Дырка в mail.local (mail from: shell)

В некоторых системах mail.local наботает как sgid mail или suid root. Некорректная обработка LMTP-заголовка mail from: позволяет выполнение shell-кода...

Local /tmp vulnerability fixed in ppp-off

A local /tmp bug in the /usr/sbin/ppp-off program was found. This bug could allow a local user to corrupt system files. A fix has been made and an updated package is now available in the -current branch. The package described below will work for users of Slackware 7.0, 7.1, and -current...

CVE-2000-0755

Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges...

CVE-2000-0533

Technical details about CVE-2000-0533 (SGI IRIX WorkShop cvconnect) are not publicly provided in the supplied documents. Monitor for updates from official sources.

CVE-2000-0616

This CVE concerns a vulnerability in HP TurboIMAGE DBUTIL that allows local users to gain additional privileges via DBUTIL.PUB.SYS. Affected software: HP TurboIMAGE DBUTIL; vulnerable component/file: DBUTIL.PUB.SYS. Impact: local privilege escalation as described (partial confidentiality/integrit...

Локальная уязвимость iKey

Мастер-ключ хранится в EPROM, может быть извлечен или подменен при наличии физического доступа к устройству...

2dopewars_exploits.txt

two security holes i found for local use in dopewars1.4.7-current. dopewars is setgid=games. by: [email protected]. LOCAL VULNERABILITY 1: insecure popen call, a shell script can handle this. -- dopewars.sh start -- !/bin/sh dopewars.sh1.4.7: shell script by [email protected]. gives...

[SECURITY] New version of mailx released

Package: mailx Vulnerability: local exploit Debian-specific: no The version of mailx distributed in Debian GNU/Linux 2.1 a.k.a. slink, as well as in the frozen potato and unstable woody distributions is vulnerable to a local buffer overflow while sending messages. This could be exploited to give ...

CVE-2000-0461

The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local users to cause a denial of service of the semaphore system by using the semconfig call...

Hylafax Hylafax 4.0.2 - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/765/info Hylafax is a popular fax server software package designed to run on multiple UNIX operating systems. Some versions of Hylafax ship with a vulnerable sub program 'faxalter'. This program is installed SUID UUCP and has a buffer overflow which if...

Knox Arkeia Backup Service Buffer Overflow

It was possible to overflow a buffer in the Knox's Arkeia server. This problem allows an attacker to perform a denial of service attack and to gain root using the remote service if the attacker is local. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10018;...

Mandriva Linux Mandrake 6.0 / Gnome Libs 1.0.8 - 'espeaker' Local Buffer Overflow

source: https://www.securityfocus.com/bid/663/info A buffer overflow vulnerabilityin GNOME's shared libraries handling of the 'espeaker' command line argument may allow local users to attack setuid binaries linked against these libraries to obtain root access. Calling a program linked against GNO...

CVE-1999-1565

Man2html 2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

PT-1998-1081 · Linux · Linux Pam

Name of the Vulnerable Software and Affected Versions: Linux PAM affected versions not specified Description: The issue allows local users to gain root access using temporary files. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

Resolv+ (RESOLV_HOST_CONF) Linux Library Local Exploit

Exploit for linux platform in category local exploits ====================================================== Resolv+ RESOLVHOSTCONF Linux Library Local Exploit ====================================================== setenv RESOLVHOSTCONF /etc/shadow; ping adfas 0day.today 2018-02-18...

PT-1989-1000 · Sun · Sunos

Name of the Vulnerable Software and Affected Versions: SunOS versions 4.0.3 and earlier Description: A local privilege escalation issue exists, allowing local users to gain privileges. Recommendations: For SunOS versions 4.0.3 and earlier, at the moment, there is no information about a newer...

PT-2010-5665 · Suse +2 · Suse Linux Enterprise +5

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise versions prior to 2.6.39 btrfs-kmp-xen affected versions not specified btrfs-kmp-pae affected versions not specified kernel-desktop-devel affected versions not specified Description: The issue concerns multiple...