Очередной обзор новостей Linux

No description provided...

Очередной обзор новостей linux

No description provided...

WDK_v1.0.vuln.txt

../ bugs in the Java Web server Development kit built in servlet engine http://localhost:8080/../../../../etc/passwd below is my version info. JavaServertm WDK v1.0 EA elguapo@localhost elguapo$ telnet localhost 8080 Trying 127.0.0.1... Connected to localhost.localdomain. Escape character is '^'...

User-Mode Linux (Linux Kernel 2.4.17-8) - Memory Access Privilege Escalation

User-Mode Linux Linux Kernel 2.4.17-8 - Memory Access Privilege Escalation source: https://www.securityfocus.com/bid/3973/info User-Mode Linux UML is a patch which allows the Linux Kernel to run as a user space process. It is currently available for the Linux operating system. It may be used as a...

Linux news 25.08.00

Linux 2.2.17pre20 Вышла новая pre-версия следующего стабильного ядра Linux: 2.2.17pre20. Список изменений пока не попался мне на глаза. Подробнее: ftp://ftp.kernel.org/pub/linux/kernel/people/alan/2.2.17pre/ Linux-2.4.0-test7 Вышло новое "нестабильное" ядро Linux: Linux-2.4.0-test7. Подробнее:...

Linux news 11.08.00

FOR ALL Ну вот ... вот и кончился отпуск ! : И начались суровы будни. Все как и раньше: рассылка переходит из спящего режима в обычный, регулярный ритм ... ну или подобие тому : В общем всем жаркого лета, теплого пЫва и ... Ядро 2.2.17pre16 В очередной бета версии следующего стабильного ядра ветк...

sperl 5.00503 (and newer ;) exploit

Not much to say except I feel little bit stupid posting it ... This exploit gives instant root, at least on RedHat 6.x/7.0 Linux boxes I have available for tests... And for sure, all other systems are vulnerable as well - it's just maybe this code will need some refining / tuning / minor changes...

Linux news 3.07.00

WU-FTPD 2.6.1 Вышла новая версия популярного FTP сервера WU-FTPD - WU-FTPD 2.6.1. В данной версии появилась поддержка virtual passwd/virtual shadow как в BeroFTPD. Кроме того пофиксен серьезный security баг, благодаря которому пользователь мог получить права root-а. Также пофиксен баг с возможной...

Очередной обзор новостей linux

No description provided...

`sniffit -L mail' vulnerabilities

------- sniffit -L mail' vulnerabilities : oldies but goodies ------- ----------------------- MaXX [email protected] ----------------------- -- 0x00 - Sniffit ---------------------------------------------------- Sniffit is a packet sniffer, written by Brecht Claerhout [email protected]. The...

Linux news 20.04.00

The GUI Toolkit, Framework Page Страничка сравнительного анализа средств библиотек построения пользовательского интерфейса: The GUI Toolkit,Framework Page Подробнее: http://atai.org/guitool/ gtk для MacOS В списке рассылки gtk-list появилось сообщение, что gtk портируется на MacOS порты gtk...

Apple WebObjects Developer NT4 IIS4.0 CGI-adapter 4.5 - Developer Remote Overflow

source: https://www.securityfocus.com/bid/1896/info A denial-of-service vulnerability exists in Apple's WebObjects 4.5 Developer, a popular platform for developing web-based applications. The vulnerable version is Windows NT 4.0 SP5, when run in conjunction with the CGI-adapter and IIS 4.0. An HT...

omnis.txt

I'm not sure of the complete extent of applications written in Omnis, but from what I understand, it's a multi-platform Rapid Application Development environment. Essentially, from what I understand having no personal experience with the product, you create one program in Omnis, and it's portable...

windows.arp.DoS.txt

Date: Mon, 12 Apr 1999 13:59:54 +0200 From: Joel Jacobson To: [email protected] Subject: ARP problem in Windows9X/NT Hello all bugtraqers! I've found a problem in Windows9X/NT's way of handeling ARP packets. If you flood a computer at your LAN with the packet below, it's user will be forced to...

PHP/FI 1.0/FI 2.0/FI 2.0 b10 - mylog/mlog

source: https://www.securityfocus.com/bid/713/info The PHP/FI package which was originally written by Rasmus Lerdorf is an is an HTML-embedded scripting language. Much of its syntax is borrowed from C, Java and Perl with a couple of unique PHP-specific features thrown in. The goal of the language...

PT-1996-1030 · Oracle +1 · Java Applet Security Manager +2

Name of the Vulnerable Software and Affected Versions: Netscape Navigator version 2.0 Java Developer's Kit version 1.0 Description: The issue concerns the Java Applet Security Manager implementation, which allows an applet to connect to arbitrary hosts. Recommendations: For Netscape Navigator...

CVE-2023-4610

Removed by vendor...

CVE-2023-4610

CVE-2023-4610 is discussed across multiple connected sources as a Linux kernel issue centered on a use-after-free in radix_tree_lookup. Red Hat describes a local crash and potential information leak in the kernel; PT-2023-5746 reiterates a fix path: upgrade Linux kernel to 6.4+ or apply patches, ...

PT-2010-5666 · Suse +2 · Suse Linux Enterprise +5

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise versions prior to 2.6.39.4 btrfs-kmp-xen affected versions not specified btrfs-kmp-pae affected versions not specified kernel-desktop-devel affected versions not specified Description: The issue allows local users to...

Microsoft StreamInsight 1.2 (KB2587551)

This update is the Microsoft StreamInsight 1.2 release. It is installed side by side with your existing StreamInsight installation. It contains the SDK to develop applications and adapters, runtime libraries, and the event flow debugger. Read the Installation and Programming Considerations sectio...