1428 matches found
Local Vulnerability in dbsnmp binary in Oracle 8.1.6 - 8.1.7 - 9i
WWW.PLAZASITE.COM Systems & Security Division Title: Local Vulnerability in dbsnmp binary Date: 13-07-2001 Platform: Only tested in Linux but can be exported to others. Impact: Users belonging to oracle group can obtain euid=0 Author: Juan Manuel Pascual Escriba [email protected] Status: Vendor...
Microsoft IIS 4.05.0 - Device File Local Denial of Service
Microsoft IIS 4.05.0 - Device File Local Denial of Service source: https://www.securityfocus.com/bid/2973/info Microsoft IIS is prone to denial of service attacks by local users. This issue is exploitable if the local attacker can create an .asp file which makes calls to various devices names. Th...
Локальная дырка в Cisco Content Services (Arrowpoint) (debug mode)
Пользователь может переключится в режим отладки, из которого получить административные привелегии...
[SECURITY] [DSA 038-1] New version of sgml-tools available
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------------- Debian Security Advisory DSA-038-1 [email protected] http://www.debian.org/security/ Martin Schulze March 8, 2001 -...
Локальная дырка в Sendmail (sendmail -bt)
Отрицательный индекс массива позволяет переписать область памяти...
IBM NetCommerce Security
hola friends, while i was participating on the openhack contest i found a couple of serious security-holes within ibm s so called "netcommerce" thing which seems to be a mixture of websphere, net.data, servlets, jsp s and db2? however..summary: class: input validation error remote: yes local: yes...
CVE-2000-0949
CVE-2000-0949 describes a heap overflow in the savestr function of LBNL traceroute 1.4a5 and earlier. A local user can execute arbitrary commands via the -g option. The connected Mandrake advisory notes the traceroute program is setuid root and that a segfault/overflow could potentially lead to r...
FreeBSD-SA-01:04.joe
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:04 Security Advisory FreeBSD, Inc. Topic: joe creates insecure recovery files Category: ports Module: joe Announced: 2001-01-15 Credits: Christer �berg and Patrik...
Локальная дырка в xitetris
Недостаточная проверка ввода пользователя при вызове внешнего приложения в suid root приложении...
Дырки в Sun Cluster
Sun Cluster позволяет удаленному пользователю без авторизации обращаться к приложениям, обычно доступным только root, в сочетании с локальной уязвимостью позволяет локальным пользователям получить доступ на чтение к любым файлам...
pico Text Editor Symbolic Link Vulnerability : ERROR CORRECTION
The previous submission stated that the vendor of pico is Washington University. This was an error. Of course it sould said University of Washington. The vendor we've for the vulnerability contacted was University of Washington. Below is the correct message. -----BEGIN PGP SIGNED MESSAGE----- Has...
Дырка в mail.local (mail from: shell)
В некоторых системах mail.local наботает как sgid mail или suid root. Некорректная обработка LMTP-заголовка mail from: позволяет выполнение shell-кода...
Local /tmp vulnerability fixed in ppp-off
A local /tmp bug in the /usr/sbin/ppp-off program was found. This bug could allow a local user to corrupt system files. A fix has been made and an updated package is now available in the -current branch. The package described below will work for users of Slackware 7.0, 7.1, and -current...
CVE-2000-0755
Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges...
CVE-2000-0533
Technical details about CVE-2000-0533 (SGI IRIX WorkShop cvconnect) are not publicly provided in the supplied documents. Monitor for updates from official sources.
CVE-2000-0616
This CVE concerns a vulnerability in HP TurboIMAGE DBUTIL that allows local users to gain additional privileges via DBUTIL.PUB.SYS. Affected software: HP TurboIMAGE DBUTIL; vulnerable component/file: DBUTIL.PUB.SYS. Impact: local privilege escalation as described (partial confidentiality/integrit...
Локальная уязвимость iKey
Мастер-ключ хранится в EPROM, может быть извлечен или подменен при наличии физического доступа к устройству...
2dopewars_exploits.txt
two security holes i found for local use in dopewars1.4.7-current. dopewars is setgid=games. by: [email protected]. LOCAL VULNERABILITY 1: insecure popen call, a shell script can handle this. -- dopewars.sh start -- !/bin/sh dopewars.sh1.4.7: shell script by [email protected]. gives...
[SECURITY] New version of mailx released
Package: mailx Vulnerability: local exploit Debian-specific: no The version of mailx distributed in Debian GNU/Linux 2.1 a.k.a. slink, as well as in the frozen potato and unstable woody distributions is vulnerable to a local buffer overflow while sending messages. This could be exploited to give ...