81 matches found
Linux Kernel < 2.6.31-rc7 - AF_IRDA 29-Byte Stack Disclosure Exploit
No description provided by source. / cve-2009-3002.c Linux Kernel 2.6.31-rc7 AFIRDA getsockname 29-Byte Stack Disclosure Jon Oberheide [email protected] http://jon.oberheide.org Information: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3002 The Linux kernel before 2.6.31-rc7 does not...
Linux Kernel <= 2.6.30 atalk_getname() 8-bytes Stack Disclosure Exploit
No description provided by source. / appleak.c Linux keunouille = 2.6.30 AppleTalk getsockname 8-bytes kernel stack disclosure http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=3d392475c873c10c10d6d96b94d092a34ebd4791 atalkgetname can leak 8 bytes of kernel memory to use...
Linux Kernel <= 2.6.31-rc7 AF_LLC getsockname 5-Byte Stack Disclosure
No description provided by source. / llc-getsockname-leak.c Linux Kernel = 2.6.31-rc7 AFLLC getsockname 5-Byte Stack Disclosure Jon Oberheide [email protected] http://jon.oberheide.org Information: http://git.kernel.org/linus/28e9fc592cb8c7a43e4d3147b38be6032a0e81bc sllcarphrd member of sockaddrl...
kernel: stack disclosure in binfmt_script load_script()
The loadscript function in fs/binfmtscript.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local users to obtain sensitive information from kernel stack memory via a crafted application...
PT-2011-1446 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.37-rc2 Description: The issue concerns the get name function in net/tipc/socket.c, which fails to initialize a certain structure. This allows local users to obtain potentially sensitive information from kern...
Linux Kernel < 2.6.31-rc7 AF_IRDA 29-Byte Stack Disclosure Exploit
No description provided by source. / cve-2009-3002.c Linux Kernel 2.6.31-rc7 AFIRDA getsockname 29-Byte Stack Disclosure Jon Oberheide [email protected] http://jon.oberheide.org Information: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3002 The Linux kernel before 2.6.31-rc7 does not...
Linux Kernel < 2.6.31-rc7 - 'AF_IRDA' 29-Byte Stack Disclosure (2)
/ cve-2009-3002.c Linux Kernel http://jon.oberheide.org Information: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3002 The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows local users to read the contents of some kernel...
Linux Kernel < 2.6.31-rc7 AF_IRDA 29-Byte Stack Disclosure Exploit
Exploit for linux platform in category local exploits ================================================================== Linux Kernel include include include include include include include include include ifndef AFIRDA define AFIRDA 23 endif struct sockaddrirda uint16t sirfamily; uint8t...
Linux Kernel 2.6.31-rc7 - AF_IRDA 29-Byte Stack Disclosure (2)
Linux Kernel 2.6.31-rc7 - AFIRDA 29-Byte Stack Disclosure 2 / cve-2009-3002.c Linux Kernel http://jon.oberheide.org Information: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3002 The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions,...
Linux Kernel <= 2.6.30 atalk_getname() 8-bytes Stack Disclosure Exploit
No description provided by source. / appleak.c Linux keunouille = 2.6.30 AppleTalk getsockname 8-bytes kernel stack disclosure http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=3d392475c873c10c10d6d96b94d092a34ebd4791 atalkgetname can leak 8 bytes of kernel memory to use...
Linux Kernel <= 2.6.30 atalk_getname() 8-bytes Stack Disclosure Exploit
Exploit for linux platform in category local exploits ======================================================================= Linux Kernel / include include include include include include include include include include include void kernopint fd / from Jon Oberheide sploit / const int randcalls ...
Linux Kernel 2.6.30 - atalk_getname() 8-bytes Stack Disclosure (1)
Linux Kernel 2.6.30 - atalkgetname 8-bytes Stack Disclosure 1 / appleak.c Linux keunouille / include include include include include include include include include include include void kernopint fd / from Jon Oberheide sploit / const int randcalls = NRread, NRwrite, NRopen, NRclose, NRstat,...
Linux Kernel <= 2.6.31-rc7 AF_LLC getsockname 5-Byte Stack Disclosure
No description provided by source. / llc-getsockname-leak.c Linux Kernel = 2.6.31-rc7 AFLLC getsockname 5-Byte Stack Disclosure Jon Oberheide [email protected] http://jon.oberheide.org Information: http://git.kernel.org/linus/28e9fc592cb8c7a43e4d3147b38be6032a0e81bc sllcarphrd member of sockaddrl...
Linux Kernel 2.6.30 - 'atalk_getname()' 8-bytes Stack Disclosure (1)
/ appleak.c Linux keunouille / include include include include include include include include include include include void kernopint fd / from Jon Oberheide sploit / const int randcalls = NRread, NRwrite, NRopen, NRclose, NRstat, NRlstat, NRlseek, NRrtsigaction, NRrtsigprocmask, NRioctl, NRacces...
Linux Kernel 2.6.31-rc7 - 'AF_LLC getsockname' 5-Byte Stack Disclosure
/ llc-getsockname-leak.c Linux Kernel http://jon.oberheide.org Information: http://git.kernel.org/linus/28e9fc592cb8c7a43e4d3147b38be6032a0e81bc sllcarphrd member of sockaddrllc might not be changed. Zero sllc before copying to the above layer's structure. Notes: Bug is present in include include...
Linux Kernel 2.6.31-rc7 - AF_LLC getsockname 5-Byte Stack Disclosure
Linux Kernel 2.6.31-rc7 - AFLLC getsockname 5-Byte Stack Disclosure / llc-getsockname-leak.c Linux Kernel http://jon.oberheide.org Information: http://git.kernel.org/linus/28e9fc592cb8c7a43e4d3147b38be6032a0e81bc sllcarphrd member of sockaddrllc might not be changed. Zero sllc before copying to t...
Linux Kernel <= 2.6.31-rc7 AF_LLC getsockname 5-Byte Stack Disclosure
Exploit for linux platform in category local exploits ===================================================================== Linux Kernel include include include include include include include include include ifndef AFLLC define AFLLC 26 endif ifndef AFLLC define AFLLC 26 endif ifndef LLCSAPNULL...
Linux Kernel <= 2.6.31-rc5 sigaltstack 4-Byte Stack Disclosure Exploit
No description provided by source. / sigaltstack-leak.c Linux Kernel = 2.6.31-rc5 sigaltstack 4-Byte Stack Disclosure Jon Oberheide [email protected] http://jon.oberheide.org Information: http://git.kernel.org/linus/0083fc2c50e6c5127c2802ad323adf8143ab7856 Ulrich Drepper correctly points out that...
Linux Kernel 2.6.31-rc5 - sigaltstack 4-Byte Stack Disclosure
Linux Kernel 2.6.31-rc5 - sigaltstack 4-Byte Stack Disclosure / sigaltstack-leak.c Linux Kernel http://jon.oberheide.org Information: http://git.kernel.org/linus/0083fc2c50e6c5127c2802ad323adf8143ab7856 Ulrich Drepper correctly points out that there is generally padding in the structure on 64-bit...
Linux Kernel <= 2.6.31-rc5 sigaltstack 4-Byte Stack Disclosure Exploit
Exploit for linux platform in category local exploits ====================================================================== Linux Kernel include include include include include include include include const int randcalls = 0, 1, 2, 3, 4, 5, 6, 8, 9, 10, 11, 13, 14, 16, 21, 22, 24, 25, 32, 33, 36...