codeblue remote root

/ Demonstration linux-x86 remote root against codeblue v1.1 from file header Otherwise it's known as CodeBlue v4 This is a rather trivial to exploit... From getsmtpreply "We'll loop infinately, receiving 1 byte at a time until we receive a carriage return or line-feed character, signifying the en...

[ARL02-A02] DCP-Portal Root Path Disclosure Vulnerability

+/--------------- ALPER Research Labs -----/--------/+ +/--------------- Security Advisory ----/---------/+ +/--------------- ID: ARL02-A02 ---/----------/+ +/--------------- [email protected] --/-----------/+ Advisory Information -------------------- Name : DCP-Portal Root Path Disclosure...

Chinput 3.0 - Environment Variable Buffer Overflow

// source: https://www.securityfocus.com/bid/3896/info Chinput is an input server designed for Chinese characters. It is available on Linux and other Unix based systems. Chinput appears to be installed suid root by default. A vulnerability exists in Chinput. A local user with an extremely long HO...

Sudo 1.6.3 - Unclean Environment Variable Privilege Escalation

source: https://www.securityfocus.com/bid/3871/info Sudo is a freely available, open source permissions management software package available for the Linux and Unix operating systems. It is maintained by Todd C. Miller. Under some circumstances, sudo does not properly sanitize the environment it...

Sudo 1.6.3 - Unclean Environment Variable Privilege Escalation

Sudo 1.6.3 - Unclean Environment Variable Privilege Escalation source: https://www.securityfocus.com/bid/3871/info Sudo is a freely available, open source permissions management software package available for the Linux and Unix operating systems. It is maintained by Todd C. Miller. Under some...

CDRDAO 1.1.x - Home Directory Configuration File Symbolic Link (3)

source: https://www.securityfocus.com/bid/3865/info CDRDAO is a freely available, open source CD recording software package available for the Unix and Linux Operating Systems. It is maintained by Andreas Mueller. When CDRDAO saves it's configuration to the .cdrdao file in a user's home directory,...

Проблемы с encrypted loop device под linux (data injection)

Данные предохраняются от несанкционированного доступа, но возможно несанкционированное добавление данных...

Sudo 1.6.x - Password Prompt Heap Overflow

Sudo 1.6.x - Password Prompt Heap Overflow // source: https://www.securityfocus.com/bid/4593/info Sudo is a widely used Linux/Unix utility allow users to securely run commands as other users. Sudo is vulnerable to a heap overflow condition related to it's customizable password prompt feature. The...

Security Update: [CSSA-2001-037.0] Linux - libdb buffer overflow problem

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Caldera International, Inc. Security Advisory Subject: Linux - libdb buffer overflow problem Advisory number: CSSA-2001-037.0 Issue date: 2001, October 30 Cross reference: 1. Problem Description Due to a configuration mistake in the libdb1 package...

CVE-1999-1166

Linux 2.0.37 does not properly encode the Custom segment limit, which allows local users to gain root privileges by accessing and modifying kernel memory...

CVE-1999-1173

Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, which allows local users to 1 modify Word Perfect behavior by modifying files in the working directory, or 2 modify files of other users via a symlink attack...

qpopper and pam.d

Hello, Take a look at the two sessions I have with Qpopper on a Redhat Linux 7.x box from an RPM package of version 4.0.1. Existing account: root@bart /etc telnet 10.10.10.1 110 Trying 10.10.10.1... Connected to 10.10.10.1. Escape character is '^'. +OK ready [email protected] user...

Security Update: [CSSA-2001-026.0] Linux - docview local httpd exploit

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Caldera International, Inc. Security Advisory Subject: Linux - docview local httpd exploit Advisory number: CSSA-2001-026.0 Issue date: 2001, July 17 Cross reference: 1. Problem Description Docview is a set of CGI scripts providing documentation over...

CVE-2001-1245

Opera 5.0 for Linux does not properly handle malformed HTTP headers, which allows remote attackers to cause a denial of service, possibly with a header whose value is the same as a MIME header name...

Проблема с подменой памяти suid-процесса в linux (memory spoofing)

Закрыв fd 0, затем открыв его как /proc/PID/mem, и сместившись по нужному адресу, можно вызвать внешнюю suid-программу, можно "заслать" вызванному процессу на стандартный ввод данные из его собственной памяти...

CVE-2000-0315

traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks...

GLIBC 2.1.3 - LD_PRELOAD Local Privilege Escalation

GLIBC 2.1.3 - LDPRELOAD Local Privilege Escalation !/bin/tcsh przyklad wykorzystania dziury w LDPRELOAD shadow tested on redhat 6.0, should work on others if -e /etc/initscript echo uwaga: /etc/initscript istnieje cd /lib umask 0 setenv LDPRELOAD libSegFault.so setenv SEGFAULTOUTPUTNAME...

Itetris 1.6.11.6.2 - Privileged Arbitrary Command Execution

Itetris 1.6.11.6.2 - Privileged Arbitrary Command Execution // source: https://www.securityfocus.com/bid/2139/info Itetris, or "Intelligent Tetris", is a clone of the popular Tetris puzzle game for linux systems. The svgalib version of Itetris is installed setuid root so that it may access video...

LPRng 3.6.22/23/24 Remote Root Exploit

Exploit for linux platform in category remote exploits ====================================== LPRng 3.6.22/23/24 Remote Root Exploit ====================================== / LPRng remote root exploit for x86 Linux 9/27/00 - sk8 tested on compiled LPRng 3.6.22/23/24 / include include char sc=...

LPRng (RedHat 7.0) - lpd Format String

LPRng RedHat 7.0 - lpd Format String / Copyright c 2000 - Security.is The following material may be freely redistributed, provided that the code or the disclaimer have not been partly removed, altered or modified in any way. The material is the property of security.is. You are allowed to adopt th...