FTP Now 2.6.14 - Local Password Disclosure

FTP Now 2.6.14 - Local Password Disclosure / FTP Now v2.6.14 Local Password Disclosure Exploit by Kozan Application: FTP Now v2.6.14 and prior versions Vendor:www.network-client.com Vulnerable Description: FTP Now v2.6.14 discloses passwords to local users. Discovered & Coded by: Kozan Credits to...

Microsoft Windows XP - Local Denial of Service

Microsoft Windows XP - Local Denial of Service source: https://www.securityfocus.com/bid/12870/info It is reported that Microsoft Windows XP Service Pack 1 is prone to a local denial of service vulnerability. The issue is reported to manifest when a raw IP over IP socket is created and data is...

iSnooker 1.6.8 - Local Password Disclosure

iSnooker 1.6.8 - Local Password Disclosure / iSnooker include include HKEY hKey; define BUFSIZE 100 char prgfilesBUFSIZE; DWORD dwBufLen=BUFSIZE; LONG lRet; int main ifRegOpenKeyExHKEYLOCALMACHINE, "SOFTWARE\Microsoft\Windows\CurrentVersion", 0, KEYQUERYVALUE, &hKey == ERRORSUCCESS lRet =...

CVE-2005-0719

Unknown vulnerability in the systems message queue in HP Tru64 Unix 4.0F PK8 through 5.1B-2/PK4 allows local users to cause a denial of service process crash for processes such as nfsstat, pfstat, arp, ogated, rarpd, route, sendmail, srconfig, strsetup, trpt, netstat, and xntpd...

[SECURITY] [DSA 692-1] New kppp packages fix privileged file descriptor leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 692-1 [email protected] http://www.debian.org/security/ Martin Schulze March 8th, 2005 http://www.debian.org/security/faq -...

CVE-2005-0099

The CVE relates to the SDL port of abuse (abuse-SDL) prior to version 2.00, where privileges were not dropped before creating certain files. This allows local users to create or overwrite arbitrary files. Debian and SUSE advisories confirm the issue as CAN-2005-0099 with a local-priority impact; ...

xfinder-ds.pl

HEADER: OSX Finder DSStore arbitrary file overwrite vulnerability. CONTACT: vade79 - [email protected] fakehalo/realhalo CATEGORY: Local with user intervention. IMPACT: Privilege escalation. REFERENCE: http://fakehalo.us/xfinder-ds.pl BACKGROUND: The Finder is the application that Mac OS X and earli...

[SECURITY] [DSA 684-1] New typespeed packages fix arbitrary group games code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 684-1 [email protected] http://www.debian.org/security/ Martin Schulze February 16th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 679-1] New toolchain-source package fixes insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 679-1 [email protected] http://www.debian.org/security/ Martin Schulze February 14th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 679-1] New toolchain-source package fixes insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 679-1 [email protected] http://www.debian.org/security/ Martin Schulze February 14th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 676-1] New xpcd packages fix arbitrary code execution as root

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 676-1 security debian org http://www.debian.org/security/ Martin Schulze February 11th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 675-1] New hztty packages fix local utmp exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 675-1 [email protected] http://www.debian.org/security/ Martin Schulze February 10th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 675-1] New hztty packages fix local utmp exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 675-1 [email protected] http://www.debian.org/security/ Martin Schulze February 10th, 2005 http://www.debian.org/security/faq -...

CVE-2005-0261

CVE-2005-0261 affects AIX 5.2, 5.3, and possibly earlier versions. The vulnerability arises because lspath does not drop privileges before processing the -f option, enabling a local user to read a single line from arbitrary files. The connected documents do not provide a patch version or explicit...

[SECURITY] [DSA 672-1] New xview packages fix potential arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 672-1 [email protected] http://www.debian.org/security/ Martin Schulze February 9th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 667-1] New PostgreSQL packages fix arbitrary library loading

-------------------------------------------------------------------------- Debian Security Advisory DSA 667-1 [email protected] http://www.debian.org/security/ Martin Schulze February 4th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 664-1] New cpio packages fix insecure file permissions

-------------------------------------------------------------------------- Debian Security Advisory DSA 664-1 [email protected] http://www.debian.org/security/ Martin Schulze February 2nd, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 664-1] New cpio packages fix insecure file permissions

-------------------------------------------------------------------------- Debian Security Advisory DSA 664-1 [email protected] http://www.debian.org/security/ Martin Schulze February 2nd, 2005 http://www.debian.org/security/faq -...

DMA-2005-0127a.txt

DMA2005-0127a - 'Apple OSX batch family poor use of setuid' Author: Kevin Finisterre Vendor: http://www.apple.com/macosx/ Product: at commands = Mac OS X v10.3.7, Mac OS X Server v10.3.7 References: CAN-2005-0125 http://www.digitalmunition.com/DMA2005-0127a.txt...

[SECURITY] [DSA 658-1] New libdbi-perl packages fix insecure temporary file

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 658-1 [email protected] http://www.debian.org/security/ Martin Schulze January 25th, 2005 http://www.debian.org/security/faq -...