CVE-2008-2476

The CVE-2008-2476 issue concerns the IPv6 Neighbor Discovery Protocol (NDP) implementation in several vendors (FreeBSD 6.3–7.1; OpenBSD 4.2–4.3; NetBSD; Force10 FTOS pre-E7.7.1.1; Juniper JUNOS; Wind River VxWorks 5.x–6.4) that does not validate the origin of Neighbor Discovery messages. This all...

multiple vendor ftpd - Cross-site request forgery

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 multiple vendor ftpd - Cross-site request forgery Author: Maksymilian Arciemowicz securityreason.com Date: - - Written: 03.09.2008 - - Public: 26.09.2008 SecurityReason Research SecurityAlert Id: 56 CVE: not assigned SecurityRisk: Low Affected Softwar...

CVE-2008-4247

ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF attacks and execute arbitrary FTP commands via a long ftp:// URI...

DEBIAN-CVE-2008-4247

ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF attacks and execute arbitrary FTP commands via a long ftp:// URI...

CVE-2008-4247

ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF attacks and execute arbitrary FTP commands via a long ftp:// URI...

CVE-2008-4247

CVE-2008-4247 affects FTP servers that interpret long commands as multiple requests, enabling cross-site request forgery (CSRF) and arbitrary FTP commands via a crafted long ftp:// URI. The primary publicly documented impact comes from FreeBSD lukemftpd, which splits long commands and could allow...

CVE-2008-4247

ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF attacks and execute arbitrary FTP commands via a long ftp:// URI...

CVE-2008-4247

ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF attacks and execute arbitrary FTP commands via a long ftp:// URI...

ProFTPD超长命令处理安全漏洞

BUGTRAQ ID: 31289 CNCAN ID：CNCAN-2008092314 ProFTPD是一款FTP服务程序。 ProFTPD存在跨站请求伪造攻击，远程攻击者可以利用漏洞其他用户权限执行任意FTP命令。 应用程序截断超长FTP命令并不正确解析剩余的字符串作为新的FTP命令，攻击者构建恶意的链接，诱使用户访问，可导致以其他用户上下文在目标服务器上执行任意FTP命令。 ProFTPD Project ProFTPD 1.3.1 可参考ProFTPD提供的CVS库获得补丁信息： http://www.proftpd.org/ OpenBSD可参考如下补丁程序：...

Sun M-class hardware denial of service

Sun/Fujitsu M4000-M9000 machines are very expensive multicpu sparc64 architecture machines, scaling all the way up to 64 processors, 256 cores, and 512 threads. They use the Fujitsu SPARC64 VI and more recently VII processors. The smallest models are large 6U 84kg, and the larger models are fridg...

OpenBSD (ibcs2_exec) Kernel Local Exploit

No description provided by source. // // Patch ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/005exec.patch // include sys/types.h include sys/stat.h include fcntl.h include stdio.h / $OpenBSD: ibcs2exec.h,v 1.3 2002/03/14 01:26:50 millert Exp $ / / $NetBSD: ibcs2exec.h,v 1.4 1995/03/14...

Berkeley Yacc (byacc) 'skeleton.c'本地拒绝服务漏洞

BUGTRAQ ID: 30233 CNCAN ID：CNCAN-2008071604 Berkeley Yacc是一款用于生成编译器的编译器。 Berkeley Yacc byacc 'skeleton.c'存在越界访问，本地攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 在减少规则和yacc堆栈指针指向分配栈中很后面的位置时，通过$$ = $1行为可导致内存越界访问而造成应用程序崩溃。 Robert Corbett Berkeley Yacc byacc 20070509 OpenBSD OpenBSD 2.9 OpenBSD OpenBSD 2.8 OpenBSD OpenBSD...

OpenBSD 4.0 (FIRST ANIMATED EXPLOIT) Local Root Exploit (vga)

No description provided by source. / A PRODUCTION OF LUL-DISLCOSURE INC. PROUDLY PRESENTS... 888 888 888 888 888 888 &nbs...

OpenBSD 4.0 - vga Local Privilege Escalation

OpenBSD 4.0 - vga Local Privilege Escalation / A PRODUCTION OF LUL-DISLCOSURE INC. PROUDLY PRESENTS... 888 888 888 888 888 888 .d88b. 88888b. .d88b. 88888b. 88888b. .d8888b .d88888 d88""88b 888 "88b d8P Y8b 888 "88b 888 "88b 88K d88" 888 888 888 888 888 88888888 888 888 888 888 "Y8888b. 888 888...

OpenBSD 4.0 (FIRST ANIMATED EXPLOIT) Local Root Exploit (vga)

Exploit for openbsd platform in category local exploits ============================================================= OpenBSD 4.0 FIRST ANIMATED EXPLOIT Local Root Exploit vga ============================================================= / A PRODUCTION OF LUL-DISLCOSURE INC. PROUDLY PRESENTS... 8...

openbsdanim-local.txt

/ A PRODUCTION OF LUL-DISLCOSURE INC. PROUDLY PRESENTS... 888 888 888 888 888 888 .d88b. 88888b. .d88b. 88888b. 88888b. .d8888b .d88888 d88""88b 888 "88b d8P Y8b 888 "88b 888 "88b 88K d88" 888 888 888 888 888 88888888 888 888 888 888 "Y8888b. 888 888 Y88..88P 888 d88P Y8b. 888 888 888 d88P X88 Y8...

OpenBSD 4.0 - 'vga' Local Privilege Escalation

/ A PRODUCTION OF LUL-DISLCOSURE INC. PROUDLY PRESENTS... 888 888 888 888 888 888 .d88b. 88888b. .d88b. 88888b. 88888b. .d8888b .d88888 d88""88b 888 "88b d8P Y8b 888 "88b 888 "88b 88K d88" 888 888 888 888 888 88888888 888 888 888 888 "Y8888b. 888 888 Y88..88P 888 d88P Y8b. 888 888 888 d88P X88 Y8...

OpenBSD GNU Screen锁屏验证绕过漏洞

BUGTRAQ ID: 29810 CNCAN ID：CNCAN-2008062315 OpenBSD GNU Screen是一款免费开放源代码的终端管理软件。 OpenBSD GNU Screen锁屏实现存在设计错误，本地物理能访问控制台攻击者可以利用漏洞绕过密码提示访问锁住的Screen会话。 目前没有详细漏洞细节提供。 GNU screen 4.0.3 + OpenBSD OpenBSD 4.3 Rembrandt rembrandtatjpberlin.de...

screen 4.0.3 Local Authentication Bypass Vulnerability (OpenBSD)

No description provided by source. / / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author: Rembrandt Date : Known since somewhere in &cant...

Screen 4.0.3 (OpenBSD) - Local Authentication Bypass

Screen 4.0.3 OpenBSD - Local Authentication Bypass / / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2007-06-03 Affected Software: scree...