CVE-2004-1193

Prevx Home 1.0 contains a local privilege escalation where administrators can bypass intrusion prevention by writing to \device\physicalmemory, which restores the running kernel’s original SDT ServiceTable. The vulnerability is triggered by direct memory access to the device memory, enabling esca...

Immunity Canvas: UT2004SECURE

Name| ut2004secure ---|--- CVE| CVE-2004-0608 Exploit Pack| CANVAS Description| ut2004 \secure\ Notes| CVE Name: CVE-2004-0608 VENDOR: Epic OSVDBURL: http://www.osvdb.org/7217 Notes: 'This has been tested largely against Windows XP Home.The exploit works regardless of "dedicated" mode.See...

[SIG^2 G-TEC] Prevx Home v1.0 Instrusion Prevention Features Can Be Disabled by Direct Service Table Restoration

SIG^2 Vulnerability Research Advisory Prevx Home v1.0 Instrusion Prevention Features Can Be Disabled by Direct Service Table Restoration by Tan Chew Keong Release Date: 22 Nov 2004 ADVISORY URL http://www.security.org.sg/vuln/prevxhome.html SUMMARY Prevx Home https://www.prevx.com is a...

GIMPS, SETI@home, ChessBrain weak permissions

Unprivileged user's file are executed with superuser privileges...

[ GLSA 200411-26 ] GIMPS, SETI@home, ChessBrain: Insecure installation

Gentoo Linux Security Advisory GLSA 200411-26 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-200411-26 : GIMPS, SETI@home, ChessBrain: Insecure installation

The remote host is affected by the vulnerability described in GLSA-200411-26 GIMPS, SETI@home, ChessBrain: Insecure installation GIMPS, SETI@home and ChessBrain ebuilds install user-owned binaries and init scripts which are executed with root privileges. Impact : This could lead to a local...

NetKit-telnetd: buffer overflows in telnet and telnetd

Background NetKit-telnetd is a standard Linux telnet client and server from the NetKit utilities. Description A possible buffer overflow exists in the parsing of option strings by the telnet daemon, where proper bounds checking is not applied when writing to a buffer. Additionaly, another possibl...

Home/Office Router Detection (HTTP)

Binary data 1607.prm...

Policy - SETI@HOME Client Detection

Binary data 1138.prm...

Fedora Core 2 : kdelibs-3.2.2-6 (2004-122)

iDEFENSE identified a vulnerability in the Opera Web Browser that could allow remote attackers to create or truncate arbitrary files. The KDE team has found that a similar vulnerability exists in KDE. A flaw in the telnet URL handler can allow options to be passed to the telnet program which can ...

FreeBSD : seti@home remotely exploitable buffer overflow (176)

The following package needs to be updated: setiathome %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg0e154a9c5d7a11d880e30020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

RHEL 2.1 : wu-ftpd (RHSA-2004:096)

An updated wu-ftpd package that fixes two security issues is now available. The wu-ftpd package contains the Washington University FTP File Transfer Protocol server daemon. FTP is a method of transferring files between machines. Glenn Stewart discovered a flaw in wu-ftpd. When configured with...

CVE-2004-0148

wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead...

DEBIAN-CVE-2004-0158

Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to 1 editor.c, 2 theme.c, 3 manager.c, 4 config.c, 5 game.c, 6 levels.c, or 7 main.c...

CVE-2004-0158

Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to 1 editor.c, 2 theme.c, 3 manager.c, 4 config.c, 5 game.c, 6 levels.c, or 7 main.c...

Emumail EMU Webmail 5.2.7 - nit.emu Information Disclosure

Emumail EMU Webmail 5.2.7 - nit.emu Information Disclosure source: https://www.securityfocus.com/bid/9861/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out cross-site scripting attacks and disclose the path to the victim's home directory...

Emumail EMU Webmail 5.2.7 - 'emumail.fcgi' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/9861/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out cross-site scripting attacks and disclose the path to the victim's home directory. The issues are reported to exist in the login script,...

CVE-2004-0158

Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to 1 editor.c, 2 theme.c, 3 manager.c, 4 config.c, 5 game.c, 6 levels.c, or 7 main.c...

CVE-2004-0158

Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to 1 editor.c, 2 theme.c, 3 manager.c, 4 config.c, 5 game.c, 6 levels.c, or 7 main.c...

wu-ftpd ftpaccess `restricted-uid'/`restricted-gid' directive may be bypassed

Glenn Stewart reports a bug in wu-ftpd's ftpaccess restricted-uid'/restricted-gid' directives: Users can get around the restriction to their home directory by issuing a simple chmod command on their home directory. On the next ftp log in, the user will have '/' as their root directory. Matt...