1429 matches found
openSUSE 10 Security Update : java-1_5_0-sun (java-1_5_0-sun-3832)
The Sun JAVA JDK 1.5.0 was upgraded to release 12 to fix various bugs, including the following security bugs : CVE-2007-2788 / CVE-2007-3004: Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit JDK, allows remote attackers to execute arbitrary code or cause a...
CVE-2007-4849
JFFS2, as used on One Laptop Per Child OLPC build 542 and possibly other Linux systems, when POSIX ACL support is enabled, does not properly store permissions during 1 inode creation or 2 ACL setting, which might allow local users to access restricted files or directories after a remount of a...
Code injection
The BMP image parser in Sun Java Development Kit JDK before 1.5.011-b03 and 1.6.x before 1.6.001-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.214 and earlier, and SDK and JRE 1.3.119 and earlier, when running on Unix/Linux systems,...
ftpd-ldpreload.pl.txt
FTP server GNU inetutils 1.4.2 Remote Root Exploit This program remotely exploits the most recent versions of GNU inetutils ftpd on linux systems. Requirements: 1. There MUST be a chroot'ed environment for the logged in user 2. Directory etc must be writeable by the logged in user duh! The exploi...
Invision Gallery <= 2.0.7 ReadFile() & SQL Injection Exploit (linux)
Exploit for unknown platform in category web applications ==================================================================== Invision Gallery 2.0.7 ReadFile & SQL injection exploit +-------------+ | Uzage: | +-------------+ + ReadFile: - syntax: readfile 1 readfile 2 // try it if readfile1 fail...
VMware vulnerability in NAT networking
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 VULNERABILITY SUMMARY A vulnerability has been discovered in vmnat.exe on Windows hosts and vmnet-natd on Linux systems. The vulnerability makes it possible for a malicious guest using a NAT networking configuration to execute unwanted code on the hos...
Ethereal <= 0.10.9 "3G-A11" Remote Buffer Overflow Exploit
Exploit for linux platform in category remote exploits ========================================================== Ethereal The CDMA2000 A11 protocol dissector packet-3g-a11.c has a stack overflow vulnerability when decoding Airlink records. This vulnerability was also discovered by Diego Giagio o...
iDEFENSE Security Advisory 02.21.05: Multiple Unix/Linux Vendor cURL/libcURL NTLM Authentication Buffer Overflow Vulnerability
Multiple Unix/Linux Vendor cURL/libcURL NTLM Authentication Buffer Overflow Vulnerability iDEFENSE Security Advisory 02.21.05: www.idefense.com/application/poi/display?id=202&type=vulnerabilities February 21, 2005 I. BACKGROUND cURL is a command line tool for transferring files with URL syntax,...
Knox Arkeia Server Backup 5.3.x Remote Root Exploit
Exploit for multiple platform in category remote exploits =================================================== Knox Arkeia Server Backup 5.3.x Remote Root Exploit =================================================== / Knox Arkiea Server Backup arkiead local/remote root exploit Targets for Redhat...
Speedtouch USB driver for linux format string bugs
Format string bug on syslog call...
Borland Interbase 7.x - Remote Buffer Overflow
Borland Interbase 7.x - Remote Buffer Overflow !/usr/bin/perl Priv8security com remote exploit for Borland Interbase 7.1 SP 2 and lower Public Version!!! Bug found by Aviram Jenik www.securiteam.com unixfocus 5AP0P0UCUO.html wsxz@localhost buffer$ perl priv8ibserverb.pl -h localhost -t 0 -=...
xwebTraversal10.txt
Donato Ferrante Application: xweb http://in.geocities.com/shamitbagchi Version: 1.0 Bug: directory traversal bug Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2. The bug 3...
Crafty Game Stack Overflow & Exploit
Copyright © Rosiello Security http://www.rosiello.org ADVISORY: http://www.rosiello.org/en/readbugs.php?18 BACKGROUND: by SecurityTracker EXPLOIT: http://www.rosiello.org/archivio/crafty.zip Impact: Execution of arbitrary code via local system, User access via local system Versions: 19.3 and prio...
problems with database files in 'SignatureDB'
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - File: LynX-adv4SignatureDB.txt Date: 15/02/2004 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - o NAME: problems with database files in...
[Full-Disclosure] Lame crash in qmail-smtpd and memory overwrite according to gdb, yet still qmail much better than windows
Georgi Guninski security advisory 65, 2004 Lame crash in qmail-smtpd and memory overwrite according to gdb, yet still qmail much better than windows Systems affected: qmail 1.03 on linux, don't know about other OSes. Risk: Unknown. maybe so, maybe no. Date: 15 January 2004 Legal Notice: This...
FAT32 directory auth bypass on Linux Abyssws < 1.2
Luigi Auriemma Application: Abyss webserver http://www.aprelium.com Versions: minors than 1.2 Platforms: Linux version only Bug: Bypassing of password protected folders authorization on FAT32 filesystems Risk: medium but rarely users use Linux to run a webserver on a FAT32 partition Exploitation:...
Real Server 7/8/9 Remote Root Exploit (Windows & Linux)
Exploit for multiple platform in category remote exploits ======================================================= Real Server 7/8/9 Remote Root Exploit Windows & Linux ======================================================= / / THCREALbad 0.4 - Wind0wZ & Linux remote root exploit / Exploit by:...
VMware Workstation 4.0.1 (for Linux systems) vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Description - ----------- The following products have a vulnerability that can allow a non-root user of the host system to delete files. VMware Workstation 4.0.1 for Linux systems build 5289 and earlier releases Details/Impact - -------------- By...
VMware GSX Server 2.5.1 / Workstation 4.0 (for Linux systems) vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Description - ----------- The following products have a vulnerability that can allow a user of the host system to start an arbitrary program with root privileges: VMware GSX Server 2.5.1 for Linux systems build 4968 and earlier releases VMware...
[Full-Disclosure] SRT2003-07-07-0913 - Abnormal suid behavior in several applications
Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...