jetlib.sec » Tags » null

Feeds

133444 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

160 items tagged "null"

Related tags: proof of concept [+], yourself [+], x 509 [+], issue [+], e zine [+], character certificate [+], certificate [+], null byte [+], null pointer [+], version [+], udp packet [+], socket [+], firefox [+], avahi [+], vulnerabilities [+], txt [+], sendmail [+], multiple [+], mozilla [+], windows [+], server [+], poc [+], opera [+], null pointer dereference [+], mozilla firefox [+], modrdn [+], microsoft [+], freebsd versions [+], freebsd [+], byte [+], bugtraq [+], service vulnerability [+], xitami [+], wrong number [+], stack overflow [+], ssl [+], shellcode [+], server versions [+], s codesys [+], remote [+], refractor [+], reader [+], perl functions [+], perl [+], patch [+], pam [+], overflow [+], optima [+], opera version [+], number [+], null pointers [+], microsoft reader [+], libzip [+], libnids [+], libesmtp [+], kernel version [+], integer overflow [+], index [+], imatix [+], fragment c [+], fragment [+], exploit [+], execve [+], engine versions [+], engine [+], endless loop [+], dereference [+], cyrus imap server [+], cyrus imap [+], attackers [+], apiftp [+], vulnerability [+], denial of service [+], znc [+], x86 linux [+], wireshark [+], windows xp sp3 [+], windows xp [+], unicode string [+], superh [+], stripbytecount [+], shield [+], sh4 [+], session [+], security [+], script kiddies [+], rop [+], quagga [+], public key encryption [+], php 5 [+], persian [+], password [+], pam module [+], numbers stations [+], null sessions [+], null session [+], ntlmssp [+], net [+], mplayer [+], microsoft windows [+], local privilege escalation [+], libtiff [+], libcurl [+], lattice [+], kssl [+], kernel memory [+], kde [+], iridium satellite network [+], hp hash [+], guessable passwords [+], grapheme [+], floating point numbers [+], facebook [+], exp [+], dos [+], dll library [+], curl [+], credit cards [+], bgpd [+], apple mac os x [+], apple mac os [+], anatomy [+], Pentesting [+], null character [+], zeros [+], xor [+], x86 [+], x printing [+], x afp [+], word [+], win [+], todd sabin [+], space labs [+], space [+], setreuid [+], sessions [+], safer use [+], runlevel [+], rpcclient [+], pypam [+], ptr [+], pseudofs [+], privilege escalation vulnerability [+], postgresql [+], php versions [+], password authentication [+], null space [+], null null [+], null characters [+], nss [+], neon [+], nbsp [+], msrpc [+], mitkrb [+], microsoft word [+], los angeles [+], linus [+], libvoikko [+], kdc [+], init [+], infinite supply [+], hashes [+], hacks [+], hackerspace [+], gotchas [+], exploits [+], execution [+], event [+], domain [+], diagnose [+], dev [+], denial [+], computing [+], commotion [+], classic [+], charlie [+], california [+], cain [+], brute force [+], bip bip [+], bip [+], better solution [+], beta [+], authentication [+], admin [+], Release [+], Public [+], Latest [+], Hackerspaces [+], BackTrack4 [+], BackTrack [+], pointer [+], validation [+], php [+], linux kernel [+], linux [+], character [+], openldap [+], kernel [+]

• May 20, 2012
• 12:22

  PHP 5.4.3 Null Pointer Dereference

   » ‎ Packet Storm Security Exploits
  PHP versions 5.4.3 and below wddx_serialize_* / stream_bucket_* variant object null pointer dereference exploit.

  Tags:  null pointer php null-pointer php-versions  

• May 04, 2012
• 5:00

  From LOW to PWNED [5] Honorable Mention: Null Sessions

   » ‎ Carnal0wnage
  Post [5] Honorable Mention: Null Sessions
  
  Null sessions are old school. they  used to be useful for pretty much every host in a domain.  Unfortunately, I very rarely run into an environment where all workstations let you connect anonymously AND get data.
  
  Where they can come in useful is
  
  

  • Against mis-configured servers
  • Against domain controllers to pull info

  
  Low? actually a medium...
  
  
  More than once I've had a PT where a master_browser was exposed to the Internet.  We were able to connect to the server using rpcclient and enumerate users.  After that we had a full list of the users in the domain to conduct external brute forcing attacks with.
  
  If you like pretty pictures, it kinda looks like this, there are command line utilities as well...
  
  Cain uses null sessions by default to try to pull information.  On modern systems this will fail.
  
  
  But domain controllers/master_browsers do allow this, so if you find yourself in the position to be able to speak with one you can a list of users for the domain
  
  
  
  
  You can then take that list of users and do brute force attacks against various services.  I rarely don't find at least one username/username in an environment.
  
  
  

  Tags:  nbsp null domain cain null-sessions brute-force rpcclient Pentesting  

• May 03, 2012
• 8:01

  Hackerspace intros: Null Space Labs in Los Angeles California

   » ‎ Hack a Day
  [Charlie] from Null Space Labs in Los Angeles, California sent in this fun little video as an introduction to their hackerspace. Going a bit  askew from the traditional “walk through” method of a tour, they decide to first attempt semi-successfully to fly a quadcopter, film some police commotion, then show off some projects in progress. [...]

  Tags:  space null hackerspace charlie los-angeles california space-labs null-space commotion Hackerspaces  

• April 13, 2012
• 0:00

  Vuln: PHP 'tidy_diagnose()' NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP 'tidy_diagnose()' NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  null diagnose php service-vulnerability null-pointer denial-of-service  

• 0:00

  Vuln: PHP Prior to 5.3.7 Multiple NULL Pointer Dereference Denial Of Service Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  PHP Prior to 5.3.7 Multiple NULL Pointer Dereference Denial Of Service Vulnerabilities

  Tags:  null multiple php null-pointer denial-of-service vulnerabilities  

• April 12, 2012
• 0:00

  Vuln: PHP Prior to 5.3.7 Multiple NULL Pointer Dereference Denial Of Service Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  PHP Prior to 5.3.7 Multiple NULL Pointer Dereference Denial Of Service Vulnerabilities

  Tags:  null multiple php null-pointer denial-of-service vulnerabilities  

• 0:00

  Vuln: PHP NULL Character Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP NULL Character Security Bypass Vulnerability

  Tags:  character null php null-character vulnerability  

• March 23, 2012
• 0:00

  Vuln: Cyrus IMAP Server 'index_get_ids()' NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Cyrus IMAP Server 'index_get_ids()' NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  server null index cyrus-imap cyrus-imap-server service-vulnerability null-pointer  

• March 14, 2012
• 0:00

  Vuln: Linux Kernel CVE-2011-4110 NULL Pointer Dereference Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CVE-2011-4110 NULL Pointer Dereference Denial of Service Vulnerability

  Tags:  null kernel linux service-vulnerability null-pointer linux-kernel  

• March 12, 2012
• 0:00

  Vuln: PyPAM Password Null Byte Handling Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PyPAM Password Null Byte Handling Dereference Denial Of Service Vulnerability

  Tags:  null pypam password null-byte service-vulnerability denial-of-service  

• February 15, 2012
• 0:00

  Vuln: Linux Kernel CVE-2011-4110 NULL Pointer Dereference Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CVE-2011-4110 NULL Pointer Dereference Denial of Service Vulnerability

  Tags:  null kernel linux service-vulnerability null-pointer linux-kernel  

• February 08, 2012
• 4:12

  Mozilla Firefox 10.0 Local Null Byte Bypass File Check Execution

   » ‎ Packet Storm Security Exploits
  Mozilla Firefox versions 10.0 and below local null byte bypass file check execution exploit.

  Tags:  null mozilla firefox mozilla-firefox execution  

• February 06, 2012
• 0:00

  Vuln: PHP NULL Character Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP NULL Character Security Bypass Vulnerability

  Tags:  character null php null-character vulnerability  

• January 25, 2012
• 8:38

  Facebook Applications Null Byte Injection

   » ‎ Packet Storm Security Exploits
  Multiple Facebook applications suffer from a null byte SQL injection vulnerability.

  Tags:  null facebook byte vulnerability  

• 8:38

  Facebook Applications Null Byte Injection

   » ‎ Packet Storm Security Misc. Files
  Multiple Facebook applications suffer from a null byte SQL injection vulnerability.

  Tags:  null facebook byte vulnerability  

• January 23, 2012
• 0:00

  Vuln: Linux Kernel CVE-2011-4110 NULL Pointer Dereference Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CVE-2011-4110 NULL Pointer Dereference Denial of Service Vulnerability

  Tags:  null kernel linux service-vulnerability null-pointer linux-kernel  

• January 20, 2012
• 14:09

  Computing with the command line

   » ‎ Hack a Day
  Here’s something we thought we would never see: computing with just pipes, /dev/zero, and /dev/null. As a thought experiment, [Linus] imagined a null byte represented an electron. /dev/zero would have an infinite supply of electrons and /dev/null would make a wonderful positive power supply. With a very short program (named mosfet.c), [Linus] can use Linux pipes [...]

  Tags:  null computing dev linus null-byte infinite-supply classic hacks  

• January 15, 2012
• 3:11

  PHP 5.3.8 NULL Pointer Dereference

   » ‎ Packet Storm Security Exploits
  PHP version 5.3.8 suffers from multiple NULL pointer dereference vulnerabilities.

  Tags:  null pointer php null-pointer  

• 3:11

  PHP 5.3.8 NULL Pointer Dereference

   » ‎ Packet Storm Security Recent Files
  PHP version 5.3.8 suffers from multiple NULL pointer dereference vulnerabilities.

  Tags:  null pointer php null-pointer  

• 3:11

  PHP 5.3.8 NULL Pointer Dereference

   » ‎ Packet Storm Security Misc. Files
  PHP version 5.3.8 suffers from multiple NULL pointer dereference vulnerabilities.

  Tags:  null pointer php null-pointer  

• January 13, 2012
• 0:00

  Vuln: Linux Kernel CVE-2011-4110 NULL Pointer Dereference Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CVE-2011-4110 NULL Pointer Dereference Denial of Service Vulnerability

  Tags:  null kernel linux service-vulnerability null-pointer linux-kernel  

• January 11, 2012
• 0:00

  Vuln: Linux Kernel CVE-2011-4110 NULL Pointer Dereference Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CVE-2011-4110 NULL Pointer Dereference Denial of Service Vulnerability

  Tags:  null kernel linux service-vulnerability null-pointer linux-kernel  

• January 09, 2012
• 0:00

  Vuln: Linux Kernel CVE-2011-4110 NULL Pointer Dereference Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CVE-2011-4110 NULL Pointer Dereference Denial of Service Vulnerability

  Tags:  null kernel linux service-vulnerability null-pointer linux-kernel  

• December 30, 2011
• 9:23

  Microsoft ASP.NET Forms Authentication Bypass

   » ‎ Packet Storm Security Recent Files
  Microsoft ASP.NET Forms suffers from a null byte termination authentication bypass vulnerability that exists in the CopyStringToUnAlingnedBuffer() function of the webengine4.dll library used by the .NET framework. The unicode string length is determined using the lstrlenW function. The lstrlenW function returns the length of the string, in characters not including the terminating null character. If the unicode string containing a null byte is passed, its length is incorrectly calculated, so only characters before the null byte are copied into the buffer.

  Tags:  null byte net null-byte dll-library unicode-string  

• 9:23

  Microsoft ASP.NET Forms Authentication Bypass

   » ‎ Packet Storm Security Misc. Files
  Microsoft ASP.NET Forms suffers from a null byte termination authentication bypass vulnerability that exists in the CopyStringToUnAlingnedBuffer() function of the webengine4.dll library used by the .NET framework. The unicode string length is determined using the lstrlenW function. The lstrlenW function returns the length of the string, in characters not including the terminating null character. If the unicode string containing a null byte is passed, its length is incorrectly calculated, so only characters before the null byte are copied into the buffer.

  Tags:  null byte net null-byte dll-library unicode-string  

• December 12, 2011
• 0:00

  Vuln: Linux Kernel CVE-2011-4110 NULL Pointer Dereference Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CVE-2011-4110 NULL Pointer Dereference Denial of Service Vulnerability

  Tags:  null kernel linux service-vulnerability null-pointer linux-kernel  

• 0:00

  Vuln: yubico-pam NULL Password Authentication Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  yubico-pam NULL Password Authentication Bypass Vulnerability

  Tags:  authentication null password password-authentication vulnerability pam  

• December 06, 2011
• 13:00

  Bugtraq: MITKRB5-SA-2011-007 KDC null pointer dereference in TGS handling [CVE-2011-1530]

   » ‎ SecurityFocus Vulnerabilities
  MITKRB5-SA-2011-007 KDC null pointer dereference in TGS handling [CVE-2011-1530]

  Tags:  null kdc mitkrb null-pointer-dereference bugtraq  

• 0:00

  Vuln: Linux Kernel CVE-2011-4110 NULL Pointer Dereference Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CVE-2011-4110 NULL Pointer Dereference Denial of Service Vulnerability

  Tags:  null kernel linux service-vulnerability null-pointer linux-kernel  

• December 02, 2011
• 0:00

  Vuln: Cyrus IMAP Server 'index_get_ids()' NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Cyrus IMAP Server 'index_get_ids()' NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  server null index cyrus-imap cyrus-imap-server service-vulnerability null-pointer  

• December 01, 2011
• 0:00

  Vuln: Cyrus IMAP Server 'index_get_ids()' NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Cyrus IMAP Server 'index_get_ids()' NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  server null index cyrus-imap cyrus-imap-server service-vulnerability null-pointer  

• November 29, 2011
• 16:51

  3S CoDeSys 3.4 SP4 Patch 2 Overflows / NULL Pointers

   » ‎ Packet Storm Security Exploits
  3S CoDeSys versions 3.4 SP4 Patch 2 and below suffer from integer overflow, stack overflow, folder creation and multiple NULL pointer vulnerabilities.

  Tags:  null overflow patch s-codesys stack-overflow null-pointers integer-overflow  

• 16:51

  3S CoDeSys 3.4 SP4 Patch 2 Overflows / NULL Pointers

   » ‎ Packet Storm Security Recent Files
  3S CoDeSys versions 3.4 SP4 Patch 2 and below suffer from integer overflow, stack overflow, folder creation and multiple NULL pointer vulnerabilities.

  Tags:  null overflow patch s-codesys stack-overflow null-pointers integer-overflow  

• 16:51

  3S CoDeSys 3.4 SP4 Patch 2 Overflows / NULL Pointers

   » ‎ Packet Storm Security Misc. Files
  3S CoDeSys versions 3.4 SP4 Patch 2 and below suffer from integer overflow, stack overflow, folder creation and multiple NULL pointer vulnerabilities.

  Tags:  null overflow patch s-codesys stack-overflow null-pointers integer-overflow  

• 16:38

  Go Null Yourself E-Zine Issue 06

   » ‎ Packet Storm Security Recent Files
  Go Null Yourself E-zine Issue 6 - Topics in this issue include Floating Point Numbers Suck, How Skynet Works, Defeating NX/DEP With return-to-libc and ROP, and more.

  Tags:  null yourself issue floating-point-numbers e-zine rop  

• 16:38

  Go Null Yourself E-Zine Issue 06

   » ‎ Packet Storm Security Misc. Files
  Go Null Yourself E-zine Issue 6 - Topics in this issue include Floating Point Numbers Suck, How Skynet Works, Defeating NX/DEP With return-to-libc and ROP, and more.

  Tags:  null yourself issue floating-point-numbers e-zine rop  

• 0:00

  Vuln: Linux Kernel CVE-2011-4110 NULL Pointer Dereference Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CVE-2011-4110 NULL Pointer Dereference Denial of Service Vulnerability

  Tags:  null kernel linux service-vulnerability null-pointer linux-kernel  

• November 25, 2011
• 0:00

  Vuln: Linux Kernel CVE-2011-4110 NULL Pointer Dereference Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel CVE-2011-4110 NULL Pointer Dereference Denial of Service Vulnerability

  Tags:  null kernel linux service-vulnerability null-pointer linux-kernel  

• November 24, 2011
• 14:00

  [linux/x86] - Linux/SuperH - sh4 - setuid(0) ; execve("/bin/sh", NULL, NULL) - 27 bytes

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [linux/x86] - Linux/SuperH - sh4 - setuid(0) ; execve("/bin/sh", NULL, NULL) - 27 bytes

  Tags:  null linux superh x86-linux execve sh4  

• November 23, 2011
• 14:00

  [linux/x86] - Linux/SuperH - sh4 - setuid(0) ; execve("/bin/sh", NULL, NULL) - 27 bytes

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [linux/x86] - Linux/SuperH - sh4 - setuid(0) ; execve("/bin/sh", NULL, NULL) - 27 bytes

  Tags:  null linux superh x86-linux execve sh4  

• November 14, 2011
• 7:42

  Optima APIFTP 1.5.2.13 NULL Pointer

   » ‎ Packet Storm Security Exploits
  Optima APIFTP server versions 1.5.2.13 and below suffer from endless loop and NULL pointer vulnerabilities.

  Tags:  null optima apiftp null-pointer server-versions endless-loop  

• 7:42

  Optima APIFTP 1.5.2.13 NULL Pointer

   » ‎ Packet Storm Security Recent Files
  Optima APIFTP server versions 1.5.2.13 and below suffer from endless loop and NULL pointer vulnerabilities.

  Tags:  null optima apiftp null-pointer server-versions endless-loop  

• 7:42

  Optima APIFTP 1.5.2.13 NULL Pointer

   » ‎ Packet Storm Security Misc. Files
  Optima APIFTP server versions 1.5.2.13 and below suffer from endless loop and NULL pointer vulnerabilities.

  Tags:  null optima apiftp null-pointer server-versions endless-loop  

• 7:34

  Mozilla Firefox 8.0 Null Pointer Dereference

   » ‎ Packet Storm Security Exploits
  Mozilla Firefox version 8.0 null pointer dereference proof of concept exploit.

  Tags:  null mozilla firefox null-pointer mozilla-firefox proof-of-concept  

• 7:34

  Mozilla Firefox 8.0 Null Pointer Dereference

   » ‎ Packet Storm Security Recent Files
  Mozilla Firefox version 8.0 null pointer dereference proof of concept exploit.

  Tags:  null mozilla firefox null-pointer mozilla-firefox proof-of-concept  

• 7:34

  Mozilla Firefox 8.0 Null Pointer Dereference

   » ‎ Packet Storm Security Misc. Files
  Mozilla Firefox version 8.0 null pointer dereference proof of concept exploit.

  Tags:  null mozilla firefox null-pointer mozilla-firefox proof-of-concept  

• November 13, 2011
• 21:00

  [dos / poc] - Firefox 8.0 Null Pointer Dereference PoC

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [dos / poc] - Firefox 8.0 Null Pointer Dereference PoC

  Tags:  dos null poc null-pointer firefox  

• 14:00

  [dos / poc] - Firefox 8.0 Null Pointer Dereference PoC

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [dos / poc] - Firefox 8.0 Null Pointer Dereference PoC

  Tags:  dos null poc null-pointer firefox  

• November 11, 2011
• 21:43

  [Slides] Null Sessions, MSRPC, and Windows 2000

   » ‎ SecDocs
  Authors: Todd Sabin
  Tags: Windows
  Event: Black Hat Windows Security 2001
  

  Tags:  null sessions windows todd-sabin null-sessions msrpc  

• November 03, 2011
• 0:00

  Vuln: PHP Prior to 5.3.7 Multiple NULL Pointer Dereference Denial Of Service Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  PHP Prior to 5.3.7 Multiple NULL Pointer Dereference Denial Of Service Vulnerabilities

  Tags:  null multiple php null-pointer denial-of-service vulnerabilities  

• November 01, 2011
• 0:00

  Vuln: KDE KSSL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  KDE KSSL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

  Tags:  kssl null kde null-character vulnerability  

• October 24, 2011
• 0:00

  Vuln: Avahi 'avahi-core/socket.c' NULL UDP Packet Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Avahi 'avahi-core/socket.c' NULL UDP Packet Denial Of Service Vulnerability

  Tags:  null socket avahi service-vulnerability denial-of-service udp-packet  

• October 18, 2011
• 21:00

  [dos / poc] - MS11-077 Win32k Null Pointer De-reference Vulnerability POC

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [dos / poc] - MS11-077 Win32k Null Pointer De-reference Vulnerability POC

  Tags:  null poc win null-pointer vulnerability  

• 0:00

  Vuln: PHP Prior to 5.3.7 Multiple NULL Pointer Dereference Denial Of Service Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  PHP Prior to 5.3.7 Multiple NULL Pointer Dereference Denial Of Service Vulnerabilities

  Tags:  null multiple php null-pointer denial-of-service vulnerabilities  

• September 26, 2011
• 0:00

  Vuln: OpenLDAP 'modrdn' NULL OldDN Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  OpenLDAP 'modrdn' NULL OldDN Remote Denial of Service Vulnerability

  Tags:  null modrdn openldap service-vulnerability denial-of-service  

• September 09, 2011
• 0:00

  Vuln: PHP Prior to 5.3.7 Multiple NULL Pointer Dereference Denial Of Service Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  PHP Prior to 5.3.7 Multiple NULL Pointer Dereference Denial Of Service Vulnerabilities

  Tags:  null multiple php null-pointer denial-of-service vulnerabilities  

• August 22, 2011
• 15:00

  Bugtraq: PHP 5.3.6 multiple null pointer dereference

   » ‎ SecurityFocus Vulnerabilities
  PHP 5.3.6 multiple null pointer dereference

  Tags:  null pointer php null-pointer php-5 bugtraq  

• August 19, 2011
• 7:27

  PHP 5.3.6 Null Pointer Dereference

   » ‎ Packet Storm Security Exploits
  PHP version 5.3.6 suffers from a null pointer dereference vulnerability.

  Tags:  null pointer php null-pointer vulnerability  

• 7:27

  PHP 5.3.6 Null Pointer Dereference

   » ‎ Packet Storm Security Recent Files
  PHP version 5.3.6 suffers from a null pointer dereference vulnerability.

  Tags:  null pointer php null-pointer vulnerability  

• 7:27

  PHP 5.3.6 Null Pointer Dereference

   » ‎ Packet Storm Security Misc. Files
  PHP version 5.3.6 suffers from a null pointer dereference vulnerability.

  Tags:  null pointer php null-pointer vulnerability  

• July 25, 2011
• 7:25

  Go Null Yourself E-Zine Issue 05

   » ‎ Packet Storm Security Recent Files
  Go Null Yourself E-zine Issue 5 - Topics in this issue include Public-Key Encryption and RSA, Iridium Satellite Network, An Introduction to x86 NASM, Hacking 15A Announcements, and more.

  Tags:  null yourself issue iridium-satellite-network public-key-encryption e-zine  

• 7:25

  Go Null Yourself E-Zine Issue 05

   » ‎ Packet Storm Security Misc. Files
  Go Null Yourself E-zine Issue 5 - Topics in this issue include Public-Key Encryption and RSA, Iridium Satellite Network, An Introduction to x86 NASM, Hacking 15A Announcements, and more.

  Tags:  null yourself issue iridium-satellite-network public-key-encryption e-zine  

• June 27, 2011
• 0:00

  Vuln: cURL / libcURL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  cURL / libcURL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

  Tags:  null libcurl curl null-character vulnerability validation  

• June 23, 2011
• 0:00

  Vuln: OpenLDAP X.509 Certificate NULL Character Certificate Validation Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  OpenLDAP X.509 Certificate NULL Character Certificate Validation Security Bypass Vulnerability

  Tags:  null certificate openldap character-certificate null-character x-509  

• June 14, 2011
• 0:00

  Vuln: libvoikko Null Characters Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libvoikko Null Characters Denial of Service Vulnerability

  Tags:  null libvoikko denial service-vulnerability null-characters denial-of-service  

• June 04, 2011
• 8:57

  iMatix Xitami 5.0a0 NULL Pointer

   » ‎ Packet Storm Security Exploits
  iMatix Xitami versions 5.0a0 and below suffer from a NULL pointer vulnerability.

  Tags:  null imatix xitami null-pointer vulnerability  

• 8:57

  iMatix Xitami 5.0a0 NULL Pointer

   » ‎ Packet Storm Security Recent Files
  iMatix Xitami versions 5.0a0 and below suffer from a NULL pointer vulnerability.

  Tags:  null imatix xitami null-pointer vulnerability  

• 8:57

  iMatix Xitami 5.0a0 NULL Pointer

   » ‎ Packet Storm Security Misc. Files
  iMatix Xitami versions 5.0a0 and below suffer from a NULL pointer vulnerability.

  Tags:  null imatix xitami null-pointer vulnerability  

• May 19, 2011
• 0:00

  Vuln: Avahi 'avahi-core/socket.c' NULL UDP Packet Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Avahi 'avahi-core/socket.c' NULL UDP Packet Denial Of Service Vulnerability

  Tags:  null socket avahi service-vulnerability denial-of-service udp-packet  

• May 16, 2011
• 19:06

  Linux Kernel 2.6.38 Remote NULL Pointer Dereference

   » ‎ Packet Storm Security Advisories
  Linux Kernel version 2.6.38 suffers from a remote NULL pointer dereference.

  Tags:  version null remote null-pointer linux-kernel kernel-version  

• 19:06

  Linux Kernel 2.6.38 Remote NULL Pointer Dereference

   » ‎ Packet Storm Security Recent Files
  Linux Kernel version 2.6.38 suffers from a remote NULL pointer dereference.

  Tags:  version null remote null-pointer linux-kernel kernel-version  

• 19:06

  Linux Kernel 2.6.38 Remote NULL Pointer Dereference

   » ‎ Packet Storm Security Misc. Files
  Linux Kernel version 2.6.38 suffers from a remote NULL pointer dereference.

  Tags:  version null remote null-pointer linux-kernel kernel-version  

• May 09, 2011
• 15:28

  Perl Null Pointer Dereference

   » ‎ Packet Storm Security Advisories
  When given a wrong number of arguments, a number of perl functions will attempt to read memory from an unmapped location, resulting in a deterministic crash.

  Tags:  null perl number null-pointer-dereference perl-functions wrong-number  

• 15:28

  Perl Null Pointer Dereference

   » ‎ Packet Storm Security Recent Files
  When given a wrong number of arguments, a number of perl functions will attempt to read memory from an unmapped location, resulting in a deterministic crash.

  Tags:  null perl number null-pointer-dereference perl-functions wrong-number  

• 15:28

  Perl Null Pointer Dereference

   » ‎ Packet Storm Security Misc. Files
  When given a wrong number of arguments, a number of perl functions will attempt to read memory from an unmapped location, resulting in a deterministic crash.

  Tags:  null perl number null-pointer-dereference perl-functions wrong-number  

• May 06, 2011
• 15:01

  Anatomy Of A NULL Session Attack

   » ‎ Packet Storm Security Recent Files
  Whitepaper discussing the anatomy of a null session attack, how it works, and how to prevent it from happening to you. Written in Persian.

  Tags:  anatomy null session null-session persian  

• 15:01

  Anatomy Of A NULL Session Attack

   » ‎ Packet Storm Security Misc. Files
  Whitepaper discussing the anatomy of a null session attack, how it works, and how to prevent it from happening to you. Written in Persian.

  Tags:  anatomy null session null-session persian  

• April 21, 2011
• 0:00

  Vuln: OpenLDAP 'modrdn' NULL OldDN Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  OpenLDAP 'modrdn' NULL OldDN Remote Denial of Service Vulnerability

  Tags:  null modrdn openldap service-vulnerability denial-of-service  

• April 20, 2011
• 0:00

  Vuln: Mutt NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Mutt NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

  Tags:  null ssl security null-character vulnerability validation  

• April 19, 2011
• 0:00

  Vuln: Wireshark NTLMSSP NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Wireshark NTLMSSP NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  null ntlmssp wireshark service-vulnerability null-pointer denial-of-service  

• April 18, 2011
• 12:22

  Go Null Yourself E-Zine Issue 04

   » ‎ Packet Storm Security Recent Files
  Go Null Yourself E-zine Issue 4 - Topics in this issue include Lattice-Based Cryptography, The Tech Behind Credit Cards, MapReduce Part 2, 303-833-00xx Scan, and more.

  Tags:  null yourself issue e-zine lattice credit-cards  

• 12:22

  Go Null Yourself E-Zine Issue 04

   » ‎ Packet Storm Security Misc. Files
  Go Null Yourself E-zine Issue 4 - Topics in this issue include Lattice-Based Cryptography, The Tech Behind Credit Cards, MapReduce Part 2, 303-833-00xx Scan, and more.

  Tags:  null yourself issue e-zine lattice credit-cards  

• April 12, 2011
• 0:00

  Vuln: Avahi 'avahi-core/socket.c' NULL UDP Packet Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Avahi 'avahi-core/socket.c' NULL UDP Packet Denial Of Service Vulnerability

  Tags:  null socket avahi service-vulnerability denial-of-service udp-packet  

• April 11, 2011
• 19:23

  Microsoft Reader 2.1.1.3143 NULL Byte

   » ‎ Packet Storm Security Exploits
  Microsoft Reader versions 2.1.1.3143 and below suffer a vulnerability where it is possible to write a NULL byte in an arbitrary location. Proof of concept code included.

  Tags:  null microsoft reader null-byte proof-of-concept microsoft-reader  

• 19:23

  Microsoft Reader 2.1.1.3143 NULL Byte

   » ‎ Packet Storm Security Recent Files
  Microsoft Reader versions 2.1.1.3143 and below suffer a vulnerability where it is possible to write a NULL byte in an arbitrary location. Proof of concept code included.

  Tags:  null microsoft reader null-byte proof-of-concept microsoft-reader  

• 19:23

  Microsoft Reader 2.1.1.3143 NULL Byte

   » ‎ Packet Storm Security Misc. Files
  Microsoft Reader versions 2.1.1.3143 and below suffer a vulnerability where it is possible to write a NULL byte in an arbitrary location. Proof of concept code included.

  Tags:  null microsoft reader null-byte proof-of-concept microsoft-reader  

• April 04, 2011
• 0:00

  Vuln: Sendmail NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Sendmail NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

  Tags:  character null sendmail null-character vulnerability validation  

• March 31, 2011
• 0:00

  Vuln: OpenLDAP 'modrdn' NULL OldDN Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  OpenLDAP 'modrdn' NULL OldDN Remote Denial of Service Vulnerability

  Tags:  null modrdn openldap service-vulnerability denial-of-service  

• March 30, 2011
• 0:00

  Vuln: OpenLDAP 'modrdn' NULL OldDN Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  OpenLDAP 'modrdn' NULL OldDN Remote Denial of Service Vulnerability

  Tags:  null modrdn openldap service-vulnerability denial-of-service  

• March 18, 2011
• 8:54

  libzip 0.9.3 NULL Pointer Dereference

   » ‎ Packet Storm Security Exploits
  libzip version 0.9.3 allows remote and local attackers to trigger a denial of service condition via a null pointer dereference if ZIP_FL_UNCHANGED flag is set.

  Tags:  null libzip pointer null-pointer denial-of-service attackers  

• 8:54

  libzip 0.9.3 NULL Pointer Dereference

   » ‎ Packet Storm Security Recent Files
  libzip version 0.9.3 allows remote and local attackers to trigger a denial of service condition via a null pointer dereference if ZIP_FL_UNCHANGED flag is set.

  Tags:  null libzip pointer null-pointer denial-of-service attackers  

• 8:54

  libzip 0.9.3 NULL Pointer Dereference

   » ‎ Packet Storm Security Misc. Files
  libzip version 0.9.3 allows remote and local attackers to trigger a denial of service condition via a null pointer dereference if ZIP_FL_UNCHANGED flag is set.

  Tags:  null libzip pointer null-pointer denial-of-service attackers  

• March 16, 2011
• 0:00

  Vuln: Linux Kernel 'io_submit_one()' NULL Pointer Dereference Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel 'io_submit_one()' NULL Pointer Dereference Denial of Service Vulnerability

  Tags:  null kernel linux service-vulnerability null-pointer linux-kernel  

• March 15, 2011
• 19:35

  Opera 11.01 NULL Pointer Dereference

   » ‎ Packet Storm Security Exploits
  Opera version 11.01 NULL pointer dereference exploit.

  Tags:  version null opera null-pointer opera-version  

• 19:35

  Opera 11.01 NULL Pointer Dereference

   » ‎ Packet Storm Security Recent Files
  Opera version 11.01 NULL pointer dereference exploit.

  Tags:  version null opera null-pointer opera-version  

• 19:35

  Opera 11.01 NULL Pointer Dereference

   » ‎ Packet Storm Security Misc. Files
  Opera version 11.01 NULL pointer dereference exploit.

  Tags:  version null opera null-pointer opera-version  

• 15:00

  [dos / poc] - Opera 11.01 NULL PTR Derefernce

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [dos / poc] - Opera 11.01 NULL PTR Derefernce

  Tags:  poc null opera ptr  

• 0:00

  Vuln: LibTIFF 'td_stripbytecount' NULL Pointer Dereference Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  LibTIFF 'td_stripbytecount' NULL Pointer Dereference Remote Denial of Service Vulnerability

  Tags:  libtiff null stripbytecount service-vulnerability null-pointer denial-of-service  

• March 11, 2011
• 0:00

  Vuln: Wireshark NTLMSSP NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Wireshark NTLMSSP NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  null ntlmssp wireshark service-vulnerability null-pointer denial-of-service  

• March 04, 2011
• 0:00

  Vuln: Linux Kernel 'dns_key.c' NULL Pointer Dereference Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel 'dns_key.c' NULL Pointer Dereference Denial of Service Vulnerability

  Tags:  null kernel linux service-vulnerability null-pointer linux-kernel  

• March 03, 2011
• 0:00

  Vuln: Avahi 'avahi-core/socket.c' NULL UDP Packet Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Avahi 'avahi-core/socket.c' NULL UDP Packet Denial Of Service Vulnerability

  Tags:  null socket avahi service-vulnerability denial-of-service udp-packet  

• February 28, 2011
• 0:00

  Vuln: Avahi 'avahi-core/socket.c' NULL UDP Packet Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Avahi 'avahi-core/socket.c' NULL UDP Packet Denial Of Service Vulnerability

  Tags:  null socket avahi service-vulnerability denial-of-service udp-packet  

• February 26, 2011
• 8:37

  Refractor 2 Engine NULL Pointer Dereference

   » ‎ Packet Storm Security Exploits
  The Refractor 2 engine versions 1.50 and below suffer from a NULL pointer dereference vulnerability. Games such as Battlefield 2 and Battlefield 2142 are affected. Proof of concept code included.

  Tags:  engine null refractor null-pointer engine-versions proof-of-concept  

• 8:37

  Refractor 2 Engine NULL Pointer Dereference

   » ‎ Packet Storm Security Recent Files
  The Refractor 2 engine versions 1.50 and below suffer from a NULL pointer dereference vulnerability. Games such as Battlefield 2 and Battlefield 2142 are affected. Proof of concept code included.

  Tags:  engine null refractor null-pointer engine-versions proof-of-concept  

• 8:37

  Refractor 2 Engine NULL Pointer Dereference

   » ‎ Packet Storm Security Misc. Files
  The Refractor 2 engine versions 1.50 and below suffer from a NULL pointer dereference vulnerability. Games such as Battlefield 2 and Battlefield 2142 are affected. Proof of concept code included.

  Tags:  engine null refractor null-pointer engine-versions proof-of-concept  

• February 24, 2011
• 0:00

  Vuln: Avahi 'avahi-core/socket.c' NULL UDP Packet Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Avahi 'avahi-core/socket.c' NULL UDP Packet Denial Of Service Vulnerability

  Tags:  null socket avahi service-vulnerability denial-of-service udp-packet  

• February 18, 2011
• 8:00

  Bugtraq: Re: PHP 5.3.5 grapheme_extract() NULL Pointer Dereference

   » ‎ SecurityFocus Vulnerabilities
  Re: PHP 5.3.5 grapheme_extract() NULL Pointer Dereference

  Tags:  bugtraq null grapheme null-pointer  

• February 17, 2011
• 9:00

  Bugtraq: PHP 5.3.5 grapheme_extract() NULL Pointer Dereference

   » ‎ SecurityFocus Vulnerabilities
  PHP 5.3.5 grapheme_extract() NULL Pointer Dereference

  Tags:  null grapheme null-pointer php-5 bugtraq  

• February 16, 2011
• 0:00

  Vuln: Sendmail NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Sendmail NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

  Tags:  character null sendmail null-character vulnerability validation  

• January 28, 2011
• 0:00

  Vuln: FreeBSD NULL Pointer Dereference Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  FreeBSD NULL Pointer Dereference Local Denial of Service Vulnerability

  Tags:  null pointer freebsd service-vulnerability null-pointer denial-of-service  

• January 17, 2011
• 0:00

  Vuln: OpenLDAP X.509 Certificate NULL Character Certificate Validation Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  OpenLDAP X.509 Certificate NULL Character Certificate Validation Security Bypass Vulnerability

  Tags:  null certificate openldap character-certificate null-character x-509  

• January 12, 2011
• 20:06

  pam_shield Null Routing PAM Module 0.9.5

   » ‎ Packet Storm Security Recent Files
  pam_shield is a PAM module that uses null-routing or iptables to lock out script kiddies that probe your computer for open logins or easy guessable passwords. pam_shield is meant as an aid to protect public computers on the Internet.

  Tags:  null pam shield pam-module guessable-passwords script-kiddies  

• 20:06

  pam_shield Null Routing PAM Module 0.9.5

   » ‎ Packet Storm Security Misc. Files
  pam_shield is a PAM module that uses null-routing or iptables to lock out script kiddies that probe your computer for open logins or easy guessable passwords. pam_shield is meant as an aid to protect public computers on the Internet.

  Tags:  null pam shield pam-module guessable-passwords script-kiddies  

• 0:00

  Vuln: Bip `bip_on_event()` NULL Pointer Dereference Remote Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Bip `bip_on_event()` NULL Pointer Dereference Remote Denial Of Service Vulnerability

  Tags:  bip null event bip-bip service-vulnerability null-pointer  

• January 11, 2011
• 20:29

  Go Null Yourself E-Zine Issue 03

   » ‎ Packet Storm Security Recent Files
  Go Null Yourself E-zine Issue 3 - Topics in this issue include HP Hash Cracking with MapReduce, Port Knocking Primer, Abusing phpBB's Tell-A-Friend, Decoding Trillian Password Files, Numbers Stations FOIA, and more.

  Tags:  null yourself issue hp-hash numbers-stations e-zine  

• 20:29

  Go Null Yourself E-Zine Issue 03

   » ‎ Packet Storm Security Misc. Files
  Go Null Yourself E-zine Issue 3 - Topics in this issue include HP Hash Cracking with MapReduce, Port Knocking Primer, Abusing phpBB's Tell-A-Friend, Decoding Trillian Password Files, Numbers Stations FOIA, and more.

  Tags:  null yourself issue hp-hash numbers-stations e-zine  

• December 25, 2010
• 9:56

  Windows XP SP3 EN Null-Free Connect Back Shellcode

   » ‎ Packet Storm Security Recent Files
  228 bytes small Microsoft Windows XP SP3 EN null-free connect-back shellcode.

  Tags:  null shellcode windows windows-xp-sp3 microsoft-windows windows-xp  

• 9:56

  Windows XP SP3 EN Null-Free Connect Back Shellcode

   » ‎ Packet Storm Security Misc. Files
  228 bytes small Microsoft Windows XP SP3 EN null-free connect-back shellcode.

  Tags:  null shellcode windows windows-xp-sp3 microsoft-windows windows-xp  

• December 06, 2010
• 0:00

  Vuln: Quagga bgpd Null Pointer Deference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Quagga bgpd Null Pointer Deference Denial Of Service Vulnerability

  Tags:  null quagga bgpd service-vulnerability null-pointer denial-of-service  

• November 12, 2010
• 0:00

  Vuln: Apple Mac OS X Printing NULL Pointer Dereference Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apple Mac OS X Printing NULL Pointer Dereference Denial of Service Vulnerability

  Tags:  null dereference pointer x-printing apple-mac-os apple-mac-os-x service-vulnerability  

• 0:00

  Vuln: Apple Mac OS X AFP Server NULL Pointer Dereference Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apple Mac OS X AFP Server NULL Pointer Dereference Denial of Service Vulnerability

  Tags:  server null pointer apple-mac-os x-afp apple-mac-os-x service-vulnerability  

• November 05, 2010
• 0:00

  Vuln: OpenLDAP X.509 Certificate NULL Character Certificate Validation Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  OpenLDAP X.509 Certificate NULL Character Certificate Validation Security Bypass Vulnerability

  Tags:  null certificate openldap character-certificate null-character x-509  

• October 18, 2010
• 10:41

  Microsoft Word 2003 MSO Null Pointer Dereference Vulnerability

   » ‎ SecuriTeam
  A null pointer dereference vulnerability has been noticed in Microsoft Word 2003.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  null microsoft word null-pointer safer-use microsoft-word  

• October 04, 2010
• 18:01

  pseudofs_exp.c

   » ‎ Packet Storm Security Recent Files
  FreeBSD versions 7.0 through 7.2 pseudofs null pointer dereference local exploit.

  Tags:  null freebsd exp freebsd-versions null-pointer exploit  

• 18:00

  pseudofs_exp.c

   » ‎ Packet Storm Security Exploits
  FreeBSD versions 7.0 through 7.2 pseudofs null pointer dereference local exploit.

  Tags:  null freebsd exp freebsd-versions null-pointer exploit  

• 14:00

  [local exploits] - FreeBSD 'pseudofs' NULL Pointer Dereference Local Privilege Escalation

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [local exploits] - FreeBSD 'pseudofs' NULL Pointer Dereference Local Privilege Escalation

  Tags:  exploit null pseudofs null-pointer local-privilege-escalation exploits  

• 0:00

  Vuln: libESMTP NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libESMTP NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

  Tags:  character null libesmtp null-character vulnerability validation  

• 0:00

  Vuln: FreeBSD 'pseudofs' NULL Pointer Dereference Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  FreeBSD 'pseudofs' NULL Pointer Dereference Local Privilege Escalation Vulnerability

  Tags:  null pointer freebsd privilege-escalation-vulnerability null-pointer local-privilege-escalation  

• September 08, 2010
• 21:01

  fbsdpseudofs-nullpointer.txt

   » ‎ Packet Storm Security Recent Files
  FreeBSD versions 7.0 through 7.2 suffer from a pseudofs NULL pointer dereference vulnerability. Due to a spurious call to pfs_unlock() in pfs_getattr() (as defined in sys/fs/pseudofs/pseudofs_vnops.c), a null pointer is dereferenced after calling extattr_get_attribute() on pseudofs vnode. By allocating a page at address 0x0, an attacker can overwrite an arbitrarily chosen portion of kernel memory, leading to a crash or local root escalation.

  Tags:  txt null pointer kernel-memory freebsd-versions null-pointer  

• 21:01

  fbsdpseudofs-nullpointer.txt

   » ‎ Packet Storm Security Advisories
  FreeBSD versions 7.0 through 7.2 suffer from a pseudofs NULL pointer dereference vulnerability. Due to a spurious call to pfs_unlock() in pfs_getattr() (as defined in sys/fs/pseudofs/pseudofs_vnops.c), a null pointer is dereferenced after calling extattr_get_attribute() on pseudofs vnode. By allocating a page at address 0x0, an attacker can overwrite an arbitrarily chosen portion of kernel memory, leading to a crash or local root escalation.

  Tags:  txt null pointer kernel-memory freebsd-versions null-pointer  

• September 06, 2010
• 0:00

  Vuln: Quagga bgpd Null Pointer Deference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Quagga bgpd Null Pointer Deference Denial Of Service Vulnerability

  Tags:  null quagga bgpd service-vulnerability null-pointer denial-of-service  

• August 18, 2010
• 0:00

  Vuln: OpenLDAP X.509 Certificate NULL Character Certificate Validation Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  OpenLDAP X.509 Certificate NULL Character Certificate Validation Security Bypass Vulnerability

  Tags:  null certificate openldap character-certificate null-character x-509  

• August 06, 2010
• 0:00

  Vuln: LibTIFF 'td_stripbytecount' NULL Pointer Dereference Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  LibTIFF 'td_stripbytecount' NULL Pointer Dereference Remote Denial of Service Vulnerability

  Tags:  libtiff null stripbytecount service-vulnerability null-pointer denial-of-service  

• July 20, 2010
• 0:00

  Vuln: OpenLDAP X.509 Certificate NULL Character Certificate Validation Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  OpenLDAP X.509 Certificate NULL Character Certificate Validation Security Bypass Vulnerability

  Tags:  null certificate openldap character-certificate null-character x-509  

• July 12, 2010
• 0:00

  Vuln: ZNC NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ZNC NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  null pointer znc service-vulnerability null-pointer denial-of-service  

• July 06, 2010
• 9:05

  xorshell-shellcode.txt

   » ‎ Packet Storm Security Misc. Files
  62 bytes small XOR encoded execve( /bin/sh ,NULL,NULL) with setreuid (0,0) Linux / x86 shellcode.

  Tags:  txt null xor shellcode null-null  

• July 05, 2010
• 1:00

  linux/x86 setreuid(0,0) execve("/bin/sh",NULL,NULL) encoded 62 bytes

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  linux/x86 setreuid(0,0) execve("/bin/sh",NULL,NULL) encoded 62 bytes

  Tags:  null setreuid execve x86 linux  

• July 01, 2010
• 9:56

  Revisiting HALFLM Stuff

   » ‎ Carnal0wnage
  I covered some of the halflm challenge sniffing stuff in a previous post.
  
  but I had to revisit it the other day for work and couldn't find the actually tables and program from the post.
  
  so here are some updated links.
  
  where to grab the tables:
  
  http://freerainbowtables.mirror.garr.it/mirrors/freerainbowtables/halflmchall/
  
  where to grab the program:
  
  http://sourceforge.net/projects/rcracki/
  
  Some gotchas I ran into on the last PT was some reason getting odd hashes in the SMB and NTLM sniffing modules.
  
  in some cases the hashes were not the same for the same username and hostname, these were unusable, I also had some that had a bunch of zeros in them, those were also not crackable.
  
  Windows 2000 2195:Windows 2000 5.0:1122334455667788:4c4d5353500003000000010001004600000000000000470000000000000040000000000000004000000006000600400000001000100047000000158a88e048004f0044000081196a7af2e4491c28af3025741067535700:00000000000000000000000000000000
  
  But I did get smb_login scanned, that was fun:
  
  ADMIN Windows 2000 2195Windows 2000 5.0:NULL:1122334455667788:59de5d885e583167c3a9a92ac42c0ae52f85252cc731bb25:5ada49d539bd174e7049805dc1004925e25130c33dbe892a ADMIN Windows 2000 2195Windows 2000 5.0:NULL:1122334455667788:40305b22075d6000d0508d9ad1f7beb02f85252cc731bb25:337c939e66480243d1833309b8afe49a81fe4c5e646bf00a ADMIN Windows 2000 2195Windows 2000 5.0:NULL:1122334455667788:daf3570c10ed2817c3d8a05d69f9ef292f85252cc731bb25:d3fb390bac5d152f7a394466fbef686e275d05b99c0a115e ADMIN Windows 2000 2195Windows 2000 5.0:NULL:1122334455667788:76365e2d142b5612980c67d057eb9efeee5ef6eb6ff6e04d:727b4e35f947129ea52b9cdedae86934bb23ef89f50fc595 ADMIN Windows 2000 2195Windows 2000 5.0:NULL:1122334455667788:d737aa8f95ce38359cab5d8a2519c4b92f85252cc731bb25:0624a3f7d457c54b163c641dbf4b7963548ef1c5d0397cbf ADMIN Windows 2000 2195Windows 2000 5.0:NULL:1122334455667788:0e89a68d07e315c6035e82b757b955882f85252cc731bb25:58f2d720179b4a38a0523e02aef0d41dacccd6577eaa943c ADMIN Windows 2000 2195Windows 2000 5.0:NULL:1122334455667788:aa9436c1d40cb53f3e7a20091c4b931c2f85252cc731bb25:8ac45acdbd60f2fad3081ecf005536efa6009c21ca5faf36 ADMIN Windows 2000 2195Windows 2000 5.0:NULL:1122334455667788:dce867f0cb638db2dbcc3576a52dc4612f85252cc731bb25:8990b33dac65c5ef75073829894b911a983c1e260fbd1097 ADMIN Windows 2000 2195Windows 2000 5.0:NULL:1122334455667788:6f9d851d74c8a095c9df672a1554bebc2f85252cc731bb25:89953de6f957b7db5fe664d23af3de41dd38f5ec0a4a6eb0 ADMIN Windows 2000 2195Windows 2000 5.0:NULL:1122334455667788:cc96cc93b4dc9b7582273227fd61a5952f85252cc731bb25:76d3c3deb0bb8ef1a1e41ab6a3f6c686a321ce016c624567 ADMIN Windows 2000 2195Windows 2000 5.0:NULL:1122334455667788:cc96cc93b4dc9b754db66776827758d30b7892eef2e3f2bc:df58ae0f786becc11be11034dc53b21bdf1d73579af868d1 ADMIN Windows 2000 2195Windows 2000 5.0:NULL:1122334455667788:de5d1d85daf6593d0a09ff32049013ab2f85252cc731bb25:526471d8c4a0ecc8af05851804ea8fdd26848fa3ccc63152 ADMIN Windows 2000 2195Windows 2000 5.0:NULL:1122334455667788:b8489edee1058b43f3ce0f0abe5a16872f85252cc731bb25:57b9c47a75335692f60e787e41cd16a292a21bc667b3fd02 ADMIN Windows 2000 2195Windows 2000 5.0:NULL:1122334455667788:2b6b134af8d48f2a972bff5660420d582f85252cc731bb25:5018402148e15a8d77cb22dd46f1449a2791416b73ee9c3d ADMIN Windows 2000 2195Windows 2000 5.0:NULL:1122334455667788:bb49aefd51ed0dccd5be291bd33be3052f85252cc731bb25:c9b255750bd88ac72e03adafda261e62618c943f7d59daf5

  Tags:  null admin windows gotchas hashes zeros Pentesting  

• 0:00

  Vuln: Neon NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Neon NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

  Tags:  neon character null null-character vulnerability validation  

• June 21, 2010
• 0:00

  Vuln: ZNC NULL Pointer Dereference Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ZNC NULL Pointer Dereference Denial Of Service Vulnerability

  Tags:  null pointer znc service-vulnerability null-pointer denial-of-service  

• June 08, 2010
• 0:00

  Vuln: Sendmail NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Sendmail NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

  Tags:  character null sendmail null-character vulnerability validation  

• June 02, 2010
• 0:00

  Vuln: Fetchmail NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Fetchmail NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

  Tags:  null ssl security null-character vulnerability validation  

• May 10, 2010
• 0:00

  Vuln: libESMTP NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libESMTP NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

  Tags:  character null libesmtp null-character vulnerability validation  

• May 03, 2010
• 0:00

  Vuln: OpenLDAP X.509 Certificate NULL Character Certificate Validation Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  OpenLDAP X.509 Certificate NULL Character Certificate Validation Security Bypass Vulnerability

  Tags:  null certificate openldap character-certificate null-character x-509  

• 0:00

  Vuln: Sendmail NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Sendmail NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

  Tags:  character null sendmail null-character vulnerability validation  

• April 23, 2010
• 0:00

  Vuln: libESMTP NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libESMTP NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

  Tags:  character null libesmtp null-character vulnerability validation  

• April 20, 2010
• 0:00

  Vuln: Libnids 'ip_fragment.c' Null Pointer Deference Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Libnids 'ip_fragment.c' Null Pointer Deference Remote Denial of Service Vulnerability

  Tags:  null fragment libnids fragment-c service-vulnerability null-pointer  

• April 05, 2010
• 0:00

  Vuln: Libnids 'ip_fragment.c' Null Pointer Deference Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Libnids 'ip_fragment.c' Null Pointer Deference Remote Denial of Service Vulnerability

  Tags:  null fragment libnids fragment-c service-vulnerability null-pointer  

• April 01, 2010
• 0:00

  Vuln: Libnids 'ip_fragment.c' Null Pointer Deference Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Libnids 'ip_fragment.c' Null Pointer Deference Remote Denial of Service Vulnerability

  Tags:  null fragment libnids fragment-c service-vulnerability null-pointer  

• March 31, 2010
• 0:00

  Vuln: Mozilla NSS NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Mozilla NSS NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

  Tags:  null mozilla nss null-character vulnerability validation  

• March 18, 2010
• 19:44

  mplayer-dereference.txt

   » ‎ Packet Storm Security Recent Files
  mplayer versions 4.4.1 and below NULL pointer dereference exploit.

  Tags:  txt null mplayer null-pointer dereference  

• 19:44

  mplayer-dereference.txt

   » ‎ Packet Storm Security Exploits
  mplayer versions 4.4.1 and below NULL pointer dereference exploit.

  Tags:  txt null mplayer null-pointer dereference  

• March 12, 2010
• 0:00

  Vuln: Sendmail NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Sendmail NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

  Tags:  character null sendmail null-character vulnerability validation  

• March 10, 2010
• 0:00

  Vuln: cURL / libcURL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  cURL / libcURL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

  Tags:  null libcurl curl null-character vulnerability validation  

• March 09, 2010
• 0:00

  Vuln: OpenLDAP X.509 Certificate NULL Character Certificate Validation Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  OpenLDAP X.509 Certificate NULL Character Certificate Validation Security Bypass Vulnerability

  Tags:  null certificate openldap character-certificate null-character x-509  

• March 08, 2010
• 0:00

  Vuln: PostgreSQL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PostgreSQL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

  Tags:  character null postgresql null-character vulnerability validation  

• February 03, 2010
• 0:00

  Vuln: Qt NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Qt NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

  Tags:  character null ssl null-character vulnerability validation  

• January 27, 2010
• 0:00

  Vuln: KDE KSSL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  KDE KSSL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

  Tags:  kssl null kde null-character vulnerability  

• January 26, 2010
• 0:00

  Vuln: OpenLDAP X.509 Certificate NULL Character Certificate Validation Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  OpenLDAP X.509 Certificate NULL Character Certificate Validation Security Bypass Vulnerability

  Tags:  null certificate openldap character-certificate null-character x-509  

• January 20, 2010
• 15:37

  init: illegal runlevel (null)

   » ‎ remote-exploit & backtrack
  So, I followed this instuction building-perfect-backtrack-4-usb-thumb.html from powercram.com to make a bt4 usb stick that keeps stuff I install.
  I ended up at the lines before "Install Nessus" where I wanted to boot from the stick (I don't need nessus or crypted stuff, so I'd leave that out) but if I boot I receive the error
  init: illegal runlevel (null)
  now, I tried to search for files that set the init runlevel to find out what's wrong but I failed D:
  what can I do?
  Is there a solution for this problem? Is there a better solution to keep installed programs on my usb bt4?

  Tags:  null runlevel init BackTrack better-solution Latest Public Release BackTrack4 beta