linux

linux 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

LibTIFF 3.9.4 – Unknown Tag Second Pass Processing Remote Denial of Service

source: https://www.securityfocus.com/bid/41477/info

2010-06-14 Tom Lane dos

UnrealIRCd 3.2.8.1 – Remote Downloader/Execute

#!/usr/bin/perl

2010-06-13 anonymous remote

Linux Kernel 2.6.x – Btrfs Cloned File Security Bypass

source: https://www.securityfocus.com/bid/40241/info

2010-05-18 Dan Rosenberg local

Samba 3.4.7/3.5.1 – Denial of Service

===============================================================================

2010-05-13 laurent gaffie dos

WFTPD Server 3.30 – Multiple Vulnerabilities

#include

2010-05-13 fl0 fl0w remote

MySQL yaSSL (Linux) – SSL Hello Message Buffer Overflow (Metasploit)

##

2010-05-09 Metasploit remote

gdomap – Multiple Local Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/40005/info

2010-05-07 Dan Rosenberg local

PCRE 6.2 – Regular Expression Compiling Workspace Buffer Overflow

source: https://www.securityfocus.com/bid/39974/info

2010-05-06 Michael Santos remote

SpamAssassin spamd – Remote Command Execution (Metasploit)

##

2010-04-30 Metasploit remote

Berlios GPSD – Format String (Metasploit)

##

2010-04-30 Metasploit remote

MySQL – yaSSL CertDecoder::GetName Buffer Overflow (Metasploit)

##

2010-04-30 Metasploit remote

Squid – NTLM (Authenticated) Overflow (Metasploit)

##

2010-04-30 Metasploit remote

Cyrus IMAPD – pop3d popsubfolders USER Buffer Overflow (Metasploit)

##

2010-04-30 Metasploit remote

Samba 2.2.2 < 2.2.6 - 'nttrans' Remote Buffer Overflow (Metasploit) (1)

##

2010-04-28 Metasploit remote

Linux Kernel 2.6.34 – ‘find_keyring_by_name()’ Local Memory Corruption

source: https://www.securityfocus.com/bid/39719/info

2010-04-27 Toshiyuki Okajima dos

memcached 1.4.2 – Memory Consumption Remote Denial of Service

source: https://www.securityfocus.com/bid/39577/info

2010-04-27 fallenpegasus dos

OpenSSL – Remote Denial of Service

#include

2010-04-22 Andi dos

MIT Kerberos 5 – ‘src/kdc/do_tgs_req.c’ Ticket Renewal Double-Free Memory Corruption

source: https://www.securityfocus.com/bid/39599/info

2010-04-20 Joel Johnson remote

ReiserFS (Linux Kernel 2.6.34-rc3 / RedHat / Ubuntu 9.10) – ‘xattr’ Local Privilege Escalation

#!/usr/bin/env python

2010-04-09 Jon Oberheide local

TCPDF 4.5.036/4.9.5 – ‘params’ Attribute Remote Code Execution

source: https://www.securityfocus.com/bid/39315/info

2010-04-08 apoc remote

Virata EmWeb R6.0.1 – Remote Crash

# Exploit Title: Virata EmWeb R6.0.1 Remote Crash Vulnerability

2010-04-06 Jobert Abma dos

OpenDcHub 0.8.1 – Remote Code Execution

#!/usr/bin/python

2010-03-31 Pierre Nogues remote

xwine 1.0.1 – ‘.exe’ Local Crash (PoC)

# xwine v1.0.1 (.exe file) Local Crash PoC Exploit

2010-03-29 JosS dos

UoW IMAPd Server – LSUB Buffer Overflow (Metasploit)

##

2010-03-26 Metasploit remote

tPop3d 1.5.3 – Denial of Service

# Exploit Title: tPop3d 1.5.3 DoS

2010-03-26 OrderZero dos

Mozilla Firefox/Thunderbird/SeaMonkey – Multiple Memory Corruption Vulnerabilities

source: https://www.securityfocus.com/bid/38944/info

2010-03-24 Bob Clary dos

Astaro Security Linux 5 – ‘index.fpl’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38893/info

2010-03-23 Vincent Hautot remote

Mozilla Firefox 3.6 – Image Preloading Content-Policy Check Security Bypass

source: https://www.securityfocus.com/bid/38927/info

2010-03-18 Josh Soref remote

WFTPD 3.3 – Remote REST Denial of Service

# WFTPD 3.3 unhandled exception

2010-03-16 dmnt dos

Microworld eScan AntiVirus < 3.x - Remote Code Execution

#!/usr/bin/env python

2010-03-13 Mohammed almutairi remote

WebKit 1.2.x – Right-to-Left Displayed Text Handling Memory Corruption

source: https://www.securityfocus.com/bid/38689/info

2010-03-11 wushi remote

Kojoney 0.0.4.1 – ‘urllib.urlopen()’ Remote Denial of Service

source: https://www.securityfocus.com/bid/38395/info

2010-02-24 Nicob dos

gitWeb 1.5.2 – Remote Command Execution

# Exploit Title: gitWeb remote command execution

2010-02-18 S2 Crew remote

Wireshark – LWRES Dissector getaddrsbyname_request Buffer Overflow (Metasploit)

##

2010-02-11 Metasploit remote

Accellion Secure File Transfer Appliance – Multiple Command Restriction / Privilege Escalations

source: https://www.securityfocus.com/bid/38176/info

2010-02-10 Tim Brown local

Accellion File Transfer – ‘Appliance web_client_user_guide.html?lang’ Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/38176/info

2010-02-10 Tim Brown remote

Linux Kernel 2.6.18 – ‘move_pages()’ Information Leak

Bug NOT discovered by Marcus Meissner of SuSE security

2010-02-08 spender local

SystemTap 1.0/1.1 – ‘__get_argv()’ / ‘__get_compat_argv()’ Local Memory Corruption

source: https://www.securityfocus.com/bid/38120/info

2010-02-05 Josh Stone local

Samba 3.4.5 – Symlink Directory Traversal

source: https://www.securityfocus.com/bid/38111/info

2010-02-04 kingcope remote

Samba 3.4.5 – Symlink Directory Traversal (Metasploit)

source: https://www.securityfocus.com/bid/38111/info

2010-02-04 kingcope remote

Linux Kernel 2.6.x – KVM ‘pit_ioport_read()’ Local Denial of Service

source: https://www.securityfocus.com/bid/38038/info

2010-02-02 Marcelo Tosatti dos

lighttpd 1.4/1.5 – Slow Request Handling Remote Denial of Service

source: https://www.securityfocus.com/bid/38036/info

2010-02-02 Li Ming dos

Hybserv2 – ‘:help’ Denial of Service

source: https://www.securityfocus.com/bid/38006/info

2010-01-29 Julien Cristau dos

Battery Life Toolkit 1.0.9 – ‘bltk_sudo’ Local Privilege Escalation

source: https://www.securityfocus.com/bid/37996/info

2010-01-28 Matthew Garrett local

Geo++ GNCASTER 1.4.0.7 NMEA-data – Denial of Service

source: https://www.securityfocus.com/bid/40015/info

2010-01-27 RedTeam Pentesting GmbH dos

Geo++ GNCASTER 1.4.0.7 – GET Denial of Service

source: https://www.securityfocus.com/bid/40009/info

2010-01-27 RedTeam Pentesting GmbH dos

PostgreSQL – ‘bitsubstr’ Buffer Overflow

source: https://www.securityfocus.com/bid/37973/info

2010-01-27 Intevydis dos

OpenOffice 3.1 – ‘.slk’ Null Pointer Dereference Remote Denial of Service

source: https://www.securityfocus.com/bid/37857/info

2010-01-19 Hellcode Research dos

SystemTap 1.0 – ‘stat-server’ Arbitrary Command Injection

source: https://www.securityfocus.com/bid/37842/info

2010-01-15 Frank Ch. Eigler remote

OpenOffice 3.1 – ‘.csv’ Remote Denial of Service

source: https://www.securityfocus.com/bid/37807/info

2010-01-14 Hellcode Research dos