security flaw

PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command...

OpenText FirstClass 8.0 HTTP Daemon /Search Remote DoS

Exploit for unknown platform in category dos / poc ====================================================== OpenText FirstClass 8.0 HTTP Daemon /Search Remote DoS ====================================================== / http://secunia.com/advisories/13415 written by dila released on 11.12.04 compil...

CVE-2003-0019

The CVE-2003-0019 issue affects the uml_net utility in Red Hat Linux 8.0’s kernel-utils package, shipped with incorrect setuid root permissions. This allows local users to modify network interfaces, including ARP entry manipulation and placing interfaces into promiscuous mode. Root cause: the uml...

CVE-2003-0019

umlnet in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users to modify network interfaces, e.g. by modifying ARP entries or placing interfaces into promiscuous mode...

Mandrake Linux Security Advisory : cups (MDKSA-2001:048)

The version of cups shipped with Linux-Mandrake 8.0 has a problem where when a user prints a multi-page PostScript file with embedded pictures, the pages following the first with the picture are all printed on the same page, one on top of the other. From multi-page Abiword files only text only th...

CVE-2003-1376

WinZip 8.0 uses weak random number generation for password protected ZIP files, which allows local users to brute force the encryption keys and extract the data from the zip file by guessing the state of the stream coder...

PLD Software Ebola 0.1.4 - Remote Buffer Overflow

PLD Software Ebola 0.1.4 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/9156/info It has been reported that a buffer overflow condition is present in the authentication mechanism implemented in Ebola. The condition is due to the use of the C library function sprintf to...

Knox Arkeia Pro v5.1.12 remote root exploit

Exploit attached for Knox Arkeia Pro v5.1.12 backup software from http://www.arkeia.com. / Knox Arkiea arkiead local/remote root exploit. Portbind 5074 shellcode Tested on Redhat 8.0, Redhat 7.2, but all versions are presumed vulnerable. NULLs out least significant byte of EBP to pull EIP out of...

Knox Arkeia Pro 5.1.12 - Backup Remote Code Execution

Knox Arkeia Pro 5.1.12 - Backup Remote Code Execution / Knox Arkiea arkiead local/remote root exploit. Portbind 5074 shellcode Tested on Redhat 8.0, Redhat 7.2, but all versions are presumed vulnerable. NULLs out least significant byte of EBP to pull EIP out of overflow buffer. A previous request...

Knox Arkeia Pro 5.1.12 Backup Remote Root Exploit

Exploit for linux platform in category remote exploits ================================================= Knox Arkeia Pro 5.1.12 Backup Remote Root Exploit ================================================= / Knox Arkiea arkiead local/remote root exploit. Portbind 5074 shellcode Tested on Redhat 8....

Linux pam_lib_smb < 1.1.6 - '/bin/login' Remote Overflow

/ Linux pamlibsmb include include include include include include include include include / first negotiate / / packet capture by ethereal / char packet1 = 0xff, 0xfd, 0x03, 0xff, 0xfb, 0x18, 0xff, 0xfb, 0x1f, 0xff, 0xfb, 0x20, 0xff, 0xfb, 0x21, 0xff, 0xfb, 0x22, 0xff, 0xfb, 0x27, 0xff, 0xfd, 0x0...

Linux pam_lib_smb < 1.1.6 /bin/login Remote Exploit

Exploit for linux platform in category remote exploits =================================================== Linux pamlibsmb include include include include include include include include include / first negotiate / / packet capture by ethereal / char packet1 = 0xff, 0xfd, 0x03, 0xff, 0xfb, 0x18,...

Polymorph 0.4 - Filename Buffer Overflow

// source: https://www.securityfocus.com/bid/7663/info Polymorph for Linux has been reported prone to a buffer overflow vulnerability. The issue is reportedly due to a lack of sufficient bounds checking performed on user-supplied data before it is copied into an internal memory space. Specificall...

Snort <=1.9.1 Remote Root Exploit (p7snort191.sh)

Exploit for linux platform in category remote exploits ================================================= Snort =1.9.1 Remote Root Exploit p7snort191.sh ================================================= !/bin/sh p7snort191.sh by truff email protected Snort 1.9.1 and below remote exploit Tested on...

Snort 1.9.1 - p7snort191.sh Remote Command Execution

Snort 1.9.1 - p7snort191.sh Remote Command Execution !/bin/sh p7snort191.sh by truff [email protected] Snort 1.9.1 and below remote exploit Tested on Slackware 8.0 with Snort 1.9.1 from sources Usage: 1/ Launch a listening netcat to listen for the shell nc -p 45295 -l 2/ p7snort119.sh yourIP...

CVE-2002-0762

shadow package in SuSE 8.0 allows local users to destroy the /etc/passwd and /etc/shadow files or assign extra group privileges to some users by changing filesize limits before calling programs that modify the files...

CVE-2002-0758

ifup-dhcp script in the sysconfig package for SuSE 8.0 allows remote attackers to execute arbitrary commands via spoofed DHCP responses, which are stored and executed in a file...

CVE-2002-0758

CVE-2002-0758 affects SuSE 8.0 where the ifup-dhcp script in the sysconfig package may process spoofed DHCP responses, allowing remote attackers to cause arbitrary commands to be stored and executed. The underlying issue is the handling of DHCP data by the script, leading to code execution on the...

CVE-2003-0080

The vulnerability is in Red Hat Linux 8.0’s Gnome-lokkit, where the iptables ruleset leaves the FORWARD chain without any rules. This permits bypassing intended access restrictions if packet forwarding is enabled, by an attacker who can trigger forwarding. The affected component is the iptables r...

Local root vuln in SuSE 8.0 plptools package

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Vulnerability Advisory Distribution: SuSE 8.0 possibly other versions, eg. 7.x/8.1 Package name: plptools-0.6mjg-161.i386.rpm Impact: Local root Advisory ID: CLIVITT-2003-2 Author: Carl Livitt carl at learningshophull.co.uk Date: January 29th...