CVE-2003-0367

znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files...

[SECURITY] [DSA-331-1] New imagemagick packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 331-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 27th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-323-1] New noweb packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 323-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 16th, 2003 http://www.debian.org/security/faq -...

Mandrake Linux 8.2 - usrmail Local Overflow

Mandrake Linux 8.2 - usrmail Local Overflow !/usr/bin/perl Mandrake 8.2 /usr/mail local exploit Usage: perl d86mail.pl offset Then enter "." dot and press 'Enter' Example: satan@localhost my$ perl d86mail.pl eip: 0xbffffddd .enter Cc: too long to edit sh-2.05$ $shellcode =...

Mandrake Linux 8.2 - '/usr/mail' Local Overflow

!/usr/bin/perl Mandrake 8.2 /usr/mail local exploit Usage: perl d86mail.pl offset Then enter "." dot and press 'Enter' Example: satan@localhost my$ perl d86mail.pl eip: 0xbffffddd .enter Cc: too long to edit sh-2.05$ $shellcode = "\x31\xdb\x89\xd8\xb0\x17\xcd\x80"...

Mandrake Linux 8.2 /usr/mail local exploit (d86mail.pl)

Exploit for linux platform in category local exploits ======================================================= Mandrake Linux 8.2 /usr/mail local exploit d86mail.pl ======================================================= !/usr/bin/perl Mandrake 8.2 /usr/mail local exploit Usage: perl d86mail.pl...

Buffer overflow in zblast

Local overflow gives egid games...

ATFTP 0.7 - Timeout Command Line Argument Local Buffer Overflow

ATFTP 0.7 - Timeout Command Line Argument Local Buffer Overflow source: https://www.securityfocus.com/bid/7902/info atftp is prone to a locally exploitable buffer overflow condition. This issue is due to insufficient bounds checking performed on input supplied to the command line parameter -t for...

ATFTP 0.7 - Timeout Command Line Argument Local Buffer Overflow

source: https://www.securityfocus.com/bid/7902/info atftp is prone to a locally exploitable buffer overflow condition. This issue is due to insufficient bounds checking performed on input supplied to the command line parameter -t for "timeout". Local attackers may exploit this condition to execut...

GNU screen contains buffer overflow

Overview A locally exploitable buffer overflow exists in GNU screen. An exploit is publicly available for this vulnerability. Description The Free Software Foundation describes GNU Screen as follows:Screen is a full-screen window manager that multiplexes a physical terminal between several...

Ifenslave 0.0.7 - Argument Local Buffer Overflow (1)

Ifenslave 0.0.7 - Argument Local Buffer Overflow 1 source: https://www.securityfocus.com/bid/7682/info ifenslave for Linux has been reported prone to a buffer overflow vulnerability. The issue is reportedly due to a lack of sufficient bounds checking performed on user-supplied data before it is...

Firebird 1.0.2 (FreeBSD 4.7-RELEASE) - Local Privilege Escalation

/ DSR-firebird.c ------------------------------- Tested on: Firebird 1.0.2 FreeBSD 4.7-RELEASE This is Proof Of concept code. bash-2.05a$ ./DSR-firebird Firebird-1.0.2 Local exploit for Freebsd 4.7 by - [email protected] ---------------------------------------------------- Usage: ./DSR-firebird...

Firebird Local exploit

-Dtors Security Research- - www.dtors.net - -Package: Firebird1.0.2 FreeBSD -Versions Affected: 1.0.2 -Website: http://firebird.sf.net -Exploit: Local Stack Overflow -Date: 22/03/2003 -Author: [email protected] && [email protected] ---BACKGROUND Firebird is a relational database offering many ANSI...

Youbin 2.53.03.4 - HOME Buffer Overflow

Youbin 2.53.03.4 - HOME Buffer Overflow source: https://www.securityfocus.com/bid/7503/info It has been reported that youbin is vulnerable to a locally exploitable buffer overflow. The problem is said to occur while processing environment variables. Specifically, an internal memory buffer may be...

HP-UX 10.x/11.x - RExec Remote 'Username' Flag Local Buffer Overrun

source: https://www.securityfocus.com/bid/7459/info It has been reported that a problem in the rexec program included with some versions of HP-UX may be vulnerable to a boundary condition error. It may be possible for a local user to exploit this vulnerability to gain elevated privileges on the...

Unauthorized reading files on phpSysInfo

/----------------------------------------------------------------------------- | 7 A 6 9 - A d v C: 007 |-----------------------------------------------------------------------------| | | Unauthorized reading files on phpSysInfo |...

[SECURITY] [DSA 267-2] New lpr packages fix local root exploit (potato)

-------------------------------------------------------------------------- Debian Security Advisory DSA 267-2 [email protected] http://www.debian.org/security/ Martin Schulze April 15th, 2003 http://www.debian.org/security/faq -...

Linux Kernel 2.4.20 - Module Loader Privilege Escalation

Linux Kernel 2.4.20 - Module Loader Privilege Escalation / Linux Kernel Module Loader Local R00t Exploit Up to 2.4.20 By anonymous KuRaK include include include include include include include include include include include include include define TMPSIZE 4096 define FMAX 768 define UIDNUM 6 defi...

Linux Kernel < 2.4.20 - Module Loader Privilege Escalation

/ Linux Kernel Module Loader Local R00t Exploit Up to 2.4.20 By anonymous KuRaK include include include include include include include include include include include include include define TMPSIZE 4096 define FMAX 768 define UIDNUM 6 define MMSIZE 40961 define MAXSTACK 0xc0000000 // where to pu...

AutomatedShops WebC.cgi Multiple Overflows

The remote host is running a version of AutomatedShops's webc.cgi that is older than version 5.020. This CGI is vulnerable to a remote buffer overflow up to version 5.005 included and to a local one up to version 5.010 included. An attacker may use this flaw to execute arbitrary code on the remot...