FreeBSD UFS文件系统本地整数溢出漏洞

FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 FreeBSD 6.1内核的UFS文件系统处理代码没有正确的处理被破坏的数据结构，本地攻击者可能利用此漏洞导致整数溢出。 在加载特制的UFS文件分区时，攻击者可以直接控制所分配的内核内存数量，通过ffsmountfs函数及之后对malloc、umalargemalloc和pagealloc的调用控制对kmemalloc所传送的值。很大的或无效的大小参数会导致内核忙碌。如果从文件系统流拷贝了用户所控制数据的话，则很低的或0大小参数可能导致可利用的堆溢出。 FreeBSD FreeBSD 6.1...

CVE-2006-5726

alloccgblk in the UFS filesystem in Solaris 10 allows local users to cause a denial of service memory corruption by mounting crafted UFS filesystems with malformed data structures...

CVE-2006-5726

alloccgblk in the UFS filesystem in Solaris 10 allows local users to cause a denial of service memory corruption by mounting crafted UFS filesystems with malformed data structures...

CVE-2006-5726

CVE-2006-5726 affects the UFS filesystem in Solaris 10. The vulnerability is triggered by the alloccgblk function when mounting crafted UFS filesystems with malformed data structures, allowing local users to cause a denial of service through memory corruption. The published entries (NVD, CVE, CVE...

CVE-2006-5726: Undefined Security Weakness

alloccgblk in the UFS filesystem in Solaris 10 allows local users to cause a denial of service memory corruption by mounting crafted UFS filesystems with malformed data structures...

Sun Solaris 10 - 'UFS' Local Denial of Service

source: https://www.securityfocus.com/bid/20919/info Sun Solaris 10 is prone to a local denial-of-service vulnerability. This issue affects the UFS filesystem-handling code. An attacker can exploit this issue to crash the affected computer, denying service to legitimate users. Solaris 10 on the...

Sun Solaris 10 - UFS Local Denial of Service

Sun Solaris 10 - UFS Local Denial of Service source: https://www.securityfocus.com/bid/20919/info Sun Solaris 10 is prone to a local denial-of-service vulnerability. This issue affects the UFS filesystem-handling code. An attacker can exploit this issue to crash the affected computer, denying...

CVE-2006-5679

Integer overflow in the ffsmountfs function in FreeBSD 6.1 allows local users to cause a denial of service panic and possibly execute arbitrary code via a crafted UFS filesystem that causes invalid or large size parameters to be provided to the kmemalloc function. NOTE: a third party states that...

CVE-2006-5679

CVE-2006-5679 describes an integer overflow in the FreeBSD ffs_mountfs function (and related OS X/FreeBSD UFS handling) that can cause a local denial of service (panic) and potentially arbitrary code execution when a crafted UFS disk image is mounted. Affected: Mac OS X 10.4.x and FreeBSD 6.1, wh...

CVE-2005-3071

Unspecified vulnerability in Unix File System UFS on Solaris 8 and 9, when logging is enabled, allows local users to cause a denial of service "soft hang" via certain write operations to UFS...

CVE-2005-3071

CVE-2005-3071 describes an unspecified vulnerability in the Unix File System (UFS) on Solaris 8 and 9 that, when logging is enabled, allows local users to cause a denial of service (a soft hang) via certain write operations to UFS. The NVD entry lists a low overall risk (CVSS v2 base score 2.1) w...

[SA16924] SUN Solaris UFS File System Denial of Service

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Sun Solaris UFS file system driver DoS

It's possible to cause "soft hang" if UFS logging is enabled...

Solaris 8 (sparc) : 116950-15

SunOS 5.8: ufs patch. Date this patch was last updated by Sun : Nov/09/07 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit...

Solaris 9 (sparc) : 117427-08

SunOS 5.9: ufs Patch. Date this patch was last updated by Sun : Jul/15/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit...

CVE-2003-1060

The NFS Server for Solaris 7, 8, and 9 allows remote attackers to cause a denial of service UFS panic via certain invalid UFS requests, which triggers a null dereference...

CVE-2003-1060

The CVE-2003-1060 entry describes a vulnerability in the NFS Server for Solaris 7, 8, and 9 where remote attackers can cause a denial of service (UFS panic) by sending certain invalid UFS requests that trigger a null dereference. Affected software is the NFS Server on Solaris 7–9; the underlying ...

CVE-2003-1077

Technical details for CVE-2003-1077 are not publicly available in the provided documents; no affected products, vectors, or fixes are disclosed here. Monitor for updates in connected sources.

CVE-2003-1077

Unknown vulnerability in UFS for Solaris 9 for SPARC, with logging enabled, allows local users to cause a denial of service UFS file system hang...

CVE-2003-1077: Undefined Security Weakness

Unknown vulnerability in UFS for Solaris 9 for SPARC, with logging enabled, allows local users to cause a denial of service UFS file system hang...