9 matches found
FreeBSD : FreeBSD -- Kernel data leak via ptrace(PT_LWPINFO) (34a3f9b5-dab3-11e7-b5af-a4badb2f4699)
Not all information in the struct ptracelwpinfo is relevant for the state of any thread, and the kernel does not fill the irrelevant bytes or short strings. Since the structure filled by the kernel is allocated on the kernel stack and copied to userspace, a leak of information of the kernel stack...
CVE-2017-1086
Removed by vendor...
FreeBSD -- Kernel data leak via ptrace(PT_LWPINFO)
Problem Description: Not all information in the struct ptracelwpinfo is relevant for the state of any thread, and the kernel does not fill the irrelevant bytes or short strings. Since the structure filled by the kernel is allocated on the kernel stack and copied to userspace, a leak of informatio...
FreeBSD 5.4 / 6.0 (ptrace PT_LWPINFO) Local Denial of Service Exploit
No description provided by source. include sys/types.h include sys/ptrace.h include unistd.h / lol lol, exploit for http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=419 thank you oh unknown, sincerely kokanin@gmail. usage: ./blah pid you own / int mainint argc, char argv struc...
CVE-2006-4516
CVE-2006-4516 affects FreeBSD 6.0-RELEASE. The kernel’s PT_LWPINFO ptrace handling has a signedness flaw: a large negative data value can bypass the signed check and be passed to copyout, causing memory corruption and kernel panic. Impact is a local denial-of-service condition. Described in iDefe...
CVE-2006-4516
Integer signedness error in FreeBSD 6.0-RELEASE allows local users to cause a denial of service memory corruption and kernel panic via a PTLWPINFO ptrace command with a large negative data value that satisfies a signed maximum value check but is used in an unsigned copyout function call...
FreeBSD 5.4/6.0 - 'ptrace PT_LWPINFO' Local Denial of Service
include include include / lol lol, exploit for http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=419 thank you oh unknown, sincerely kokanin@gmail. usage: ./blah / int mainint argc, char argv struct ptracelwpinfo lol; ptracePTATTACH,atoiargv1,NULL,0; waitNULL;...
iDefense Security Advisory 10.10.06: FreeBSD ptrace PT_LWPINFO Denial of Service Vulnerability
FreeBSD ptrace PTLWPINFO Denial of Service Vulnerability iDefense Security Advisory 10.10.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 10, 2006 I. BACKGROUND FreeBSD is a modern operating system for x86, amd64, Alpha, IA-64, PC-98 and SPARC architectures. It's based on the UNIX...
FreeBSD ptrace() DoS
Integer overflow in PTLWPINFO...