Смотрите также связанные темы
01.07.2018 Разработка эксплоитов для Linux. Часть III - переполнение буфера с помощью ret2libc
В данном руководстве будет продемонстрирована эксплуатация переполнения буфера с помощью ret2libc.
04.04.2018 Переполнение буфера: анатомия эксплоита
Взгляд на то, как эксплуатируются уязвимости систем и почему существуют эксплоиты.
12.08.2018 A Security Vulnerability in Solaris 10 involving the sendfilev() system call could result in Denial of Service (DoS) due to System Panic
A security vulnerability in Solaris 10 related to the sendfilev() system call may allow a user who has the ability to create pages that are hosted on a Solaris 10 system using Apache 2.2.x, to create a carefully crafted web page which could cause a system panic resulting in a Denial of Service (DoS) condition.
21.08.2018 За новую веб-атаку, связанную с отравлением буфера обмена, отвечает Flash-ролик
Атака направлена на такую популярную функцию как "копировать/вставить" (copy/paste): при помощи веб-скритов злоумышленники "подселяют" в буфер обмена операционной системы ссылку или ссылки на злонамеренный сайт с размещенным хакерским ПО.
28.08.2018 Covert Channel Security Vulnerability in the Solaris Kernel
A security vulnerability with system calls in the Solaris Kernel may allow two unprivileged local user processes to establish a covert communication channel bypassing system restrictions such as the multi-level security policy found in Solaris Trusted Extensions or the isolation policy implemented using zones(5) or chroot(2).
19.09.2018 Manipulated Tag Files used with Solaris Text Editors May Lead to Execution of Arbitrary Code
A security vulnerability in the Solaris text editors (vi(1), ex(1), vedit(1), view(1), edit(1)), related to the handling of tags (see ctags(1)) may allow a local unprivileged user to execute arbitrary code with the privileges of another user.
16.06.2018 Multiple security vulnerabilities in the Solaris X Server Extensions may lead to a Denial of Service (DoS) condition or allow Execution of Arbitrary Code
Multiple security vulnerabilities in the Solaris X Server Extensions may lead to a Denial of Service (DoS) condition or allow Execution of Arbitrary Code
12.12.2018 A Security Vulnerability in Solaris Secure Shell (SSH) May Expose Some Plain Text From Encrypted Traffic
A security vulnerability in the Solaris Secure Shell (SSH) software (see ssh(1)), when used with CBC-mode ciphers and (SSH protocol version 2), may allow a remote unprivileged user who is able to intercept SSH network traffic to gain access to a portion of plain text information from intercepted traffic which would otherwise be encrypted.
16.12.2018 A Security Vulnerability in the Management of Solaris Kerberos (see kerberos(5)) may Lead to a User Denial of Service (DoS) Attack
A security vulnerability in the management of Solaris Kerberos (see kerberos(5)) credential renewal may allow a local unprivileged user to prevent other users from authenticating to the Kerberos server.
19.12.2018 CVE-2008-5684
Unspecified vulnerability in the X Inter Client Exchange library (aka libICE) in Sun Solaris 8 through 10 and OpenSolaris before snv_85 allows context-dependent attackers to cause a denial of service (application crash), as demonstrated by a port scan that triggers a segmentation violation in the Gnome session manager (aka gnome-session).
|
