是FreeBSD内核进程间通讯和联网子系统中的基础内存管理单元。网络报文和套接字缓冲区依赖于mbuf进行存储。 在复制mbuf缓冲区引用时没有正确地拷贝只读标志，如果使用sendfile2系统调用在回环接口上传输数据，就可能导致修改所传送数据的后端内存页，造成数据破坏。本地攻击者可以通过精心控制系统文件的破坏情况来利用这种数据破坏提升权限。请注意攻击者可以破坏任意可读访问的文件。 FreeBSD FreeBSD 8....

FreeBSD Security Advisory (FreeBSD-SA-06:05.80211.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:05.80211.asc ADV FreeBSD-SA-06:05.80211.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft...

Cell Phone Signal hijacking-vulnerability warning-the black bar safety net

Interesting article, this concept has long been proposed, but very few people described so fine. And to be able to implement the“attacker”requirements, high. GSM in the one-way authentication issues in 3G（WCDMA network will be overwritten, since the certification no longer is a 3-tuple, but the...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

FreeBSD IEEE 802.11网络子系统远程溢出漏洞

BUGTRAQ ID: 16296 CVECAN ID: CVE-2006-0226 FreeBSD的IEEE 802.11网络子系统可为无线联网实现协议协商。 FreeBSD的IEEE 802.11在处理协议协商时存在漏洞，远程攻击者可能利用此漏洞在主机上执行任意指令。 在扫描已有的无线网络时，如果处理了被破坏的IEEE 802.11信标或探测响应帧的话就会出现整数溢出，导致帧溢出缓冲区。能够广播特制信标或探测响应帧的攻击者可以在任何扫描无线网络的系统上以FreeBSD Kernel权限执行任意代码。 FreeBSD FreeBSD 6.0-STABLE FreeBSD FreeBSD...

Integer overflow

Integer overflow in IEEE 802.11 network subsystem ieee80211ioctl.c in FreeBSD before 6.0-STABLE, while scanning for wireless networks, allows remote attackers to execute arbitrary code by broadcasting crafted 1 beacon or 2 probe response frames...

CVE-2006-0226

Integer overflow in IEEE 802.11 network subsystem ieee80211ioctl.c in FreeBSD before 6.0-STABLE, while scanning for wireless networks, allows remote attackers to execute arbitrary code by broadcasting crafted 1 beacon or 2 probe response frames...

CVE-2006-0226

The CVE-2006-0226 issue affects FreeBSD’s IEEE 802.11 network subsystem (net80211). A vulnerable integer overflow occurs in handling corrupted beacon or probe response frames during wireless network scanning, which can allow remote code execution in the kernel on any system actively scanning for ...

CVE-2006-0226

Integer overflow in IEEE 802.11 network subsystem ieee80211ioctl.c in FreeBSD before 6.0-STABLE, while scanning for wireless networks, allows remote attackers to execute arbitrary code by broadcasting crafted 1 beacon or 2 probe response frames...

MultiTheftAuto 0.5 patch 1 - Server Crash MOTD Deletion

MultiTheftAuto 0.5 patch 1 - Server Crash MOTD Deletion / by Luigi Auriemma / include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error;...