HPLIP hpssd.py From Address Arbitrary Command Execution

This module exploits a command execution vulnerable in the hpssd.py daemon of the Hewlett-Packard Linux Imaging and Printing Project. According to MITRE, versions 1.x and 2.x before 2.7.10 are vulnerable. This module was written and tested using the Fedora 6 Linux distribution. On the test system...

ZeroShell <= 1.0beta11 Remote Code Execution Vulnerability

No description provided by source. ==================================================== ZeroShell = 1.0beta11 Remote Code Execution Original Advisory: http://www.ikkisoft.com/stuff/LC-2009-01.txt luca.carettoniatikkisoftdotcom ==================================================== ZeroShell...

ZeroShell <= 1.0beta11 Remote Code Execution

======================================================================== ZeroShell = 1.0beta11 Remote Code Execution ======================================================================== Affected Software: ZeroShell = 1.0beta11 Severity: High Local/Remote: Remote Author: Luca Carettoni -...

ZeroShell 1.0beta11 - Remote Code Execution

ZeroShell 1.0beta11 - Remote Code Execution ==================================================== ZeroShell ;%22 In addition to the Unix commands, it is possible to abuse the ZeroShell scripts themself. For instance it is likely to use the "getkey" script in order to retrieve remote files, includi...

ZeroShell Code Execution

======================================================================== ZeroShell /cgi-bin/kerbynet?Section=NoAuthREQ&Action=x509List&type=user The parameter "type" is used to distinguish between users, CA and host certificates. Unfortunately, this parameter is passed to the following code wi...

ZeroShell 1.0beta11 - Remote Code Execution

==================================================== ZeroShell ;%22 In addition to the Unix commands, it is possible to abuse the ZeroShell scripts themself. For instance it is likely to use the "getkey" script in order to retrieve remote files, including the content in the html page. HTTP REQUES...

ZeroShell <= 1.0beta11 Remote Code Execution Vulnerability

Exploit for hardware platform in category remote exploits ========================================================== ZeroShell ;%22 In addition to the Unix commands, it is possible to abuse the ZeroShell scripts themself. For instance it is likely to use the "getkey" script in order to retrieve...

libpng vulnerability

The remote host is probably affected by the vulnerabilities described in CVE-2008-1382 Impact libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a PNG...

iDefense Security Advisory 06.26.07: Multiple Vendor Kerberos kadmind Rename Principal Buffer Overflow Vulnerability

Multiple Vendor Kerberos kadmind Rename Principal Buffer Overflow Vulnerability iDefense Security Advisory 06.26.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 26, 2007 I. BACKGROUND Kerberos is a network authentication protocol used in client-server systems to provide user...

OS Identification : Linux Distribution

This plugin attempts to identify the operating system type and version by looking at certain files on the remote operating system e.g., '/etc/redhat-release' on Red Hat. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid25335;...

[SA15763] Novell NetMail File Ownership Security Issue

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Apache Banner Linux Distribution Disclosure

Nessus was able to extract the banner of the Apache web server and determine which Linux distribution the remote host is running. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid18261; scriptversion"1.102";...

[Full-Disclosure] SoX buffer overflows when handling .WAV files

SoX buffer overflows when handling .WAV files I have found two buffer overflows in SoX. They occur when the sox or play commands handle malicious .WAV files. The overflows have the identifier CAN-2004-0557. Versions 12.17.4, 12.17.3 and 12.17.2 are vulnerable to these overflows. Vulnerable versio...

gpm-root fails to correctly release GID 0 membership for user defined menus

Overview gpm-root does not properly drop group privileges. Local users can gain group privileges by starting a utility from gpm-root. The gpm package is usually included in Linux distributions, and can be started from the command line or in the startup script /etc/rc.d/rc.local. Description gpm...

Linux news 27.10.00

В продаже коробочные Linux-приложения Если большинство компаний, создающих Linux-ПО, нацелено на рынок серверных систем, то Chilliware кинулась в омут неизведанного настольного бизнеса. Подробнее: http://www.zdnet.ru/news.asp?ID=1910 Вышел Netscape Communicator 4.76 Вышла новая версия, за номером...

GnoRPM local /tmp vulnerability

While fixing other problems with the gnorpm package a locally exploitable security hole was found where a normal user could trick root running GnoRPM into writing to arbitary files due to a bug in the gnorpm tmp file handling. A new release of GnoRPM 0.95.1 is now available. This fixes significan...

Linux news 25.09.00

Linux Kernel 2.2.18pre10 Вешел десятый пререлиз нового ядра Linux - Linux Kernel 2.2.18. Подробнее: http://www.cs.helsinki.fi/linux/linux-kernel/2000-38/1086.html Linux Kernel pre-patch 2.4.0 test9-pre6 Новый, шестой по счету, пререлиз девятого тестового ядра Linux Kernel 2.4.0. Подробнее:...

Linux news 16.06.00

SCO планирует выпускать свой собственный дистрибутив Linux. По-моему сейчас не делает свои дистрибутивы Linux только ленивый. Лучше бы был один, но отличный. Подробнее: http://slashdot.org/articles/00/06/13/127228.shtml Интервью с Аланом Коксом На LinuxJournal выложено интервью с одним из главных...

KDE 1.11.1.11.22.0 kscd - SHELL Environmental Variable

KDE 1.11.1.11.22.0 kscd - SHELL Environmental Variable source: https://www.securityfocus.com/bid/1206/info Some linux distributions S.u.S.E. 6.4 reported ship with kscd a CD player for the KDE Desktop sgid disk. kscd uses the contents of the 'SHELL' environment variable to execute a browser. This...

KDE 1.1/1.1.1/1.2/2.0 kscd - SHELL Environmental Variable

source: https://www.securityfocus.com/bid/1206/info Some linux distributions S.u.S.E. 6.4 reported ship with kscd a CD player for the KDE Desktop sgid disk. kscd uses the contents of the 'SHELL' environment variable to execute a browser. This makes it possible to obtain a sgid 'disk' shell. Using...