Linux/x86 - Bind TCP (31337/TCP) Shell Shellcode (108 bytes)

Linux/x86 - Bind TCP 31337/TCP Shell Shellcode 108 bytes. Shellcode exploit for Linuxx86 platform / Title : tcpbindshell 108 bytes Date : 15 May 2013 Author : Russell Willis Testd on: Linux/x86 SMP Debian 3.2.41-2 i686 $ objdump -D tcpbindshell -M intel tcpbindshell: file format elf32-i386...

Linux Kernel qdisc_run()本地拒绝服务漏洞

BUGTRAQ ID: 32985 CVECAN ID: CVE-2008-5713 Linux Kernel是开放源码操作系统Linux所使用的内核。 在多核（如16核）SMP机器上，如果并发的高流量的网络负载，就会导致内核中出现软锁定。 锁定出现在net/sched/schgeneric.c的84行的qdiscrun函数中。由于驱动持续发送报文并返回NETDEVTXOK，qdiscrun就无法退出qdiscrestart循环。尽管这可以提高吞吐能力，但某些应用程序可能被迟滞大约10秒钟。 Linux kernel 2.6.x Linux -----...

CVE-2008-5713

The qdiscrun function in net/sched/schgeneric.c in the Linux kernel before 2.6.25 on SMP machines allows local users to cause a denial of service soft lockup by sending a large amount of network traffic, as demonstrated by multiple simultaneous invocations of the Netperf benchmark application in...

CVE-2008-5713

The qdiscrun function in net/sched/schgeneric.c in the Linux kernel before 2.6.25 on SMP machines allows local users to cause a denial of service soft lockup by sending a large amount of network traffic, as demonstrated by multiple simultaneous invocations of the Netperf benchmark application in...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix a security issue and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux operating...

Linux Kernel 2.4 uselib() Privilege Elevation Exploit

No description provided by source. / Linux kernel 2.4 uselib privilege elevation exploit. original exploit source from http://isec.pl reference: http://isec.pl/vulnerabilities/isec-0021-uselib.txt I modified the Paul Starzetz's exploit, made it more possible to race successfully. The exploit stil...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5375)

This kernel update fixes quite a number of security problems : - A remote attacker could crash the IPSec/IPv6 stack by sending a bad ESP packet. This requires the host to be able to receive such packets default filtered by the firewall. CVE-2007-6282 - A problem in SIT IPv6 tunnel handling could ...

USN-618-1: Linux kernel vulnerabilities

It was discovered that the ALSA /proc interface did not write the correct number of bytes when reporting memory allocations. A local attacker might be able to access sensitive kernel memory, leading to a loss of privacy. CVE-2007-4571 Multiple buffer overflows were discovered in the handling of...

Ubuntu 8.04 LTS : linux vulnerabilities (USN-614-1)

It was discovered that PowerPC kernels did not correctly handle reporting certain system details. By requesting a specific set of information, a local attacker could cause a system crash resulting in a denial of service. CVE-2007-6694 A race condition was discovered between dnotify fcntl and clos...

USN-614-1: Linux kernel vulnerabilities

It was discovered that PowerPC kernels did not correctly handle reporting certain system details. By requesting a specific set of information, a local attacker could cause a system crash resulting in a denial of service. CVE-2007-6694 A race condition was discovered between dnotify fcntl and clos...

Fedora 9 : kernel-2.6.25.3-18.fc9 (2008-3949)

Update to Linux kernel verion 2.6.25.1, 2.6.25.2, 2.6.25.3: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.1 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.2 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3 Security fixes: CVE-2008-1669 2.6.25.2 - SMP...

Linux Kernel fcntl_setlk()函数本地竞争条件漏洞

BUGTRAQ ID: 29076 CVECAN ID: CVE-2008-1669 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux kernel没有对fcntl功能应用某些保护机制，本地攻击者可以在SMP系统上利用fcntlsetlk与close调用之间的竞争条件获得对文件描述符表的不正确序列访问，这可能导致拒绝服务的情况。 Linux kernel 2.6.25.2 Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Linux Kernel < 2.6.11.5 BLUETOOTH Stack Local Root Exploit

No description provided by source. / LINUX KERNEL Not tainted VLI EFLAGS: 00010286 2.6.9 EIP is at btsockcreate+0x3d/0x13...

VMSA-2007-0005:Updated Service Console packages (XFree86, UP and SMP kernels, Kerberos libraries) resolve security issues.

VMSA-2007-0005 Updated Service Console packages XFree86, UP and SMP kernels, Kerberos libraries resolve security issues. VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2007-0005 VMware Security AdvisorySynopsis: Updated Service Console packages XFree86, UP and SMP kernels,...

SUSE-SA:2007:021: kernel

The remote host is missing the patch for the advisory SUSE-SA:2007:021 kernel. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:021 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc';...

CVE-2006-4342

The kernel in Red Hat Enterprise Linux 3, when running on SMP systems, allows local users to cause a denial of service deadlock by running the shmat function on an shm at the same time that shmctl is removing that shm IPCRMID, which prevents a spinlock from being unlocked...

CVE-2006-4342

Summary: CVE-2006-4342 affects the Red Hat Enterprise Linux 3 kernel on SMP systems. When a local user calls shmat() to attach IPC shared memory while shmctl() is removing the same shared memory (IPC_RMID), access controls may not be fully cleared before removal, potentially causing a deadlock an...

CVE-2006-4235

Buffer overflow in the import project functionality in Sony SonicStage Mastering Studio 1.1.00 through 2.2.01 allows remote attackers to execute arbitrary code via a crafted SMP file...

CVE-2006-4235

Buffer overflow in the import project functionality in Sony SonicStage Mastering Studio 1.1.00 through 2.2.01 allows remote attackers to execute arbitrary code via a crafted SMP file...

CVE-2006-4235

The CVE-2006-4235 entry concerns Sony SonicStage Mastering Studio. A buffer overflow in the import project functionality (versions 1.1.00 through 2.2.01) can be triggered by a crafted SMP file, enabling remote code execution. Public references (NVD) confirm the affected product and the vulnerabil...