Linux privilege escalation

ring 0 code execution via futex syscall...

Debian DSA-2949-1 : linux - security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation : - CVE-2014-3144/ CVE-2014-3145 A local user can cause a denial of service system crash via crafted BPF instructions. - CVE-2014-3153 Pinkie Pie discovered an issue in th...

Debian Security Advisory DSA 2949-1 (linux - security update)

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation: CVE-2014-3144 / CVE-2014-3145 A local user can cause a denial of service system crash via crafted BPF instructions. CVE-2014-3153 Pinkie Pie discovered an issue in the...

Windows NT - Windows 8 EPATHOBJ Local Ring 0 Exploit

Exploit for windows platform in category local exploits ifndef WIN32NOSTATUS define WIN32NOSTATUS endif include include include include include ifdef WIN32NOSTATUS undef WIN32NOSTATUS endif include pragma commentlib, "gdi32" pragma commentlib, "kernel32" pragma commentlib, "user32" pragma...

Vm86 - Syscall Task Switch Kernel Panic (Denial of Service) Privilege Escalation

Vm86 - Syscall Task Switch Kernel Panic Denial of Service Privilege Escalation Source: http://www.halfdog.net/Security/2013/Vm86SyscallTaskSwitchKernelPanic/ Introduction Problem description: The initial observation was, that the linux vm86 syscall, which allows to use the virtual-8086 mode from...

Intel® Desktop Boards Privilege Escalation

Summary: Software running administrative ring 0 privilege can under certain circumstances change code running in System Management Mode. Description: A new BIOS update is available for selected Intel desktop motherboards to ensure proper configuration settings. These changes would prevent a...

Rising AntiVirus 2008/2009/2010 Local Privilege Escalation Exploit

RsNtGdi.sys not verify the Irp-UserBuffer address. Exploit code will restore all of the kernel SSDT hook Rising AntiVirus 2008 / 2009 / 2010 none include "stdafx.h" include "windows.h" enum SystemModuleInformation = 11 ; typedef struct ULONG Unknown1; ULONG Unknown2; PVOID Base; ULONG Size; ULONG...

Windows NT User Mode to Ring 0 Escalation Vulnerability

Exploit for unknown platform in category local exploits ======================================================= Windows NT User Mode to Ring 0 Escalation Vulnerability ======================================================= Microsoft Windows NT GP Trap Handler Allows Users to Switch Kernel Stack...

Code injection

Unspecified vulnerability in KLIF klif.sys in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for File Servers 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows local users to gain Ring-0 privileges via unspecified vectors...

CVE-2007-1881

Unspecified vulnerability in KLIF klif.sys in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for File Servers 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows local users to gain Ring-0 privileges via unspecified vectors...

CVE-2007-1881: Undefined Security Weakness

Unspecified vulnerability in KLIF klif.sys in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for File Servers 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows local users to gain Ring-0 privileges via unspecified vectors...

CVE-2007-1881

CVE-2007-1881 : Affected are Kaspersky products using KLIF (klif.sys) on KAV/AV for Workstations/File Servers 6.0 and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614. Local users can gain Ring-0 privileges via unspecified vectors. The vulnerability is documented with a MEDIUM seve...

Kaspersky Antivirus 6.0 Local Privilege Escalation Exploit

No description provided by source. // kav 6.0 0day local priv escalation exploit // by m4d // http://unl0ck.net include windows.h include stdlib.h include stdio.h // r0-shellcode creates C:\Hello.txt with "Hello from ring-0! :" unsigned char Shellcode405 = ...

Kaspersky Antivirus 6.0 Local Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ========================================================== Kaspersky Antivirus 6.0 Local Privilege Escalation Exploit ========================================================== // kav 6.0 0day local priv escalation exploit // by m4d //...

Apple AirPort wireless drivers fails to properly handle scan cache updates

Overview An heap buffer overflow exists in the Apple AirPort wireless driver. Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code, or cause a denial-of-service condition. Description Apple AirPort drivers contain a heap buffer overflow in the code that...

[ Suresec Advisories ] - Linux kernel ia32 compatibility (ia64/x86-64) race condition

Suresec Security Advisory - 00004 10/07/05 Linux kernel ia32 compatibility race condition Advisory: http://www.suresec.org/advisories/adv4.pdf http://www.suresec.org/advisories/adv3.pdf Description: A race condition vulnerability has been found in the ia32 compatibility execve systemcall. The rac...

Local Root exploit (Fedora Core 4)

Local Root Exploit under Fedora Core 4 stable Advisory Florian Strankowski [email protected] www.bildunxxluecke.de/usr/florian/advisory/advisory-05-048.txt Vulnerable System : This vulnerability affects Fedora Core 4.0 stable with the kernelversion 2.6.11-1.1369FC4 1 Thu Jun 2 22:53:35...