Exploiting Kernel Buffer Overflows FreeBSD Style

-----BEGIN PGP SIGNED MESSAGE----- Exploiting Kernel Buffer Overflows FreeBSD Style: Defeating Security Levels and Breaking Out of Jail2 Esa Etelavuori December 28, 2000 1. Introduction This is a detailed case study discussing the exploitation of the FreeBSD kernel process filesystem buffer...

FreeBSD-SA-00:77.procfs

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:77 Security Advisory FreeBSD, Inc. Topic: Several vulnerabilities in procfs REVISED Category: core Module: procfs Announced: 2000-12-18 Reissued: 2000-12-29 Affects:...

Security Advisory: FreeBSD-SA-00:77.procfs

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:77 Security Advisory FreeBSD, Inc. Topic: Several vulnerabilities in procfs Category: core Module: procfs Announced: 2000-12-18 Affects: Problem 1: FreeBSD 4.x prior to t...

CVE-2000-0094

The CVE-2000-0094 entry concerns BSD procfs allowing local privilege escalation to root by manipulating the /proc/pid/mem interface through a modified file descriptor for stderr. The vulnerability is rooted in the procfs interface and enables a local attacker to gain full privileges, as described...

CVE-2000-0094

procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for stderr...

CVE-2000-0094: Undefined Security Weakness

procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for stderr...

CVE-2000-0094

procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for stderr...

FreeBSD-SA-00:02.procfs

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:01 Security Advisory FreeBSD, Inc. Topic: Old procfs hole incompletely filled Category: core Module: make Announced: 2000-01-24 Affects: All versions before the correctio...

CVE-1999-0724

Summary: CVE-1999-0724 describes a buffer overflow in OpenBSD’s procfs and fdescfs file systems caused by the uio_offset value used by readdir(). The connected Red Hat and CVE records reiterate this description. The affected components are the OpenBSD procfs and fdescfs implementations; no additi...

CVE-1999-0724

Buffer overflow in OpenBSD procfs and fdescfs file systems via uiooffset in the readdir function...

CVE-1999-0724: Undefined Security Weakness

Buffer overflow in OpenBSD procfs and fdescfs file systems via uiooffset in the readdir function...

CVE-1999-0417

CVE-1999-0417 affects 64-bit Solaris 7 procfs; local users can cause a denial of service. The connected documents do not provide further technical details such as root cause, specific vulnerable versions beyond Solaris 7, exploit information, or a remediation/fix.

CVE-1999-0417: Undefined Security Weakness

64 bit Solaris 7 procfs allows local users to perform a denial of service...

bsd_bugs.txt

Subject: serious problem in netbsd/openbsd procfs/fdesc To: [email protected] Greetings. I have found a nasty bug in the fdesc and procfs filesystems included with NetBSD and OpenBSD. Any user with access to a mounted procfs/fdesc filesystem has the ability to cause a kernel panic. The...

patch_for_ipc_vuln.txt

Subject: Re: KKIS19990914.004b: ShareDream - shared memory - ipc vulnerability To: [email protected] Attached is a trivial Linux-2.2.12 patch wich adds add a procfs entry for tuning the limit of shared memory allocable. /proc/sys/kernel/shmmax Max number of shared memory pages Attached is...

solaris.7.procfs.dos.txt

Date: Tue, 9 Mar 1999 22:17:19 +0200 From: Toomas Soome To: [email protected] Subject: 64 bit Solaris 7 procfs bug hi! there is bug with 64 bit solaris 7 procfs, every nonprivileged user can crash computer with command 'more /proc/self/psinfo'. Tested with UE3000, U10, UE450. This bug has been...

CVE-1999-0724

Buffer overflow in OpenBSD procfs and fdescfs file systems via uiooffset in the readdir function...

CVE-1999-0417

64 bit Solaris 7 procfs allows local users to perform a denial of service...

Sun Solaris 7.0 - procfs Denial of Service

Sun Solaris 7.0 - procfs Denial of Service source: https://www.securityfocus.com/bid/448/info A nonpriviliged user can crash any 32 or 64 bit non-intel machine running Solaris 7 by executing the following: more /proc/self/psinfo This is due to a bug in the Solaris 7 procfs. %more /proc/self/psinf...

Sun Solaris 7.0 - 'procfs' Denial of Service

source: https://www.securityfocus.com/bid/448/info A nonpriviliged user can crash any 32 or 64 bit non-intel machine running Solaris 7 by executing the following: more /proc/self/psinfo This is due to a bug in the Solaris 7 procfs. %more /proc/self/psinfo crash...