----------========== OPEN3S-2003-08-08-eng-informix-onshowaudit ==========----------

----------========== OPEN3S-2003-08-08-eng-informix-onshowaudit ==========---------- Title: Local Vulnerability in IBM Informix IDS v9.40 onshowaudit binary Date: 08-08-2003 Platform: Only tested in Linux but can be exported to others. Impact: Users with exec perm over ./bin/onshowaudit can read...

open3sIDSonshowaudit.txt

----------========== OPEN3S-2003-08-08-eng-informix-onshowaudit ==========---------- Title: Local Vulnerability in IBM Informix IDS v9.40 onshowaudit binary Date: 08-08-2003 Platform: Only tested in Linux but can be exported to others. Impact: Users with exec perm over ./bin/onshowaudit can read...

aix __ bos.rte.printers __ format string vulnerability

there is a local and possibly remote format string vulnerability in package bos.rte.printers. feeding /usr/bin/enq with arguments containing formatstring characters it can result in segfault. the research of this problem with acknowledgements of exact arguments and configuration types wasn't done...

[SECURITY] [DSA 405-1] New xsok packages fix local group games exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 405-1 [email protected] http://www.debian.org/security/ Martin Schulze December 30th, 2003 http://www.debian.org/security/faq -...

XSOK 1.0 2 - LANG Environment Local Buffer Overrun

XSOK 1.0 2 - LANG Environment Local Buffer Overrun // source: https://www.securityfocus.com/bid/9341/info xsok is prone to a locally exploitable buffer overrun vulnerability due to insufficient bounds check of data supplied through the LANG environment variable. This could be exploited to execute...

[SECURITY] [DSA 400-1] New omega-rpg packages fix local games exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 400-1 [email protected] http://www.debian.org/security/ Martin Schulze November 11th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-390-1] New marbles packages fix buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 390-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 26th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-390-1] New marbles packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 390-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 26th, 2003 http://www.debian.org/security/faq -...

CVE-2003-0679

CVE-2003-0679 concerns a vulnerability in the libcpr library used by SGI’s Checkpoint/Restart (cpr) on IRIX 6.5.x. The issue, reported as a local vulnerability, permits users to truncate or overwrite certain files for which they lack permissions. The SGI Security Advisory 20030802-01-P explains t...

[SECURITY] [DSA-369-1] New zblast packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 369-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 8th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-366-1] New eroaster packages fix insecure temporary file creation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 366-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 5th, 2003 http://www.debian.org/security/faq -...

Local Vulnerability in IBM DB2 7.1 db2job binary

Title: Local Vulnerability in IBM DB2 7.1 db2job binary Date: 27-07-2003 Platform: Only tested in Linux but can be exported to others. Impact: Users with exec perm over ./db2as/sqllib/adm/db2job can create files with 770 mode and owned by root. Author: Juan Manuel Pascual Escriba [email protected]...

Slight privilege elevation from bin to root in IBM DB2 7.1 - 8.1 all binaries

Title: Local Vulnerability in IBM DB2 7.1 - 8.1 all binaries Date: 27-07-2003 Platform: Only tested in Linux but can be exported to others. Only versions 7.1 and Enterprise Server Edition v8.1 were checked but could affect other versions. Impact: Slight privilege elevation from bin to root. Autho...

[SECURITY] [DSA-359-1] New atari800 packages fix buffer overflows

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 359-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 31st, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-354-1] New xconq packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 354-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 29th, 2003 http://www.debian.org/security/faq -...

[Full-Disclosure] SRT2003-07-08-1223 - IBM U2 UniVerse uvadm can take root via buffer overflows

Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...

[SECURITY] [DSA-350-1] New falconseye packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 350-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 15th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-343-1] New skk, ddskk packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 343-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 8th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-340-1] New x-face-el packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 340-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 6th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-334-1] New xgalaga packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 334-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 28th, 2003 http://www.debian.org/security/faq -...