Syscall timing attacks in multiple systems

By timing system calls it's possible to check file existance...

linux kmod/ptrace bug - details

Hello There are many discussions on slashdot for example on the recent linux ptrace & kmod bug. I'll try to clarify what is this all about. It's a local root vulnerability. It's exploitable only if: 1. the kernel is built with modules and kernel module loader enabled and 2...

TANne 0.6.17 - Session Manager SysLog Format String

TANne 0.6.17 - Session Manager SysLog Format String // source: https://www.securityfocus.com/bid/6553/info TANne is a freely available, open source session management package. It is available for Unix and Linux operating systems. Due to programming error, it may be possible to exploit a format...

CVE-2002-1190

Cisco Unity 2.x and 3.x uses well-known default user accounts, which could allow remote attackers to gain access and place arbitrary calls...

CVE-2002-1190

Cisco Unity 2.x and 3.x uses well-known default user accounts, which could allow remote attackers to gain access and place arbitrary calls...

CVE-2002-1190

CVE-2002-1190 : Cisco Unity 2.x and 3.x are affected by use of well-known default user accounts, which could allow remote attackers to gain access and place arbitrary calls. The available sources state this description without detailing exact affected versions beyond the 2.x/3.x range or any spec...

CVE-2002-1190: Undefined Security Weakness

Cisco Unity 2.x and 3.x uses well-known default user accounts, which could allow remote attackers to gain access and place arbitrary calls...

CVE-2002-0973

Integer signedness error in several system calls for FreeBSD 4.6.1 RELEASE-p10 and earlier may allow attackers to access sensitive kernel memory via large negative values to the 1 accept, 2 getsockname, and 3 getpeername system calls, and the 4 vesa FBIOGETPALETTE ioctl...

CVE-2002-0973

The CVE-2002-0973 entry describes an integer signedness error in FreeBSD 4.6.1 RELEASE-p10 and earlier affecting the (1) accept, (2) getsockname, (3) getpeername system calls, and (4) vesa FBIO_GETPALETTE ioctl. This vulnerability can allow attackers to access sensitive kernel memory by supplying...

CVE-2002-0973

Integer signedness error in several system calls for FreeBSD 4.6.1 RELEASE-p10 and earlier may allow attackers to access sensitive kernel memory via large negative values to the 1 accept, 2 getsockname, and 3 getpeername system calls, and the 4 vesa FBIOGETPALETTE ioctl...

FreeBSD-SA-02:38.signed-error

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:38.signed-error Security Advisory The FreeBSD Project Topic: Boundary checking errors involving signed integers Category: core Module: sys Announced: 2002-08-19 Credits:...

Multiple bugs in CDE ToolTalk

Incomplete input validation in different remote calls...

CVE-2002-0526

Vulnerability in 1 inews or 2 rnews for INN 2.2.3 and earlier, related to insecure open calls...

ENTERCEPT RICOCHET ADVISORY: Multi-Vendor CDE ToolTalk Database Server Remote Buffer Overflow Vulnerability

ENTERCEPT RICOCHET ADVISORY Date: Monday, August 12, 2002 Issue: Multi-Vendor CDE ToolTalk Database Server Remote Buffer Overflow Vulnerability DETAILS: The ToolTalk component allows applications to communicate with each other via remote procedure calls RPC across different hosts and platforms. T...

CVE-2002-0526

Vulnerability in 1 inews or 2 rnews for INN 2.2.3 and earlier, related to insecure open calls...

CVE-2002-0526

CVE-2002-0526 describes a vulnerability in the INN components (1) inews or (2) rnews for INN versions 2.2.3 and earlier, caused by insecure open() calls. The NVD metrics indicate a LOCAL attack with LOW complexity and no authentication, and potential COMPLETE impact on confidentiality, integrity,...

CVE-2002-0526: Undefined Security Weakness

Vulnerability in 1 inews or 2 rnews for INN 2.2.3 and earlier, related to insecure open calls...

mod_python imported modules inderect calls

It's possible to inderectly call unsafe function via imported module...

CVE-2001-1253: Undefined Security Weakness

Alexis 2.0 and 2.1 in COM2001 InternetPBX stores voicemail passwords in plain text in the com2001.ini file, which could allow local users to make long distance calls as other users...

Blahz-DNS 0.2 - Direct Script Call Authentication Bypass

source: https://www.securityfocus.com/bid/4618/info Blahz-DNS is a web based management tool for DNS information. It is implemented in PHP, and available for Linux systems. By directly calling scripts included with Blahz-DNS, it is possible to bypass the authentication check, gaining full access ...