dislocate 1.3 - Local i386

/ MasterSecuritY dislocate.c - Local i386 exploit in v1.3 Updated versions of this exploit and the corresponding advisory will be made available at: ftp://maxx.via.ecp.fr/dislocate/ This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public...

Re: [MSY] S(ecure)Locate heap corruption vulnerability

On Sun, Nov 26, 2000 at 11:38:25PM +0100, Michel Kaempf wrote: The author, Kevin Lindsay, was contacted and confirmed Secure Locate v2.3 is not affected by the vulnerability described in this advisory. Every Secure Locate version, from 1.4 included to 2.2 included, is affected by the problem, and...

[MSY] S(ecure)Locate heap corruption vulnerability

--------------- MasterSecuritY www.mastersecurity.fr --------------- ------------ SecureLocate heap corruption vulnerability ------------ ---------- By Michel "MaXX" Kaempf [email protected] ---------- -- 0x00 - Table of contents ------------------------------------------ 0x01 - Overview 0x0...

CVE-2000-0602

CVE-2000-0602 affects Secure Locate (slocate) in Red Hat Linux. Local users can gain privileges through a malformed configuration file referenced by the LOCATE_PATH environment variable, due to improper handling of the config file. The CVSS base score is 4.6 (Medium) with local attack vector and ...

CVE-2000-0602

Secure Locate slocate in Red Hat Linux allows local users to gain privileges via a malformed configuration file that is specified in the LOCATEPATH environmental variable...

CVE-2000-0602: Undefined Security Weakness

Secure Locate slocate in Red Hat Linux allows local users to gain privileges via a malformed configuration file that is specified in the LOCATEPATH environmental variable...

Linux news 11.09.00

Linux 2.2.18pre4 Linux 2.2.18pre4 has been released. Подробнее: www.kernel.org Linux Kernel 2.4.0-test8 Вышло новое, восьмое по счету, тестовое ядро Linux - Linux Kernel 2.4.0-test8. Подробнее: http://www.cs.helsinki.fi/linux/linux-kernel/2000-36/1271.html Openwall Linux kernel patch 2.2.17-ow1...

CVE-2000-0602

Secure Locate slocate in Red Hat Linux allows local users to gain privileges via a malformed configuration file that is specified in the LOCATEPATH environmental variable...

ftpd.locate.findutils.txt

Date: Fri, 30 Apr 1999 11:07:20 +0300 From: Sergey V. Kolychev To: [email protected] Subject: Buffer overflow in ftpd and locate bug Hi. I had problem with locate from findutils-4.1.24.rpm from Redhat-5.1 It segfaults if we have huge directory at incoming ftp which created by exploits for ftpd...