HP Tru64 4.0/5.1 - POSIX Threads Library Privilege Escalation

source: https://www.securityfocus.com/bid/21035/info HP Tru64 is prone to a local privilege-escalation vulnerability. Exploiting this issue allows local attackers to execute arbitrary code with superuser privileges. Successful exploits will result in a complete compromise of vulnerable computers...

HP Tru64 4.05.1 - POSIX Threads Library Privilege Escalation

HP Tru64 4.05.1 - POSIX Threads Library Privilege Escalation source: https://www.securityfocus.com/bid/21035/info HP Tru64 is prone to a local privilege-escalation vulnerability. Exploiting this issue allows local attackers to execute arbitrary code with superuser privileges. Successful exploits...

Outpost Firewall PRO 4.0 - Local Denial of Service

source: https://www.securityfocus.com/bid/20860/info Outpost Firewall PRO is prone to a local denial-of-service vulnerability because the application fails to properly handle unexpected input. Exploiting this issue allows local attackers to crash affected computers, denying service to legitimate...

Outpost Firewall PRO 4.0 - Local Denial of Service

Outpost Firewall PRO 4.0 - Local Denial of Service source: https://www.securityfocus.com/bid/20860/info Outpost Firewall PRO is prone to a local denial-of-service vulnerability because the application fails to properly handle unexpected input. Exploiting this issue allows local attackers to crash...

Symantec products fail to properly limit device driver access to kernel memory

Overview Certain device drivers included with Symantec products fail to properly verify address space within the "IOCTL" handlers. Description Symantec provides Anti-Virus and Internet Security products that are designed to protect users. According to Symantec Security Response SYM06-020:A...

Internet Security Systems 3.6 BlackICE - Local Denial of Service

source: https://www.securityfocus.com/bid/19800/info Internet Security Systems ISS BlackICE PC Protection is prone to a local denial-of-service vulnerability because the application fails to properly sanitize user-supplied input. This vulnerability allows local attackers to crash affected systems...

Linux-HA Heartbeat 1.2.3/2.0.x - Insecure Default Permissions on Shared Memory

// source: https://www.securityfocus.com/bid/19186/info Since Linux-HA Heartbeat has insecure default permissions set on shared memory, local attackers may be able to cause a denial of service. Exploitation would most likely result in a system crash, loss of data, and resource exhaustion, leading...

Design/Logic Flaw

VMware Server before RC1 does not clear user credentials from memory after a console connection is made, which might allow local attackers to gain privileges...

CVE-2006-2662

VMware Server before RC1 does not clear user credentials from memory after a console connection is made, which might allow local attackers to gain privileges...

CVE-2006-2662

CVE-2006-2662 relates to VMware Server before RC1, where credentials are not cleared from memory after a console connection. This memory-stays data can enable a local attacker with access to the machine to potentially gain privileges. Data in the connected documents confirms the issue description...

CVE-2006-2662

VMware Server before RC1 does not clear user credentials from memory after a console connection is made, which might allow local attackers to gain privileges...

DSA-1083-1 motor - buffer overflow

Bulletin has no description...

Sun Solaris 8/9 UCB/PS - Command Local Information Disclosure

source: https://www.securityfocus.com/bid/19662/info Sun Solaris is prone to a local information-disclosure vulnerability. This issue allows local attackers to gain access to potentially sensitive information that may aid them in further attacks. The following proof of concept is available:...

Sun Solaris 89 UCBPS - Command Local Information Disclosure

Sun Solaris 89 UCBPS - Command Local Information Disclosure source: https://www.securityfocus.com/bid/19662/info Sun Solaris is prone to a local information-disclosure vulnerability. This issue allows local attackers to gain access to potentially sensitive information that may aid them in further...

SUSE-SA:2006:016: xorg-x11-server

The remote host is missing the patch for the advisory SUSE-SA:2006:016 xorg-x11-server. A programming flaw in the X.Org X Server allows local attackers to gain root access when the server is setuid root, as is the default in SUSE Linux 10.0. This flaw was spotted by the Coverity project. Only SUS...

[SECURITY] [DSA 1003-1] New xpvm packages fix insecure temporary file

-------------------------------------------------------------------------- Debian Security Advisory DSA 1003-1 [email protected] http://www.debian.org/security/ Martin Schulze March 16th, 2006 http://www.debian.org/security/faq -...

DSA-1003-1 xpvm - insecure temporary file

Bulletin has no description...

Directory traversal

ld in SUSE Linux 9.1 through 10.0, and SLES 9, in certain circumstances when linking binaries, can leave an empty RPATH or RUNPATH, which allows local attackers to execute arbitrary code as other users via by running an ld-linked application from the current directory, which could contain an...

CVE-2006-0646

ld in SUSE Linux 9.1 through 10.0, and SLES 9, in certain circumstances when linking binaries, can leave an empty RPATH or RUNPATH, which allows local attackers to execute arbitrary code as other users via by running an ld-linked application from the current directory, which could contain an...

CVE-2006-0646

ld in SUSE Linux 9.1 through 10.0, and SLES 9, in certain circumstances when linking binaries, can leave an empty RPATH or RUNPATH, which allows local attackers to execute arbitrary code as other users via by running an ld-linked application from the current directory, which could contain an...