2043 matches found
CVE-2004-2097
Multiple scripts on SuSE Linux 9.0 allow local users to overwrite arbitrary files via a symlink attack on 1 /tmp/fvwm-bug created by fvwm-bug, 2 /tmp/wmmenu created by wm-oldmenu2new, 3 /tmp/rates created by x11perfcomp, 4 /tmp/xf86debug.1.log created by xf86debug, 5 /tmp/.winpopup-new created by...
CVE-2004-2097
The CVE-2004-2097 entry applies to SuSE Linux 9.0 and describes a local-privilege issue where a symlink attack on several temporary files (e.g., /tmp/fvwm-bug, /tmp/wmmenu, /tmp/rates, /tmp/xf86debug.1.log, /tmp/.winpopup-new, /tmp/initrd) allows a local user to overwrite arbitrary files. The roo...
Berlios GPSD 1.91-1 < 2.7-2 - Format String
require 'msf/core' class Metasploit3 'Berlios GPSD Format String Vulnerability', 'Description' = %q This module exploits a format string vulnerability in the Berlios GPSD server. This vulnerability was discovered by Kevin Finisterre. , 'Author' = 'Yann Senotier ' , 'License' = MSFLICENSE, 'Versio...
CVE-2003-1138
The default configuration of Apache 2.0.40, as shipped with Red Hat Linux 9.0, allows remote attackers to list directory contents, even if auto indexing is turned off and there is a default web page configured, via a GET request containing a double slash //...
CVE-2003-1138
The CVE-2003-1138 issue affects Apache 2.0.40 as shipped with Red Hat Linux 9.0. The vulnerability arises from handling a GET request containing a double slash (//), which allows remote attackers to list directory contents despite auto indexing being disabled or a default page configured. The sec...
CVE-2003-1138
The default configuration of Apache 2.0.40, as shipped with Red Hat Linux 9.0, allows remote attackers to list directory contents, even if auto indexing is turned off and there is a default web page configured, via a GET request containing a double slash //...
CVE-2004-1465
Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including the command line...
CVE-2004-1325
The CVE-2004-1325 entry concerns the ActiveX control used by Windows Media Player 9.0. The getItemInfoByAtom function returns 0 if a target file does not exist, or the file size if it exists, enabling remote attackers to determine whether files exist on the local system. The description focuses o...
un-htget_0.9x.txt
!/usr/bin/perl ^^^^^^^^^^^^^^^^....,,,,|::::::: HTGET = 0.9.x local lame r00t exploit written by nekd0 of Unl0ck Research Team c .unl0ck research team 2004-2005. http://unl0ck.void.ru ................/^^^^''''|:::::::---- $shellcode = "\x31\xc0\x31\xdb\xb0\x17\xcd\x80"...
HTGET 0.9.x - Local Privilege Escalation
HTGET 0.9.x - Local Privilege Escalation !/usr/bin/perl ^^^^^^^^^^^^^^^^....,,,,|::::::: HTGET = 0.9.x local lame r00t exploit written by nekd0 of Unl0ck Research Team c .unl0ck research team 2004-2005. http://unl0ck.void.ru ................/^^^^''''|:::::::---- $shellcode =...
HTGET <= 0.9.x Local Root Exploit
Exploit for linux platform in category local exploits ================================= HTGET = 0.9.x Local Root Exploit ================================= !/usr/bin/perl ^^^^^^^^^^^^^^^^....,,,,|::::::: HTGET = 0.9.x local lame r00t exploit written by nekd0 of Unl0ck Research Team c .unl0ck...
Microsoft Windows Media Player 9.0 - ActiveX Control File Enumeration
source: https://www.securityfocus.com/bid/12032/info The Windows Media Player ActiveX control is prone to a security weakness that may allow a malicious Web page to enumerate files that exist on the client computer. This could aid in further attacks. This issue is reported to affect Windows Media...
glFTPd (Slackware 9.0/9.1/10.0) - Local Stack Overflow
/ glFTPd local stack buffer overflow exploit Proof of Concept Tested in Slackware 9.0 / 9.1 / 10.0 by CoKi No System Group - http://www.nosystem.com.ar / include include include define BUFFER 288 + 1 define PATH "/glftpd/bin/dupescan" char shellcode= "xb0x31xcdx80x89xc3x31xc0xb0x17xcdx80"...
[slackware-security] sox
New sox packages are available for Slackware 8.1, 9.0, 9.1, 10.0, and -current to fix buffer overflow security issues that could allow a malicious WAV file to execute arbitrary code. Here are the details from the Slackware 10.0 ChangeLog: Sat Aug 7 17:17:20 AKDT 2004...
Slackware 9.0, libpng correction
In the previous advisory for libpng SSA:2004-222-01, the URL provided for the Slackware 9.0 patch mistakenly pointed to the old unpatched package. Slackware 9.0 users should follow the URL below for the new package:...
Mandrake Linux Security Advisory : kdenetwork (MDKSA-2002:080)
The SuSE security team discovered two vulnerabilities in the KDE lanbrowsing service during an audit. The LISa network daemon and 'reslisa', a restricted version of LISa are used to identify servers on the local network by using the URL type 'lan://' and 'rlan://' respectively. A buffer overflow...
Mandrake Linux Security Advisory : leafnode (MDKSA-2003:005)
A vulnerability was discovered by Jan Knutar in leafnode that Mark Brown pointed out could be used in a Denial of Service attack. This vulnerability causes leafnode to go into an infinite loop with 100% CPU use when an article that has been crossposed to several groups, one of which is the prefix...
mc
New mc packages are available for Slackware 9.0, 9.1, and -current to fix security issues that These could lead to a denial of service or the execution of arbitrary code as the user running mc. Sites that use mc should upgrade to the new mc package. More details about this issue may be found in t...
CVE-2004-0064
The SuSEconfig.gnome-filesystem script for YaST in SuSE 9.0 allows local users to overwrite arbitrary files via a symlink attack on files within the tmp.SuSEconfig.gnome-filesystem.$RANDOM temporary directory...
GAIM security update
GAIM is a GTK2-based Instant Messaging IM client. New GAIM packages are available for Slackware 9.0, 9.1, and -current. 12 vulnerabilities were found in the instant messenger GAIM that allow remote compromise. All sites using GAIM should upgrade to these new packages. These are based on GAIM 0.75...