iDefense Security Advisory 05.24.07: Apple Computer Mac OS X pppd Plugin Loading Privilege Escalation Vulnerability

Apple Computer Mac OS X pppd Plugin Loading Privilege Escalation Vulnerability iDefense Security Advisory 05.24.07 http://labs.idefense.com/intelligence/vulnerabilities/ May 24, 2007 I. BACKGROUND Apple Mac OS X pppd is a setuid root application that is used to establish and configure connections...

Mac OS X Multiple Vulnerabilities (Security Update 2007-005)

The remote host is running a version of Mac OS X 10.4 or 10.3 that does not have Security Update 2007-005 applied. This update fixes security flaws in the following applications : Alias Manager BIND CoreGraphics crontabs fetchmail file iChat mDNSResponder PPP ruby screen texinfo VPN C Tenable...

CVE-2007-0752

The PPP daemon pppd in Apple Mac OS X 10.4.8 checks ownership of the stdin file descriptor to determine if the invoker has sufficient privileges, which allows local users to load arbitrary plugins and gain root privileges by bypassing this check...

CVE-2007-0752

The CVE-2007-0752 issue affects Apple Mac OS X pppd (PPP daemon) in Mac OS X 10.4.8. The vulnerability stems from an insufficient ownership check when processing the plugin command line option; a local user can load arbitrary plug-ins and gain root privileges by bypassing the stdin ownership veri...

CVE-2007-0752

The PPP daemon pppd in Apple Mac OS X 10.4.8 checks ownership of the stdin file descriptor to determine if the invoker has sufficient privileges, which allows local users to load arbitrary plugins and gain root privileges by bypassing this check...

CentOS 4 : Firefox (CESA-2005:383)

Updated firefox packages that fix various security bugs are now available. This update has been rated as having Important security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Vladimir V. Perepelitsa discovered a bug in the way Firefox handles...

CVE-2006-0752

CVE-2006-0752 affects Honeyd before 1.5. It arises because Honeyd replies to certain illegal IP packet fragments that other IP stacks would drop, enabling remote attackers to identify IP addresses being simulated by Honeyd. The connected documents do not provide remediation or patch details; refe...

CVE-2005-0752

The CVE-2005-0752 entry describes a remote code execution via the Plugin Finder Service (PFS) in Firefox, affected when a javascript: URL is used in the PLUGINSPAGE attribute of an EMBED tag. The vulnerability is tied to Firefox versions before 1.0.3, with an exploit occurring through a crafted E...

Mandrake Linux Security Advisory : OpenOffice.org (MDKSA-2004:103)

A vulnerability in OpenOffice.org was reported by pmladek where a local user may be able to obtain and read documents that belong to another user. The way that OpenOffice.org created temporary files, which used the user's umask to create the file, could potentially allow for other users to have...

RHEL 3 : openoffice.org (RHSA-2004:446)

Updated openoffice.org packages that fix a security issue in temporary file handling are now available. OpenOffice.org is an office productivity suite that includes desktop applications such as a word processor, spreadsheet, presentation manager, formula editor, and drawing program. Secunia...

CVE-2004-0752

CVE-2004-0752 affects OpenOffice 1.1.2, which on startup creates a temporary directory with insecure permissions, enabling a local user to read or list files from other users. The issue is documented across multiple sources, including OpenOffice advisories and Gentoo GLSA 200410-17, which recomme...

CVE-2004-0752

OpenOffice OOo 1.1.2 creates predictable directory names with insecure permissions during startup, which may allow local users to read or list files of other users...

CVE-2003-0752

SQL injection vulnerability in global.php3 of AttilaPHP 3.0, and possibly earlier versions, allows remote attackers to bypass authentication via a modified cookid parameter...

CVE-2003-0752

The CVE-2003-0752 entry concerns AttilaPHP 3.0 (and possibly earlier) with an SQL injection in global.php3 that lets remote attackers bypass authentication via a modified cook_id parameter. This vulnerability is categorized with a CVSS v2 base score of 7.5 (HIGH) and a network attack vector with ...

CVE-2002-0752

CGIscript.net csMailto.cgi program exports feedback to a file that is accessible from the web document root, which could allow remote attackers to obtain sensitive information by directly accessing the file...

CVE-2002-0752

Technical details for CVE-2002-0752 are not publicly provided in the supplied documents. Monitor for updates from connected sources to obtain affected product/version, impact, or remediation information.

CVE-2001-0752

Cisco CBOS 2.3.8 and earlier: remote denial of service via an ICMP ECHO REQUEST with the IP Record Route option set. Affected component is Cisco CBOS; root cause described as processing ICMP ECHO REQUESTs with Record Route data, leading to inability to service requests (DoS). The available refere...

CVE-2000-0752

Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long command line arguments...

CVE-2000-0752

Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long command line arguments...

CVE-1999-0752

CVE-1999-0752 pertains to a denial-of-service in Netscape Enterprise Server caused by a buffer overflow during the SSL handshake. Connected sources corroborate a handshake-related DoS vector with the affected product as Netscape Enterprise Server; however, none of the provided documents specify a...