Solaris 8 (sparc) : 111874-09

SunOS 5.8: usr/bin/mail patch. Date this patch was last updated by Sun : Jan/18/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

USR Broadband-Router 8000 DoS

Buffer overflow on oversized GET request...

Cobalt Linux 6.0 - RaQ (Authenticated) Privilege Escalation

source: https://www.securityfocus.com/bid/5695/info Sun has released an advisory warning that it is possible for local users to escalate priveleges on Sun/Cobalt RaQ or Qube systems, by exploiting a vulnerability located in /usr/lib/authenticate. !/bin/sh Cobalt Linux 6.0 Local Root Exploit...

CVE-1999-1318

CVE-1999-1318 affects SunOS 4.1.3 and earlier. The vulnerable component is /usr/5bin/su , which uses a search path that includes the current working directory (.). This allows local users to gain privileges via Trojan horse programs. The description clearly states a local privilege escalation and...

'/usr/bin/at 31337 + vuln' problem + exploit

Affects: /usr/bin/at To check if you are potentially vulnerable to this exploit, execute: /usr/bin/at 31337 + vuln If you are vulnerable this will cause: Segmentation fault If not, there will be a message similar to: Garbled time possibly with some extra information The problem is caused by a bug...

CVE-1999-1415

CVE-1999-1415 is a local privilege escalation affecting DEC ULTRIX before 4.2 via /usr/bin/mail. The available documents confirm the vulnerable component and impact (local privilege gain) but do not provide exploit details or a remediation/patch version.

CVE-1999-1554: Undefined Security Weakness

/usr/sbin/Mail on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the user who started Mail, which allows local users to read the mail of other users...

CVE-1999-1415: Undefined Security Weakness

Vulnerability in /usr/bin/mail in DEC ULTRIX before 4.2 allows local users to gain privileges...

Debian 2.2 /usr/bin/pileup Local Root Exploit

Exploit for linux platform in category local exploits ============================================= Debian 2.2 /usr/bin/pileup Local Root Exploit ============================================= / pileup-xpl.c - local root exploit by core Friday the 13th, July 2001 based almost entirely on code by...

Slackware 7.1 /usr/bin/mail Local Exploit

Exploit for linux platform in category local exploits ========================================= Slackware 7.1 /usr/bin/mail Local Exploit ========================================= / Slackware 7.1 /usr/bin/Mail Exploit give gid=1 bin if /usr/bin/Mail is setgid but it is not setgid, setuid for...

Slackware 7.1 - usrbinmail Local Privilege Escalation

Slackware 7.1 - usrbinmail Local Privilege Escalation / Slackware 7.1 /usr/bin/Mail Exploit give gid=1 bin if /usr/bin/Mail is setgid but it is not setgid, setuid for default. tested on my box sl 7.1 crazy exploited by kengz. GID.... \x01 = 1 bin \x02 = 2 , \x03 = 3 , ... \x0a = 10 \x0b = 11 .......

Tru64 UNIX 4.0g /usr/bin/at Local Root Exploit

Exploit for tru64 platform in category local exploits ============================================== Tru64 UNIX 4.0g /usr/bin/at Local Root Exploit ============================================== / Tru64 UNIX 4.0g JAVA /usr/bin/at local root exploit. ALPHA Author: Cody Tubbs loophole of hhp. Site:...

Solaris 2.62.7 - usrbinwrite Local Overflow

Solaris 2.62.7 - usrbinwrite Local Overflow include include / /usr/bin/write overflow proof of conecpt. Tested on Solaris 7 x86 Pablo Sor, Buenos Aires, Argentina. 01/2000 [email protected] usage: write-exp shelloffset retaddroffset default offset should work. / long getesp asm"movl %esp,%eax"; ch...

OpenLDAP 1.2.71.2.81.2.91.2.10 - usrtmp Symlink

OpenLDAP 1.2.71.2.81.2.91.2.10 - usrtmp Symlink source: https://www.securityfocus.com/bid/1232/info A vulnerability exists in OpenLDAP as shipped with some versions of Linux, including RedHat 6.1 and 6.2, and TurboLinux 6.0.2 and earlier. OpenLDAP will create files in /usr/tmp, which is actually ...

CVE-1999-0678: Undefined Security Weakness

A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire server...

usr-totalswitch.txt

Date: Mon, 21 Dec 1998 14:52:29 -0600 From: Adam Maloney Reply-To: Bugtraq List To: [email protected] Subject: Re: Insecurity in USR TotalSwitch The following text is in the "iso-8859-1" character set. Your display is set for the "US-ASCII" character set. Some characters may be displayed...