Heap overflow

Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier 1 allow remote authenticated users to execute arbitrary code via a long LIST command and other unspecified requests to the FTP service, and 2 allow remote attackers to execute arbitrary code via unspecified requests to the...

CVE-2007-0366

Untrusted search path vulnerability in Rumpus 5.1 and earlier allows local users to gain privileges via a modified PATH that points to a malicious ipfw program...

CVE-2007-0019

Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier 1 allow remote authenticated users to execute arbitrary code via a long LIST command and other unspecified requests to the FTP service, and 2 allow remote attackers to execute arbitrary code via unspecified requests to the...

CVE-2007-0019

CVE-2007-0019 affects rumpusd in Rumpus 5.1 and earlier. The issue consists of multiple heap-based buffer overflows that permit remote code execution. Specifically, a long LIST command and other FTP requests can enable exploitation by remote authenticated users, and unspecified HTTP requests can ...

Rumpus 5.1 Local Privilege Escalation / Remote FTP LIST PoC Exploit

Exploit for macOS platform in category local exploits =================================================================== Rumpus 5.1 Local Privilege Escalation / Remote FTP LIST PoC Exploit =================================================================== !/usr/bin/ruby Copyright c Lance M. Hav...

Rumpus 5.1 - Local Privilege Escalation Remote FTP LIST

Rumpus 5.1 - Local Privilege Escalation Remote FTP LIST !/usr/bin/ruby Copyright c Lance M. Havok Kevin Finisterre Proof of concept for issues described in MOAB-18-01-2007. require 'net/ftp' require 'socket' bugselected = ARGV0 || 0.toi targethost = ARGV1 || "localhost" targetuser = ARGV2 ||...

Rumpus 5.1 - Local Privilege Escalation / Remote FTP LIST

!/usr/bin/ruby Copyright c Lance M. Havok Kevin Finisterre Proof of concept for issues described in MOAB-18-01-2007. require 'net/ftp' require 'socket' bugselected = ARGV0 || 0.toi targethost = ARGV1 || "localhost" targetuser = ARGV2 || "anonymous" targetpass = ARGV3 || "rumproast" def listbugo...

Fedora Core 6 : elinks-0.11.1-5.1 (2006-1278)

Tue Nov 21 2006 Karel Zak 0.11.1-5.1 - fix 215734: CVE-2006-5925 elinks smb protocol arbitrary file access - Wed Oct 11 2006 Karel Zak 0.11.1-5 - fix 210103 - elinks crashes when given bad HTTPPROXY - Wed Jul 12 2006 Jesse Keating - 0.11.1-4.1 - rebuild - Mon Jun 12 2006 Karel Zak 0.11.1-4 -...

CVE-2006-6578

Microsoft Internet Information Services IIS 5.1 permits the IUSRMachine account to execute non-EXE files such as .COM files, which allows attackers to execute arbitrary commands via arguments to any .COM file that executes those arguments, as demonstrated using win.com when it is in a web directo...

CVE-2006-6578

CVE-2006-6578 affects Microsoft Internet Information Services (IIS) 5.1, where the IUSR_Machine account can execute non-EXE files (e.g., .COM) in a web directory with certain permissions. This allows attackers to pass arguments to any .COM file that runs those arguments, enabling arbitrary comman...

PHProjekt <= 5.1 Multiple Remote File Include Vulnerabilities

No description provided by source. / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Script name: PHProjekt v. 5.1 - Script site: http://www.phprojekt.com/ + + + - Find by: Kacper a.k.a Rahim + - Contact: [email protected] - or - http://www.devilteam.yum.pl + + + - Greetz: DragonHeart - a...

Solaris 7 (sparc) : 119007-01

NetBackup 5.1 UNIX server and client fix. Date this patch was last updated by Sun : Nov/10/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 9 (sparc) : 119007-01

NetBackup 5.1 UNIX server and client fix. Date this patch was last updated by Sun : Nov/10/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

[Full-disclosure] ZDI-06-037: America Online ICQ ActiveX Control Code Execution Vulnerability

ZDI-06-037: America Online ICQ ActiveX Control Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-037.html November 6, 2006 -- CVE ID: CVE-2006-5650 -- Affected Vendor: America Online -- Affected Products: America Online ICQ 5.1 -- TippingPointTM IPS Customer...

AIX 5.1 to 5.3 paginit Local Stack Overflow Exploit

No description provided by source. / exploit for /usr/bin/paginit tested on: AIX 5.2 if the exploit fails it's because the shellcode ends up at a different address. use dbx to check, and change RETADDR accordingly. cees-bart ceesb cs ru nl / define RETADDR 0x2ff22c90 char shellcode =...

AIX 5.1 Bellmail Local Race Condition Exploit (Instructions w/ Exploit)

No description provided by source. -bash-2.05b$ -bash-2.05b$ cat xaix5bellmail.pl !/usr/bin/perl FileName: xaix5bellmail.pl Exploit "Race condition vulnerability BUGTRAQ ID: 8805" of /usr/bin/bellmail command on Aix5 to change any file owner to current user. Usage : xaix5bellmail.pl aimfile aimfi...

CVE-2006-5123

PHProjekt 5.1.x before 5.1.2 has multiple PHP remote file inclusion vulnerabilities. An attacker can trigger arbitrary PHP code execution by supplying a URL in the lib_path or lang_path parameters (across unspecified files). A related CVE-2006-4609 variant notes the issue in the Content Manager (...

AIX 5.1 : IY25504

The remote host is missing AIX Critical Security Patch number IY25504 SECURITY: Buffer overflow in CDE DtSvc library. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

AIX 5.1 : IY23041

The remote host is missing AIX Critical Security Patch number IY23041 SECURITY: buffer overflows in lpd. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 5.1 : IY27649

The remote host is missing AIX Critical Security Patch number IY27649 SECURITY: Buffer overflow vulnerability in nice & nohup. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...