194 matches found
Matt Kruse Calendar Script 2.2 - Arbitrary Command Execution
source: https://www.securityfocus.com/bid/1215/info Matt Kruse's Calendar script is a popular, free perl cgi-script used by many websites on the Internet. It allows a website administrator to easily setup and customize a calendar on their website. There are two components of this package,...
FreeBSD 3.4 NetBSD 1.4.1 OpenBSD 2.6 - proc FileSystem
FreeBSD 3.4 NetBSD 1.4.1 OpenBSD 2.6 - proc FileSystem // source: https://www.securityfocus.com/bid/940/info Certain BSD derivative operating systems use an implantation of the /proc filesystem which is vulnerable to attack from malicious local users. This attack will gain the user root access to...
FreeBSD 3.4 / NetBSD 1.4.1 / OpenBSD 2.6 - '/proc' FileSystem
// source: https://www.securityfocus.com/bid/940/info Certain BSD derivative operating systems use an implantation of the /proc filesystem which is vulnerable to attack from malicious local users. This attack will gain the user root access to the host. The proc file system was originally designed...
SGI IRIX 6.2 - midikeyssoundplayer Local Privilege Escalation
SGI IRIX 6.2 - midikeyssoundplayer Local Privilege Escalation !/bin/sh source: https://www.securityfocus.com/bid/909/info SGI's Irix operating system ships with an X11 application called 'soundplayer' which is used to play .WAV files. It is not setuid root by itself, but can inherit root privileg...
CVE-1999-0062
The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage...
CVE-1999-0190
Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access...
CVE-1999-0369
The Sun sdtcmconvert calendar utility for OpenWindows has a buffer overflow which can gain root access...
solaris-mkcookie.txt
RSI.0012.12-03-98.SOLARIS.MKCOOKIE |:::. |::::: |::::. |::::: |::::: |::::. .. :: .. .. :: .. .. .. :: |:::: |:::: |:::: :::::: |::::: |:::: |: |: :: |: |: |:: |: |: :: |: :: |::::: |: |::::: |::::: |::::: Repent Security Incorporated, RSI http://www.repsec.com RSI ALERT ADVISORY --- CREDIT...
CDomain whois_raw.cgi fqdn Parameter Arbitrary Command Execution
The remote host appears to be using the CdomainFree 'whoisraw.cgi' script. This CGI script allows an attacker to view any file on the target computer, as well as to execute arbitrary commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
CVE-1999-0243
Linux cfingerd could be exploited to gain root access...
CVE-1999-0263
Solaris SUNWadmap can be exploited to obtain root access...
CVE-1999-0190
Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access...
SGI IRIX 6.2 - 'libgl.so' Local Buffer Overflow
/ source: https://www.securityfocus.com/bid/1527/info Certain versions of IRIX ship with a version libgl.so which is vulnerable to buffer overflow attacks. This library, libgl.so, is used in conjunction with graphical programs which use OpenGL. As a result a number of programs which utilize...