Apple Mac OSX 10.x - Applescript ARDAgent Shell Privilege Escalation

Apple Mac OSX 10.x - Applescript ARDAgent Shell Privilege Escalation source: https://www.securityfocus.com/bid/29831/info Mac OS X is prone to a local privilege-escalation vulnerability affecting ARDAgent Apple Remote Desktop. Successful exploits allow local attackers to execute arbitrary code wi...

CVE-2008-2552

CVE-2008-2552 affects Sun Solaris 10 and Sun Service Tag prior to 1.1.3. The issue arises in the Service Tag Registry and allows a local attacker to cause a denial of service (disk consumption) via unspecified vectors. Nessus plugins list patches 136839-01 for SPARC and 136840-01 for x86 as the r...

SOL8599 - Cross-site scripting vulnerability viewing logs from the Console section of the web management interface

A cross-site scripting XSS vulnerability in the Console feature of the BIG-IP and Enterprise Manager web management interface may allow for script excecution when viewing a log file that contains malicious content. Exploitation of this vulnerability would require an attacker to generate a log ent...

[SECURITY] [DSA 1516-1] New dovecot packages fix privilege escalation

---------------------------------------------------------------------- Debian Security Advisory DSA-1516-1 [email protected] http://www.debian.org/security/ Florian Weimer March 14, 2008 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

[ MDVSA-2008:027 ] - Updated pulseaudio packages fix local root vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:027 http://www.mandriva.com/security/ Package : pulseaudio Date : January 25, 2008 Affected: 2007.1, 2008.0 Problem Description: A programming flaw was found in Pulseaudio versions older than 0.9.9, by which...

[SECURITY] [DSA 1449-1] New loop-aes-utils packages fix programming error

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1449-1 [email protected] http://www.debian.org/security/ Steve Kemp January 05, 2008 http://www.debian.org/security/faq -...

Extended Module Player (xmp) 2.5.1 - oxm.c dtt_load.c Multiple Local Buffer Overflow Vulnerabilities

Extended Module Player xmp 2.5.1 - oxm.c dttload.c Multiple Local Buffer Overflow Vulnerabilities // source: https://www.securityfocus.com/bid/27047/info Extended Module Player xmp is prone to multiple local buffer-overflow vulnerabilities because it fails to perform adequate boundary checks befo...

SOL8106 - OpenSSL SSL_get_shared_ciphers vulnerability CVE-2007-5135

F5 Product Development has determined that the BIG-IP and Enterprise Manager products use a vulnerable version of OpenSSL; however, the vulnerable code is not used in either TMM or in Apache on the BIG-IP system. The vulnerability is considered to be a local vulnerability and cannot be exploited...

CVE-2007-5805

cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create an arbitrary file, and enable world writability of this file, via a symlink attack involving use of the file's name as the argument. NOTE: thi...

Linux Kernel 2.6.x - add_to_page_cache_lru() Local Denial of Service

Linux Kernel 2.6.x - addtopagecachelru Local Denial of Service source: https://www.securityfocus.com/bid/31201/info The Linux kernel is prone to a local denial-of-service vulnerability. Attackers can exploit this issue to cause the kernel to crash, denying service to legitimate users. This issue...

Microsoft Windows Vista Permissive User Information Store ACLs Information Disclosure Vulnerability

Description Microsoft Windows Vista is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may allow them to gain unauthorized access to the affected computer. Technologies Affected Microsoft Windows Vista Microsoft...

OpenBSD 3.94.0 - ld.so Local Environment Variable Clearing

OpenBSD 3.94.0 - ld.so Local Environment Variable Clearing / source: https://www.securityfocus.com/bid/21188/info OpenBSD is prone to a local vulnerability that may allow attackers to pass malicious environment variables to applications, bypassing expected security restrictions. Attackers may be...

OpenBSD 3.9/4.0 - 'ld.so' Local Environment Variable Clearing

/ source: https://www.securityfocus.com/bid/21188/info OpenBSD is prone to a local vulnerability that may allow attackers to pass malicious environment variables to applications, bypassing expected security restrictions. Attackers may be able to exploit this issue to execute arbitrary code with...

CVE-2006-5956

XLineSoft PHPRunner 3.1 stores the (1) database server name, (2) database names, (3) usernames, and (4) passwords in plaintext in %WINDIR%\PHPRunner.ini. This plaintext credential exposure allows local users to obtain sensitive information by reading the file. Root cause is insecure storage of cr...

Perl SuidPerl多个本地漏洞

Perl是流行的跨平台编程语言。 部分Perl脚本在处理PERLIODEBUG变量时存在问题，本地攻击者可以利用这个漏洞破坏系统文件或进行缓冲区溢出攻击。 攻击者可以通过设置PERLIODEBUG环境变量和调用任意setuid-root perl脚本来覆盖任何文件，PERLIODEBUG指向的文件然后会被PERL调试消息所覆盖，这个问题不能精确控制文件内容，但可以破坏重要数据。 另外如果PERLIODEBUG设置，调用带超长路径的setuid-perl脚本，可导致缓冲区溢出，精心构建提交数据可能以root用户权限执行任意指令。 Larry Wall Perl 5.8 Ubuntu...

Linux Kernel 2.6.x - SquashFS Double-Free Denial of Service

source: https://www.securityfocus.com/bid/20870/info The Linux kernel is prone to a local denial-of-service vulnerability. An attacker can exploit this issue to crash the affected computer, denying service to legitimate users...

PT-2006-6112 · Cisco · Cisco Secure Desktop

Name of the Vulnerable Software and Affected Versions: Cisco Secure Desktop CSD affected versions not specified Description: The issue allows local users to potentially read certain memory pages that were written during another user's SSL VPN session, due to the ClearPageFileAtShutdown registry...

Microsoft Class Package Export Tool 5.0.2752 - 'Clspack.exe' Local Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/20561/info Microsoft Class Package Export Tool 'clspack.exe' is prone to a local buffer-overflow vulnerability because the application fails to properly size attacker-supplied data before copying it into an insuficiently sized memory buffer. Exploiting th...

Foafgen <= 0.3 (redir.php) Local Source Disclosure Vulnerability

No description provided by source. Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For educational purpose only. You...

TIBCO Rendezvous 7.4.11 - Password Extractor

/ Exploit: TIBCO RendezVous local password extractor version tibco.exe c:\rvrd.db Tibco RendezVous Password Dumper Affected versions include define DECODE64c isasciic ? base64valc : -1 static const char base64val = -1, -...