Win32k.sys键盘布局文件提权漏洞分析
作者：Sebastien Renaud 译者：riusksk（泉哥：http://riusksk.blogbus.com） 本文将向各位揭示一些关于Stuxnet蠕虫病毒的技术细节，主要旨在讲述作者是如何利用0day漏洞实现代码的通用性。文中讨论的是作者所用到的两个Windows提权漏洞之一。这一漏洞在微软发布的MS10-073升级补丁中已经修复了，但还有另一个windows......
阅读全文 →SECURITY RESEARCH / ENGINEERING
文章与研究
在证据与实验中理解复杂系统。
Linux Kernel < 2.6.36.2 权限提升漏洞
/* half-nelson.c Linux Kernel < 2.6.36.2 Econet Privilege Escalation Exploit Jon Oberheide http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3848 Stack-based buffer overflow in the econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to gain privileges by providing a large number of iovec structures. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3850 The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local users to bypass intended access restrictions and configure econet addresses via an......
阅读全文 →Linux Kernel < 2.6.36.2 权限提升漏洞
/* half-nelson.c Linux Kernel < 2.6.36.2 Econet Privilege Escalation Exploit Jon Oberheide http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3848 Stack-based buffer overflow in the econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to gain privileges by providing a large number of iovec structures. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3850 The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local users to bypass intended access restrictions and configure econet addresses via an......
阅读全文 →