CVE-2007-1228
published 2007-03-02CVE-2007-1228: IBM DB2 UDB 8.2 before Fixpak 7 (aka fixpack 14), and DB2 9 before Fix Pack 2, on UNIX allows the "fenced" user to access certain unauthorized directories.
PriorityP412medium4.4CVSS 2.0
AVLACMAuSCCINAN
EPSS
0.29%
21.2th percentile
IBM DB2 UDB 8.2 before Fixpak 7 (aka fixpack 14), and DB2 9 before Fix Pack 2, on UNIX allows the "fenced" user to access certain unauthorized directories.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | db2 | — | — |
| ibm | db2 | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Apple Mac OSX xnu 1228.0 - 'super_blob' Local kernel Denial of Service (PoC)
exploitdb·2007-12-12
CVE-2007-6359 Apple Mac OSX xnu 1228.0 - 'super_blob' Local kernel Denial of Service (PoC)
Apple Mac OSX xnu 1228.0 - 'super_blob' Local kernel Denial of Service (PoC)
---
/* xnu-superblob-dos.c
*
* Copyright (c) 2007 by
*
* Apple MACOS X xnu
#include
#include
#include
#include
#include
#include
#include
#define MAX_PATH_LEN 128
/* change this value if no panic */
#define CSLOTS_DIFF 0x69696969
#define CSSLOT_CODEDIRECTORY 0x0
#define CSMAGIC_CODEDIRECTORY 0xfade0c02 /* CodeDirectory blob */
#define CSMAGIC_EMBEDDED_SIGNATURE 0xfade0cc0 /* embedded form of signature data */
/* bsd/kern/ubc_subr.c */
struct blob_index {
unsigned int type;
unsigned int offset;
};
struct super_blob {
unsigned int magic;
unsigned int length;
unsigned int count;
struct blob_index index[];
};
struct code_directory {
unsigned int magic;
unsigned int length;
unsigned int version;
unsigned int f
Exploit-DB
Apple Mac OSX xnu 1228.0 - 'mach-o' Local Kernel Denial of Service (PoC)
exploitdb·2007-12-04
CVE-2007-6261 Apple Mac OSX xnu 1228.0 - 'mach-o' Local Kernel Denial of Service (PoC)
Apple Mac OSX xnu 1228.0 - 'mach-o' Local Kernel Denial of Service (PoC)
---
/* xnu-macho-dos.c
*
* Copyright (c) 2007 by
*
* Apple MACOS X xnu
#include
#include
#include
#include
#include
#include
#define MAX_PATH_LEN 128
#define LC_UNIXTHREAD 0x05
#define x86_THREAD_STATE32 0x01
/* osfmk/mach-o/loader.h */
struct thread_command {
unsigned long cmd; /* LC_THREAD or LC_UNIXTHREAD */
unsigned long cmdsize; /* total size of this command */
unsigned long flavor; /* flavor of thread state */
unsigned long count; /* count of longs in thread state */
};
static void *
xmalloc (int num_bytes)
{
char *buf;
buf = malloc (num_bytes);
if (buf == NULL)
{
fprintf (stderr, "malloc (): out of memory allocating %d-bytes!\n", num_bytes);
exit (EXIT_FAILURE);
}
return (buf);
}
int
main (int argc, c
No writeups or analysis indexed.
http://secunia.com/advisories/24387http://www-1.ibm.com/support/docview.wss?uid=swg1IY86711http://www-1.ibm.com/support/docview.wss?uid=swg1IY87492http://www.securityfocus.com/bid/22729http://www.securitytracker.com/id?1017731http://secunia.com/advisories/24387http://www-1.ibm.com/support/docview.wss?uid=swg1IY86711http://www-1.ibm.com/support/docview.wss?uid=swg1IY87492http://www.securityfocus.com/bid/22729http://www.securitytracker.com/id?1017731
2007-03-02
Published