CVE-2003-0933

CVE-2003-0933 affects Conquest 7.2 and earlier. The vulnerability is a buffer overflow in the environment variable handling that can allow a local user to execute arbitrary code. This is caused by processing a long environment variable, leading to potential code execution with local privileges; t...

CVE-2003-0837

IBM DB2 Universal Database 7.2 for Windows is vulnerable to a stack-based buffer overflow in the INVOKE command (DARI). The issue allows an attacker with Connect privileges to execute arbitrary code on the affected system. The vulnerability affects Windows-specific code in v7.2 and was addressed ...

Knox Arkeia Pro v5.1.12 remote root exploit

Exploit attached for Knox Arkeia Pro v5.1.12 backup software from http://www.arkeia.com. / Knox Arkiea arkiead local/remote root exploit. Portbind 5074 shellcode Tested on Redhat 8.0, Redhat 7.2, but all versions are presumed vulnerable. NULLs out least significant byte of EBP to pull EIP out of...

Knox Arkeia Pro 5.1.12 - Backup Remote Code Execution

Knox Arkeia Pro 5.1.12 - Backup Remote Code Execution / Knox Arkiea arkiead local/remote root exploit. Portbind 5074 shellcode Tested on Redhat 8.0, Redhat 7.2, but all versions are presumed vulnerable. NULLs out least significant byte of EBP to pull EIP out of overflow buffer. A previous request...

Knox Arkeia Pro 5.1.12 Backup Remote Root Exploit

Exploit for linux platform in category remote exploits ================================================= Knox Arkeia Pro 5.1.12 Backup Remote Root Exploit ================================================= / Knox Arkiea arkiead local/remote root exploit. Portbind 5074 shellcode Tested on Redhat 8....

Immunity Canvas: SOLARIS_LD_PRELOAD

Name| solarisLDPRELOAD ---|--- CVE| CVE-2003-0609 Exploit Pack| CANVAS Description| Solaris LDPRELOAD debug edition Notes| References: http://sunsolve.sun.com/search/printfriendly.do?assetkey=1-26-55680-1 CVE Name: CVE-2003-0609 VENDOR: Sun Notes: This is a classic local root elevation environmen...

xmame gain root exploit

/ --------------------------------------------------------------------------- Web: http://qb0x.net Author: Gabriel A. Maggiotti Date: March 31, 2003 E-mail: [email protected] --------------------------------------------------------------------------- / include stdio.h define OFFSET 1058 defi...

XFree86 4.2 - 'XLOCALEDIR' Local Buffer Overflow (3)

// source: https://www.securityfocus.com/bid/7002/info Several XFree86 utilities may be prone to a buffer overflow condition. The vulnerability exists due to insufficient boundary checks performed by these utilities when referencing the XLOCALEDIR environment variable. A local attacker can exploi...

grpck-expl.pl

Hi packetstorm dudez! --- start here --- !/usr/bin/perl www.uhagr.org - [email protected] This is only a Proof of concept. /usr/sbin/grpck is not suid root by default. castle: /usr/sbin/grpck perl -e 'print "X"x2900' Segmentation fault castle: my $usage = Example: ./grpck-expl.pl 1 TARGETS: 1...

Remote pine Denial of Service

Security Advisory 23rd October 2002 Remote pine version 4.44 denial of service Name: Pine version 4.44 Arch: Redhat 7.2 i386 Severity: Medium Vendor URL: http://www.washington.edu/pine/ Author: Linus Sjberg [email protected] Vendor notified: 14:th October 2002 Vendor response: 14:th October 2002...

CVE-2002-0972

CVE-2002-0972 affects PostgreSQL 7.2 with buffer overflows in lpad() and rpad() (and related functions) that can cause a denial of service and may allow arbitrary code execution when crafted input is processed by the server. Connected sources corroborate multiple vendor advisories (Debian DSA 165...

CVE-2001-0918

This CVE concerns vulnerabilities in CGI scripts in susehelp in SuSE 7.2 and 7.3 that allow remote command execution due to insecure file handling. Affected are the susehelp CGI scripts; the underlying issue is not opening files securely, enabling unauthorized command execution. The provided docu...

CVE-2001-0946

apmscript in Apmd in Red Hat 7.2 "Enigma" allows local users to create or change the modification dates of arbitrary files via a symlink attack on the LOWPOWER temporary file, which could be used to cause a denial of service, e.g. by creating /etc/nologin and disabling logins...

CVE-2001-0946

The vulnerability CVE-2001-0946 affects Red Hat 7.2 (Enigma) via apmd/apmscript, where a local attacker can craft a symlink to the LOW_POWER temporary file to create or modify the modification times of arbitrary files. This could be used to trigger a denial of service, for example by creating /et...

Immunity Canvas: CACHEFSD_LPD

Name| cachefsdlpd ---|--- CVE| CVE-2002-0084 Exploit Pack| CANVAS Description| cachefsd .cfsmnt File Stack Overflow Notes| References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309 CVE Name: CVE-2002-0084 VENDOR: Sun Development Notes: This vulnerability had been marked only as ...

Symlink attack with apmd of RH 7.2

UnAffected Systems: --------------------- - Red Hat 7.2 "Enigma" with installed apmd-3.0final-34 package - previous Red Hat distributions are not affected - because vulnerability was introduced by a script being not in the official apmd package, most other GNU/Linux distributions are not affected...

CVE-2001-0918

Vulnerabilities in CGI scripts in susehelp in SuSE 7.2 and 7.3 allow remote attackers to execute arbitrary commands by not opening files securely...

CVE-2001-0474

The CVE affects Mesa’s Utah-glx on Mandrake Linux 7.2. A temporary file race in Utah-glx enables a symlink attack on /tmp/glxmemory, allowing local users to overwrite arbitrary files during the next X server start. The Mandrake advisory MDKSA-2001:029 notes the issue and lists updated Mesa packag...

MDKSA-2001:020 - cups update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Linux-Mandrake Security Update Advisory Package name: cups Date: February 1st, 2001 Advisory ID: MDKSA-2001:020 Affected versions: 7.2 Problem Description: A problem exists in all versions of CUPS prior to 1.1.5 with the httpGets function. It could go...

MDKSA-2000:070 - cups update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Linux-Mandrake Security Update Advisory Package name: cups Date: November 16th, 2000 Advisory ID: MDKSA-2000:070 Affected versions: 7.2 Problem Description: A problem existed with previous versions of CUPS that made CUPS printers accessible from...