Microsoft DLL Load Remote Code Execution Vulnerability

Microsoft Windows and Internet Explorer IE are both products of Microsoft Corporation, U.S.A. Windows is a family of operating systems.IE is a Web browser that is the default browser that comes with Windows operating systems. A remote code execution vulnerability exists in Microsoft Windows and I...

BMC Software Patrol <= 3.2.5 Patrol SNMP Agent File Creation/Permission Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/525/info Patrol 3.2, installed out of the box, allows for a local root compromise or denial of service. The vulnerability lies in the creation of a file by snmpagnt that is owned by the owner of the parent directory of th...

Solaris <= 2.5.1 kcms Buffer Overflow Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/452/info There is an unchecked sprintf call in the versions of /usr/openwin/bin/kcmsconfigure shipped with solaris 2.5, 2.5.1 and 2.6. Unfortunately, kcmsconfigure is installed setuid root, making it possible for an...

Stanley T. Shebs Xconq 7.2.2 - Buffer Overflow Vulnerabilities in xconq

No description provided by source. source: http://www.securityfocus.com/bid/1495/info Xconq is a multiple player strategy game available for many unix platforms. It contains a number of buffer overflow vulnerabilities including the ability to overflow stack buffers with either the DISPLAY or the...

BSD/OS 2.1/3.0,Larry Wall Perl 5.0 03,RedHat 4.0/4.1,SGI Freeware 1.0/2.0 suidperl Overflow(1)

No description provided by source. source: http://www.securityfocus.com/bid/708/info Several buffer overflows were found in the Perl helper application 'suidperl' or 'sperl'. When this program is installed setuid root the overflows may lead to a local root compromise. !/usr/bin/perl yes, this...

Solaris <= 2.5.1 kcms Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/452/info There is an unchecked sprintf call in the versions of /usr/openwin/bin/kcmsconfigure shipped with solaris 2.5, 2.5.1 and 2.6. Unfortunately, kcmsconfigure is installed setuid root, making it possible for an...

Verizon Wireless Network Extender multiple vulnerabilities

Overview iSEC Partners has reported that the Verizon Wireless Network Extender models SCS-26UC4 and SCS-2U01 made by Samsung are susceptible to a local compromise using a custom HDMI cable. Once compromised the device can be used to eavesdrop on voice, text and data communication for mobile devic...

Mandrake Linux Security Advisory : modutils (MDKSA-2000:071-2)

All 2.3.x versions of modutils since March 12 1999 contain a vulnerability that can lead to a local root compromise. The modprobe program uses popen to execute the 'echo' program argumented with user input. Because popen relies on /bin/sh to parse the command string and execute 'echo', un-escaped...

[security bulletin] HPSBPV02754 SSRT100803 rev.1 - HP ProCurve 5400 zl Switch, Compact flash card virus

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03249176 Version: 1 HPSBPV02754 SSRT100803 rev.1 - HP ProCurve 5400 zl Switch, Compact flash card virus NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...

PT-2010-1040 · Opensuse +2 · Drbd-Kmp-Default +2

Name of the Vulnerable Software and Affected Versions: drbd-kmp-default versions affected versions not specified Linux kernel versions prior to 2.6.36-rc4 Description: The issue concerns multiple vulnerabilities in the drbd-kmp-default package of the openSUSE operating system, which can be...

CSA-L03: Linux kernel vmsplice unchecked user-pointer dereference

=== ABSTRACT ========================================================= A new vmsplice system call was introduced in the 2.6.17 release of the Linux kernel. In the 2.6.23 kernel the system call functionality has been further extended resulting in two new critical vulnerabilities. === AFFECTED...

Debian Security Advisory DSA 189-1 (luxman)

The remote host is missing an update to luxman announced via advisory DSA 189-1. OpenVAS Vulnerability Test $Id: deb1891.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 189-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

RISE-2007004.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Apple Mac OS X 10.4.x Kernel i386setldt Integer Overflow Vulnerability http://risesecurity.org/advisory/RISE-2007004/ Published: November 16, 2007 Updated: November 16, 2007 INTRODUCTION There exists a vulnerability within an architecture dependent...

HP-UX 11i - swpackage Local Stack Overflow Local Privilege Escalation

HP-UX 11i - swpackage Local Stack Overflow Local Privilege Escalation / HP-UX swpackage buffer overflow exploit ======================================= HP-UX 'swpackage' contains an exploitable stack overflow in the handling of command line arguements. Specifically the problem occurs due to...

HP-UX 11i - 'swmodify' Local Stack Overflow / Local Privilege Escalation

/ HP-UX swmodify buffer overflow exploit ======================================= HP-UX 'swmodify' contains an exploitable stack overflow in the handling of command line arguements. Specifically the problem occurs due to insufficent bounds checking in the "-S" optional arguement. 'swmodify' is...

SCO Openserver 5.0.7 (termsh) Local Privilege Escalation Exploit

Exploit for sco platform in category local exploits ================================================================ SCO Openserver 5.0.7 termsh Local Privilege Escalation Exploit ================================================================ / SCO Openserver 5.0.7 termsh exploit...

SCO OpenServer 5.0.7 - 'termsh' Local Privilege Escalation

/ SCO Openserver 5.0.7 termsh exploit =================================== 'termsh' is a program to view or modify an existing terminal entry on SCO Openserver. A stack based overflow exists in the handling of command line arguements, namely the -o oadir arguement. It is installed setgid auth in a...

serversAlive.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory information: Title: Servers Alive - Privilege Escalation CVE Candidate Number: CAN-2005-0352 Application: Servers Alive Versions known affected: 4.1, 5.0; other versions not tested. Classification: Privilege Escalation Author: Michael Starks...

Vulnerabilities in KTH Kerberos IV

OVERVIEW Kerberos is a network authentication protocol which by using secret-key cryptography provides authentication over insecure networks. There are at least two common free Kerberos implementations: MIT and KTH Royal Institute of Techology, Sweden. The latter is included in OpenBSD and FreeBS...

Screen-3.7.6 local compromise

Hi ppl, as mentioned in other postings the screen package is vulnerbale to the classic format string attack. I attached a simple exploit and as far as I could investigate on Suse 6.1 with screen 3.7.6: the vulnerable function is Msgint err, char fmt, ... which is invoked with the value of the...