DEBIAN-CVE-2003-0489

tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets, which may allow local users to gain access to the descriptor via a separate vulnerability in tcptraceroute...

Moderate: Red Hat Security Advisory: tcpdump security update

Updated tcpdump packages that fix an infinite loop vulnerability and drop privileges on startup are now available. Tcpdump is a command-line tool for monitoring network traffic. A vulnerability exists in tcpdump before 3.7.2 and is related to an inability to handle unknown RADIUS attributes...

DEBIAN-CVE-2002-1311

Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files...

ASI Sybase Security Alert: Buffer overflow in DROP DATABASE

Sybase Adaptive Server buffer overflow in DROP DATABASE http://www.appsecinc.com/resources/alerts/sybase/02-0002.html To determine if you should apply this hot fix, download AppDetective for Sybase from http://www.sybasesecurity.net/products/appdetective/sybase/. Risk level: High Threat: Allows a...

Multiple Sybase buffer overflows

Buffer overflows in xpfreedll, DROP DATABASE, DBCC CHECKVERIFY...

perl getpwuid problem

Getpwuid call doesn't clode /etc/shadow, it leaves the possibility to access file descriptor after privelege are dropped...

FreeBSD ktrace problem

It's possible to obtain sensitive data from suid process's memory after dropping privileges...

procmail heap overflow

hi, i found a heap overflow in procmail up until latest some time ago. flatline@intra:/usr/bin$ ls -la procmail -rwsr-xr-x 1 root mail 64344 Jun 3 2001 procmail flatline@intra:/usr/bin$ ./procmail perl -e 'print "A"x10240'=A procmail: Exceeded LINEBUF Segmentation fault flatline@intra:/usr/bin$ a...

Interbase 6.0 - GDS_Drop Interbase Environment Variable Buffer Overflow (1)

source: https://www.securityfocus.com/bid/5044/info Interbase is a database distributed and maintained by Borland. It is available for Unix and Linux operating systems. A buffer overflow has been discovered in the gdsdrop program packaged with Interbase. This problem could allow a local user to...

CVE-1999-1326

wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR abort file transfer command is executed during a file transfer, which causes a signal to be handled incorrectly and allows local and possibly remote attackers to read arbitrary files...

CVE-1999-1326

Wu-FTPD ABOR privilege escalation (CVE-1999-1326) affects the wu-ftpd server. The vulnerability arises when handling an ABOR after a data connection has closed, due to a flaw in the dologout() path that can allow a remote attacker to gain elevated privileges (potentially root). Exploitation could...

CVE-2001-0559

crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error...

IBM AIX nslookup fails to drop root privileges

Overview The nslookup command fails to drop privileges, allowing local attackers to gain root privileges. Description The nslookup program fails to drop the privileges it gains from being setuid. This access appears to be needed to read the "/etc/resolv.conf" file. This problem was described in I...

CVE-1999-1165

GNU fingerd 1.37 is affected. The flaw is failure to drop privileges before accessing user information, enabling local attackers to (1) gain root via a malicious .fingerrc and (2) read arbitrary files via .plan/.forward/.project symbolic links. No patch/version or remediation is specified in the ...

MS Windows Media Player ASF Marker Buffer Overflow

I dunno if I've sent this before. If you embed a marker long enough in an .ASF video file you can make WMP crash when a victim clicks the marker drop down list under the file during playback. Use ASFCHOP.EXE to embed the following script to any ASF file: ----8----cut-here-----8---- startmarkertab...

CVE-2001-0411

Reliant Unix 5.44 and earlier allows remote attackers to cause a denial of service via an ICMP port unreachable packet, which causes Reliant to drop all connections to the source address of the packet...

Дырка в vixie cron (privelege drop failure)

При определенных условиях при выполнении задач не сбрасываются привилегии root...

CVE-2000-0896

WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, which causes the firewall to drop connections and stop forwarding packets...

Дырка в sendfile (privelege drop)

Не сбрасываются повышенные привилегии...

X4000 DoS: Details and workaround

System affected: --------------- BinTec X4000 Router All firmware versions as far as I know, only verified with latest release 5.1.6 Patch 10 Machines with activated additional VPN software license are NOT affected, neither are machines which filter 1723/tcp. Description: ----------- As mentioned...