Code injection

Linux kernel before 2.6.16.21 and 2.6.17, when running on PowerPC, does not perform certain required accessok checks, which allows local users to read arbitrary kernel memory on 64-bit systems signal64.c and cause a denial of service crash and possibly read kernel memory on 32-bit systems...

CVE-2006-2448

Linux kernel before 2.6.16.21 and 2.6.17, when running on PowerPC, does not perform certain required accessok checks, which allows local users to read arbitrary kernel memory on 64-bit systems signal64.c and cause a denial of service crash and possibly read kernel memory on 32-bit systems...

CVE-2006-2448

Concrete details found: CVE-2006-2448 affects the Linux kernel on PowerPC, specifically versions before 2.6.16.21 and 2.6.17. The root cause is missing access_ok checks in PowerPC signal handling (signal_64.c, potentially signal_32.c). Impact as stated: local users could read arbitrary kernel mem...

[USN-299-1] dhcdbd vulnerability

=========================================================== Ubuntu Security Notice USN-299-1 June 13, 2006 dhcdbd vulnerability https://launchpad.net/bugs/49104 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS This...

[SECURITY] [DSA 1084-1] New typespeed packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1084-1 [email protected] http://www.debian.org/security/ Steve Kemp May 31st, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1074-1] New mpg123 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1074-1 [email protected] http://www.debian.org/security/ Martin Schulze May 24th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1052-1] New cgiirc packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1052-1 [email protected] http://www.debian.org/security/ Martin Schulze May 8th, 2006 http://www.debian.org/security/faq -...

os-x/ppc sync(), reboot() 32 bytes

Exploit for os-x/ppc platform in category shellcode ================================== os-x/ppc sync, reboot 32 bytes ================================== / MacOSX/PowerPC Shellcode for: sync, reboot 32 bytes / include include char shellcode = "\x7c\x63\x1a\x79" "\x39\x40\x01\x06" "\x38\x0a\xff\x1e...

os-x/ppc sync() reboot() 32 bytes

No description provided by source. / MacOSX/PowerPC Shellcode for: sync, reboot 32 bytes hophet at gmail.com http://www.nlabs.com.br/hophet/ / include stdio.h include string.h char shellcode = "\x7c\x63\x1a\x79" "\x39\x40\x01\x06" "\x38\x0a\xff\x1e" "\x44\xff\xff\x02" "\x60\x60\x60\x60"...

os-x/ppc execve/bin/sh, exit 72 bytes

os-x/ppc execve/bin/sh, exit 72 bytes. Shellcode exploit for osxppc platform / MacOSX/PowerPC Shellcode for: execve"/bin/sh", "/bin/sh", NULL, exit 72 bytes hophet at gmail.com http://www.nlabs.com.br/hophet/ / include include char shellcode = "\x7c\xa5\x2a\x79" "\x40\x82\xff\xfd"...

os-x/ppc execve(/bin/sh) exit() 72 bytes

No description provided by source. / MacOSX/PowerPC Shellcode for: execve"/bin/sh", "/bin/sh", NULL, exit 72 bytes hophet at gmail.com http://www.nlabs.com.br/hophet/ / include stdio.h include string.h char shellcode = "\x7c\xa5\x2a\x79" "\x40\x82\xff\xfd" "\x7d\x68\x02\xa6" "\x3b\xeb\x01\x71"...

os-x/ppc sync, reboot 32 bytes

os-x/ppc sync, reboot 32 bytes. Shellcode exploit for osxppc platform / MacOSX/PowerPC Shellcode for: sync, reboot 32 bytes hophet at gmail.com http://www.nlabs.com.br/hophet/ / include include char shellcode = "\x7c\x63\x1a\x79" "\x39\x40\x01\x06" "\x38\x0a\xff\x1e" "\x44\xff\xff\x02"...

os-x/ppc execve(/bin/sh), exit() 72 bytes

Exploit for os-x/ppc platform in category shellcode ========================================= os-x/ppc execve/bin/sh, exit 72 bytes ========================================= / MacOSX/PowerPC Shellcode for: execve"/bin/sh", "/bin/sh", NULL, exit 72 bytes / include include char shellcode =...

[SECURITY] [DSA 1023-1] New kaffeine packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1023-1 [email protected] http://www.debian.org/security/ Martin Schulze April 5th, 2006 http://www.debian.org/security/faq -...

[Full-disclosure] [SECURITY] [DSA 1013-1] New snmptrapfmt packages fix insecure temporary file

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1013-1 [email protected] http://www.debian.org/security/ Martin Schulze March 22nd, 2006 http://www.debian.org/security/faq -...

Apple Mac OS X 10.4.5 Mail.app (Real Name) Buffer Overflow Exploit

Exploit for macOS platform in category remote exploits ================================================================== Apple Mac OS X 10.4.5 Mail.app Real Name Buffer Overflow Exploit ================================================================== !/usr/bin/perl Code by Kevin Finisterre...

Apple Mac OSX 10.4.5 Mail.app - Real Name Buffer Overflow

!/usr/bin/perl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom http://www.digitalmunition.com Mail.app Version 2.0.7 746.2 on OSX 10.4.5 Build 8H14 + Security Update 2006-001 PowerPC v1.0 RFC-1740 MIME-based Mac file buffer overflow AppleSingle file header: 4 byte magic number4 byte versi...

[SECURITY] [DSA 978-1] New GnuPG packages fix invalid success return

-------------------------------------------------------------------------- Debian Security Advisory DSA 978-1 [email protected] http://www.debian.org/security/ Martin Schulze February 17th, 2006 http://www.debian.org/security/faq -...

SUSE-SA:2006:006: kernel

The remote host is missing the patch for the advisory SUSE-SA:2006:006 kernel. The Linux kernel on SUSE Linux 10.0 has been updated to fix following security problems: - CVE-2006-0454: An extra dst release when ipoptionsecho failed was fixed. This problem could be triggered by remote attackers an...

Ubuntu 4.10 : linux-source-2.6.8.1 vulnerability (USN-39-1)

USN-30-1 fixed several flaws in the Linux ELF binary loader's handling of setuid binaries. Unfortunately it was found that these patches were not sufficient to prevent all possible attacks on 64-bit platforms, so previous amd64 kernel images were still vulnerable to root privilege escalation if...