HP-UX Security Patch : PHKL_25999

syscall, msemlock, umask cumulative patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26362; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

Important: kernel security update

2.6.9-55.0.9.0.1 - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix for nfs open call taking longer issue Chuck Lever orabug 5580407 bz 219412 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon with rds Zach...

x86_64 syscall vulnerability

The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x8664 architecture, does not zero extend the eax register after the 32bit entry path to ptrace is used, which might allow local users to gain privileges by triggering an out-of-bounds...

x86_64 syscall vulnerability

The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x8664 architecture, does not zero extend the eax register after the 32bit entry path to ptrace is used, which might allow local users to gain privileges by triggering an out-of-bounds...

64-bit Linux kernel privilege escalation

Insufficient registry access validation on 32-bit syscalls emulation...

CVE-2007-1876

CVE-2007-1876 affects VMware Workstation prior to 5.5.4. In a 64-bit Windows guest on a 64-bit host, debugging a local program and stepping into a syscall instruction could corrupt the virtual machine’s register context, leading to system instability or VM/process failures. The issue is described...

Mac OS X kernel "fpathconf()" syscall fails to properly handle unknown file types

Overview A vulnerability in the Mac OS X kernel could allow an authenticated local attacker to cause a denial of service. Description The fpathconf system call provides a method for applications to determine the current value of a configurable system limit or option variable associated with a fil...

CVE-2007-1220

The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 does not properly verify the parameters passed to the syscall dispatcher, which allows attackers with physical access to bypass code-signing requirements and execute arbitrary code...

CVE-2007-1221

The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 allows attackers with physical access to force execution of the hypervisor syscall with a certain register set, which bypasses intended code protection...

Microsoft XBox privilege escalation and code execution

It's possible to execute unsigned code in hypervisor mode because of syscall handling problem. It opens possibility for any actions, including changing of operation system...

linux/x86-64 execve(/bin/sh) 33 bytes

No description provided by source. Linux/X86-64 Dummy for shellcode: execve"/bin/sh", "/bin/sh", NULL hophet at gmail.com .text .globl start start: xorq %rdx, %rdx movq $0x68732f6e69622fff,%rbx shr $0x8, %rbx push %rbx movq %rsp,%rdi xorq %rax,%rax pushq %rax pushq %rdi movq %rsp,%rsi mov $0x3b,%...

kernel listxattr syscall can corrupt user space programs

Unspecified vulnerability in the listxattr system call in Linux kernel, when a "bad inode" is present, allows local users to cause a denial of service data corruption and possibly gain privileges via unknown vectors...

Mac OS X 10.4.x Kernel shared_region_map_file_np() Memory Corruption

Exploit for macOS platform in category dos / poc ==================================================================== Mac OS X 10.4.x Kernel sharedregionmapfilenp Memory Corruption ==================================================================== / This vulnerability was discovered by Adriano...

Mac OS X syscall DoS

Arguments of sharedregionmapfilenp syscall are not checking, making it's possible to exhaust all available memory...

OpenBSD vga privilege escalation

vgaioctl syscall allows code execution in kernel...

linux/x86 execve read shellcode - 92 bytes

No description provided by source. XCHG Research Group Linux/x86 execve read shellcode - 92 bytes -- Writed by 0ut0fbound -- - http://outofbound.host.sk - http://xchglabs.host.sk .text .globl start start: EAX = 0x04 - syscall write xorl %eax, %eax movb $0x4, %al xorl %ebx, %ebx inc %ebx pushl...

linux/x86 execve read shellcode - 92 bytes

Exploit for linux/x86 platform in category shellcode ========================================== linux/x86 execve read shellcode - 92 bytes ========================================== XCHG Research Group Linux/x86 execve read shellcode - 92 bytes .text .globl start start: EAX = 0x04 - syscall write...

linux/x86 execve read shellcode - 92 bytes

linux/x86 execve read shellcode - 92 bytes. Shellcode exploit for linx86 platform XCHG Research Group Linux/x86 execve read shellcode - 92 bytes -- Writed by 0ut0fbound -- - http://outofbound.host.sk - http://xchglabs.host.sk .text .globl start start: EAX = 0x04 - syscall write xorl %eax, %eax mo...

MOKB-09-11-2006

Title: Mac OS X fpathconf syscall denial of service Warning - wet floor! Description: Failure to handle unknown file types by the Mac OS X kernel XNU fpathconf syscall causes a kernel panic, leading to an exploitable local denial of service by non-privileged users. The bug was fixed by FreeBSD on...

CVE-2006-5836

The fpathconf syscall function in bsd/kern/kerndescrip.c in the Darwin kernel XNU 8.8.1 in Apple Mac OS X allows local users to cause a denial of service kernel panic and possibly execute arbitrary code via a file descriptor with an unrecognized file type...