Ubuntu 5.04 / 5.10 / 6.06 LTS : libxfont, xorg vulnerability (USN-341-1)

An integer overflow has been discovered in X.org's font handling library. By using a specially crafted font file, this could be exploited to crash the X server or execute arbitrary code with root privileges. Note that Tenable Network Security has extracted the preceding description block directly...

Ubuntu 5.04 / 5.10 / 6.06 LTS : freetype vulnerabilities (USN-291-1)

Several integer overflows have been discovered in the FreeType library. By tricking a user into installing and/or opening a specially crafted font file, these could be exploited to execute arbitrary code with the privileges of that user. Note that Tenable Network Security has extracted the...

Ubuntu 5.10 : mysql-dfsg-4.1 vulnerability (USN-306-1)

MySQL did not correctly handle NULL as the second argument to the strtodate function. An authenticated user could exploit this to crash the server. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to...

Ubuntu 5.10 / 6.06 LTS / 6.10 : imlib2 regression fix (USN-376-2)

USN-376-1 provided an update to imlib2 to fix several security vulnerabilities. Unfortunately the update broke JPG file handling in certain situations. This update corrects this problem. We apologize for the inconvenience. Note that Tenable Network Security has extracted the preceding description...

Apple iTouch/iPhone 1.1.1 tif File Remote Jailbreak Exploit

No description provided by source. !-- The iPhone / iTouch tif exploit is now officially released! source: http://www.toc2rta.com/ So its offical we have released the tiff exploit code. You can navigate in safari to http://jailbreak.toc2rta.com ...

Apple iTouchiPhone 1.1.1 - .tif Remote Privilege Escalation Jailbreak

Apple iTouchiPhone 1.1.1 - .tif Remote Privilege Escalation Jailbreak milw0rm.com 2007-10-11...

Apple iTouch/iPhone 1.1.1 - '.tif' Remote Privilege Escalation 'Jailbreak'

milw0rm.com 2007-10-11...

Apple iTouch/iPhone 1.1.1 tif File Remote Jailbreak Exploit

Exploit for hardware platform in category remote exploits =========================================================== Apple iTouch/iPhone 1.1.1 tif File Remote Jailbreak Exploit =========================================================== 0day.today 2018-03-12...

Code injection

The Chroot server in rMake 1.0.11 creates a /dev/zero device file with read/write permissions for the rMake user and the same minor device number as /dev/port, which might allow local users to gain root privileges...

CVE-2007-5194

The Chroot server in rMake 1.0.11 creates a /dev/zero device file with read/write permissions for the rMake user and the same minor device number as /dev/port, which might allow local users to gain root privileges...

RMake privilege escalation

/dev/zero device works as /dev/port in chrooted environment...

CVE-2007-5194: Undefined Security Weakness

The Chroot server in rMake 1.0.11 creates a /dev/zero device file with read/write permissions for the rMake user and the same minor device number as /dev/port, which might allow local users to gain root privileges...

cpuset information leak

Integer underflow in the cpusettasksread function in the Linux kernel before 2.6.20.13, and 2.6.21.x before 2.6.21.4, when the cpuset filesystem is mounted, allows local users to obtain kernel memory contents by using a large offset when reading the /dev/cpuset/tasks file...

CentOS 4 : cyrus-sasl (CESA-2007:0795)

An updated cyrus-sasl package that addresses a security issue and fixes various other bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The cyrus-sasl package contains the Cyrus implementation...

cyrus security update

CentOS Errata and Security Advisory CESA-2007:0795 An updated cyrus-sasl package that addresses a security issue and fixes various other bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The...

Moderate: Red Hat Security Advisory: cyrus-sasl security and bug fix update

An updated cyrus-sasl package that addresses a security issue and fixes various other bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The cyrus-sasl package contains the Cyrus implementation...

Live for Speed S1/S2/Demo (.ply file) Buffer Overflow Exploit

No description provided by source. / 0day Live for speed patch x s2 /s1 and demo local .ply File buffer over flow Live for speed .ply file is a set up file,This file is shared amongst user's Who want stylish number plate's on there car's the buffer over flow happened with An overly long number...

Alphanumeric Shellcode Encoder Decoder

Exploit for generator platform in category shellcode ====================================== Alphanumeric Shellcode Encoder Decoder ====================================== / //////////////////////////////////////////////////////////////////////////////////////////////////////////////////////...

Debian DSA-1343-1 : file - integer overflow

Colin Percival discovered an integer overflow in file, a file type classification tool, which may lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

CVE-2007-3532

CVE-2007-3532 affects NVIDIA drivers (nvidia-drivers) prior to 1.0.7185, 1.0.9639, and 100.14.11 when used in Gentoo Linux and possibly other distributions. The vulnerability arises because the default driver setup creates /dev/nvidia* device files with insecure permissions, enabling a local atta...