PT-2014-3667 · Adobe +3 · Air Sdk & Compiler +6

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions prior to 11.7.700.269 Adobe Flash Player versions 11.8.x through 12.0.x before 12.0.0.70 Adobe Flash Player version prior to 11.2.202.341 on Linux Adobe AIR version prior to 4.0.0.1628 on Android Adobe AIR SDK...

U.S. Defense Information Systems Agency (DISA) Unix Security Readiness Review (SRR) root compromise / VU#433821

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Executive Summary - ----------------- Unprivileged local users can obtain root access on Unix systems where the DISA SRR scripts are run. If a remote user can introduce a file into the filesystem e.g. anonymous ftp, http upload, cdrom, samba share,...

kernel Race condition in mincore can cause "ps -ef" to hang

The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock...

PT-2006-2847 · Linux · Linux

Name of the Vulnerable Software and Affected Versions: Linux versions prior to 2.6.17 Description: A directory traversal issue in the CIFS implementation allows local users to bypass chroot restrictions on an SMB-mounted filesystem by utilizing ".." sequences. Recommendations: For Linux versions...

CVE-2005-2876

umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r remount option, which causes the file system to be remounted with just the read-only flag, which effectively clears the...

SUSE-SA:2005:037: RealPlayer

The remote host is missing the patch for the advisory SUSE-SA:2005:037 RealPlayer. Various security problems were found in RealPlayer that allow a remote attacker to execute code in the local player by providing handcrafted files. See http://service.real.com/help/faq/security/050623player/EN/ too...

SUSE-SA:2005:041: php/pear XML::RPC

The remote host is missing the patch for the advisory SUSE-SA:2005:041 php/pear XML::RPC. A bug in the PEAR::XMLRPC library allowed remote attackers to pass arbitrary PHP code to the eval function. The updated php packages fix the XML::RPC bug, however several third party PHP packages include a...

CVE-2004-0814

Multiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow 1 local users to obtain portions of kernel data via a TIOCSETD ioctl call to a terminal interface that is being accessed by another thread, or 2 remote attackers to cause a denial of service panic by...

wget18x.txt

--LQksG6bCIzRHxTLp Content-Type: text/plain; charset=iso-8859-2 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable ------------------------------------------------------------------------ Summary ------------------------------------------------------------------------ Product...

Citadel/UX 6.23 - Remote USER Directive

/ Citadel/UX remote exploit By nebunu: pppppppal at yahoo dot com This is the version which contains targets,abuse it kiddies Bruteforce: You only have 4096/4=1024 tries. The magic offset lies about 2048 + or - 4,8,16....256 So practically speaking you have maximum 256 tries. Greetings:...

[Full-Disclosure] LHa buffer overflows and directory traversal problems

LHa buffer overflows and directory traversal problems PROGRAM: LHa Unix version VENDOR: various people VULNERABLE VERSIONS: 1.14d to 1.14i 1.17 Linux binary possibly others IMMUNE VERSIONS: 1.14i with my patch applied 1.14h with my patch applied LHa 1.14:...

Immunity Canvas: SAMBA_TRANS2

Name| sambatrans2 ---|--- CVE| CVE-2003-0201 Exploit Pack| CANVAS Description| sambatrans2 Notes| References: http://www.redhat.com/support/errata/RHSA-2003-137.html CVE Name: CVE-2003-0201 VENDOR: Samba Date public: Apr 07, 2003 CERT Advisory: Versions Tested: Red Hat Linux release 8.0 Psyche:...

rsync <= 2.5.1 Remote Exploit

No description provided by source. / 7350fuqnut - rsync include include include include include include include include include define MAXPATHLEN 4096 define VERSION "@RSYNCD: 26\n" define PORT 873 define NULLOFFSET -48 define STARTNULLBRUTE -44 define ENDNULLBRUTE -56 define BRUTEBASE 0xbfff7777...

Переполнение буфера в gzip некоторых версий linux

Переполнение буфера при длинном аргументе. Многие серверные и suid программы импользуют gzip...

CVE-2001-1384

ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, such as newgrp...

CVE-1999-0414

In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection...

[SECURITY] New versions of epic4 fixes possible DoS vulnerability

Debian Security Advisory [email protected] http://www.debian.org/security/ Martin Schulze August 26, 1999 We have received a report from the author of epic4 covering a denial of service vulnerability. All versions of epic4 between version pre1.034 including and version pre2.004-19990718 excludi...

vmware.bof.txt

Date: Fri, 25 Jun 1999 19:18:35 -0700 From: Jason R. Rhoads To: [email protected] Subject: VMware Security Alert "On June 22nd, 1999, VMware, Inc. was notified of a security problem with VMware for Linux 1.0.1. This security hole is also present in all previous versions of VMware for Linux. Th...

PT-1999-1114 · Linux · Linux

Name of the Vulnerable Software and Affected Versions: Linux versions 2.2.3 and earlier Description: The issue allows a remote attacker to perform an IP fragmentation attack, causing a denial of service. Recommendations: For Linux versions 2.2.3 and earlier, at the moment, there is no information...

[SECURITY] New versions of gzip available

We were told by Michal Zalewski that gzexe as shipped with gzip uses an unsecure method decompressing executables on the fly opening a way of calling arbitrary programs. Newer versions for bo and hamm are fixing this. We recommend you upgrade your gzip package if youre using the gzexe method. dpk...