ISS BlackICE/PC Protection Unprivileged User Local DoS

ISS BlackICE is a personal Firewall/IDS for windows Desktops. Based on the version number, the remote BlackICE install is vulnerable to a local attack due to incorrect file permissions. Nessus based the results of this test on the contents of the local BlackICE configuration file. C Tenable Netwo...

SoX Local Buffer Overflow Exploit

Exploit for linux platform in category local exploits ================================= SoX Local Buffer Overflow Exploit ================================= POC Exploit for SoX Stack Overflow Vulnerability found by Ulf Harnhammar Tested Under Slackware 9.1 Serkan Akpolat email protected |...

[SECURITY] [DSA 509-1] New gatos packages fix privilege escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 509-1 [email protected] http://www.debian.org/security/ Matt Zimmerman May 29th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 509-1] New gatos packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 509-1 [email protected] http://www.debian.org/security/ Matt Zimmerman May 29th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 508-1] New xpcd packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 508-1 [email protected] http://www.debian.org/security/ Matt Zimmerman May 22nd, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 492-1] New iproute packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 492-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 18th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 484-1] New xonix packages fix failure to drop privileges

-------------------------------------------------------------------------- Debian Security Advisory DSA 484-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 14th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 479-1] New Linux 2.4.18 packages fix local root exploit (source+alpha+i386+powerpc)

-------------------------------------------------------------------------- Debian Security Advisory DSA 479-1 [email protected] http://www.debian.org/security/ Martin Schulze April 14th, 2004 http://www.debian.org/security/faq -...

Centrinity FirstClass Desktop Client 7.1 - Local Buffer Overflow

Centrinity FirstClass Desktop Client 7.1 - Local Buffer Overflow // source: https://www.securityfocus.com/bid/10074/info It has been reported that FirstClass Desktop Client may be prone to a local buffer overflow vulnerability that could allow attackers to execute arbitrary code on a vulnerable...

Centrinity FirstClass Desktop Client 7.1 - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/10074/info It has been reported that FirstClass Desktop Client may be prone to a local buffer overflow vulnerability that could allow attackers to execute arbitrary code on a vulnerable system that may lead to elevated privileges. The issue is reported...

[SECURITY] [DSA 460-2] New sysstat packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 460-2 [email protected] http://www.debian.org/security/ Matt Zimmerman April 3rd, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 462-1] New xitalk packages fix local group utmp exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 462-1 [email protected] http://www.debian.org/security/ Martin Schulze March 12th, 2004 http://www.debian.org/security/faq -...

[Full-Disclosure] [SECURITY] [DSA 462-1] New xitalk packages fix local group utmp exploit

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 462-1 [email protected] http://www.debian.org/security/ Martin Schulze March 12th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 460-1] New sysstat packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 460-1 [email protected] http://www.debian.org/security/ Matt Zimmerman March 10th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 429-2] New gnupg packages fix cryptographic weakness

-------------------------------------------------------------------------- Debian Security Advisory DSA 429-2 [email protected] http://www.debian.org/security/ Matt Zimmerman February 13th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 432-1] New crawl packages fix potential local games exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 432-1 [email protected] http://www.debian.org/security/ Martin Schulze February 3rd, 2004 http://www.debian.org/security/faq -...

----------========== OPEN3S-2003-08-08-eng-informix-onedcu ==========----------

----------========== OPEN3S-2003-08-08-eng-informix-onedcu ==========---------- Title: Local Vulnerability in IBM Informix IDSv9.40 onedcu binary Date: 08-08-2003 Platform: Only tested in Linux but can be exported to others. Impact: Users with exec perm over ./bin/onedcu can create files with 666...

----------========== OPEN3S-2003-08-08-eng-informix-ontape ==========----------

----------========== OPEN3S-2003-08-08-eng-informix-ontape ==========---------- Title: Local Vulnerability at Informix IDSv9.40 via ontape binary Date: 08-08-2003 Platform: Only tested in Linux but can be exported to others. Impact: Any user with DSA privileges over Informix could achieve root...

----------========== OPEN3S-2003-08-08-eng-informix-onshowaudit ==========----------

----------========== OPEN3S-2003-08-08-eng-informix-onshowaudit ==========---------- Title: Local Vulnerability in IBM Informix IDS v9.40 onshowaudit binary Date: 08-08-2003 Platform: Only tested in Linux but can be exported to others. Impact: Users with exec perm over ./bin/onshowaudit can read...

open3sIDSonshowaudit.txt

----------========== OPEN3S-2003-08-08-eng-informix-onshowaudit ==========---------- Title: Local Vulnerability in IBM Informix IDS v9.40 onshowaudit binary Date: 08-08-2003 Platform: Only tested in Linux but can be exported to others. Impact: Users with exec perm over ./bin/onshowaudit can read...