1377 matches found
[SECURITY] [DSA 192-1] New html2ps packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 192-1 [email protected] http://www.debian.org/security/ Martin Schulze November 8th, 2002 http://www.debian.org/security/faq -...
[SECURITY] [DSA 192-1] New html2ps packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 192-1 [email protected] http://www.debian.org/security/ Martin Schulze November 8th, 2002 http://www.debian.org/security/faq -...
[security bulletin] SSRT2371 HP OpenVMS Potential POP server local vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SECURITY BULLETIN REVISION: 0 Title: SSRT2371 HP OpenVMS Potential POP server local vulnerability NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. RELEASE DATE: September 2002 SEVERITY:...
[SECURITY] [DSA 144-1] New wwwoffle packages fix security related problems
-------------------------------------------------------------------------- Debian Security Advisory DSA 144-1 [email protected] http://www.debian.org/security/ Martin Schulze August 6th, 2002 - -------------------------------------------------------------------------- Package : wwwoffle...
Informix SE-7.25 /lib/sqlexec Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Title: Local Vulnerability in Informix SE-7.25 Date: 21-04-2002 Platform: Only tested in Linux but can be exported to others. Impact: Users with exec perm over /lib/sqlexec can obtain euid=0 Author: Juan Manuel Pascual Escriba [email protected] Status: Vendor...
Instant Web Mail additional POP3 commands and mail headers
Instant Web Mail additional POP3 commands and mail headers PROGRAM: Instant Web Mail VENDOR: Jonas Koch Bentzen [email protected] HOMEPAGE: http://understroem.dk/instantwebmail/ VULNERABLE VERSIONS: 0.59 possibly earlier versions too TYPE: remote/local SEVERITY: medium DESCRIPTION: "Instant We...
[SECURITY] [DSA 107-1] New jgroff packages fix printf format problem
-------------------------------------------------------------------------- Debian Security Advisory DSA 107-1 [email protected] http://www.debian.org/security/ Martin Schulze January 30th, 2002 - -------------------------------------------------------------------------- Package : jgroff...
Buffer overflow vulnerability in pwck command line utility
Overview The CERT/CC has received a public report of a local buffer overflow vulnerability in the pwck utility. Description The pwck utility performs syntax checking of /etc/password and /etc/shadow password information files. This utility contains a buffer overflow vulnerability in the section o...
MacOS 9.2, Internet Explorer, Local Vulnerability
Vulnerability: Access controls can be evaded on MacOS9.2 using Internet Explorer, allowing users to execute programs they otherwise would not be able to run. Details: While in the college media lab I attempted to run MacSSH to get onto my home desktop, I received an error message telling me I did...
Local Vulnerability in dbsnmp binary in Oracle 8.1.6 - 8.1.7 - 9i
WWW.PLAZASITE.COM Systems & Security Division Title: Local Vulnerability in dbsnmp binary Date: 13-07-2001 Platform: Only tested in Linux but can be exported to others. Impact: Users belonging to oracle group can obtain euid=0 Author: Juan Manuel Pascual Escriba [email protected] Status: Vendor...
Microsoft IIS 4.05.0 - Device File Local Denial of Service
Microsoft IIS 4.05.0 - Device File Local Denial of Service source: https://www.securityfocus.com/bid/2973/info Microsoft IIS is prone to denial of service attacks by local users. This issue is exploitable if the local attacker can create an .asp file which makes calls to various devices names. Th...
Локальная дырка в Cisco Content Services (Arrowpoint) (debug mode)
Пользователь может переключится в режим отладки, из которого получить административные привелегии...
[SECURITY] [DSA 038-1] New version of sgml-tools available
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------------- Debian Security Advisory DSA-038-1 [email protected] http://www.debian.org/security/ Martin Schulze March 8, 2001 -...
Локальная дырка в Sendmail (sendmail -bt)
Отрицательный индекс массива позволяет переписать область памяти...
IBM NetCommerce Security
hola friends, while i was participating on the openhack contest i found a couple of serious security-holes within ibm s so called "netcommerce" thing which seems to be a mixture of websphere, net.data, servlets, jsp s and db2? however..summary: class: input validation error remote: yes local: yes...
CVE-2000-0949
CVE-2000-0949 describes a heap overflow in the savestr function of LBNL traceroute 1.4a5 and earlier. A local user can execute arbitrary commands via the -g option. The connected Mandrake advisory notes the traceroute program is setuid root and that a segfault/overflow could potentially lead to r...
FreeBSD-SA-01:04.joe
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:04 Security Advisory FreeBSD, Inc. Topic: joe creates insecure recovery files Category: ports Module: joe Announced: 2001-01-15 Credits: Christer �berg and Patrik...
Локальная дырка в xitetris
Недостаточная проверка ввода пользователя при вызове внешнего приложения в suid root приложении...
Дырки в Sun Cluster
Sun Cluster позволяет удаленному пользователю без авторизации обращаться к приложениям, обычно доступным только root, в сочетании с локальной уязвимостью позволяет локальным пользователям получить доступ на чтение к любым файлам...
pico Text Editor Symbolic Link Vulnerability : ERROR CORRECTION
The previous submission stated that the vendor of pico is Washington University. This was an error. Of course it sould said University of Washington. The vendor we've for the vulnerability contacted was University of Washington. Below is the correct message. -----BEGIN PGP SIGNED MESSAGE----- Has...