Avast! 4.8.1335 Professional - Kernel Local Buffer Overflow

Avast! 4.8.1335 Professional - Kernel Local Buffer Overflow include include include include include include / Program : avast! 4.8.1335 Professionnel Homepage : http://www.avast.com Discovery : 2009/07/29 Author Contacted : 2009/07/31 Found by : Heurs This Advisory : Heurs Contact :...

kernel: nfsd should drop CAP_MKNOD for non-root

nfsd in the Linux kernel before 2.6.28.9 does not drop the CAPMKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the rootsquash option...

HP-UX Update for VERITAS File System (VRTSvxfs) or VERITAS Oracle Disk Manager (VRTSodm) HPSBUX02409

Check for the Version of VERITAS File System VRTSvxfs or VERITAS Oracle Disk Manager VRTSodm OpenVAS Vulnerability Test HP-UX Update for VERITAS File System VRTSvxfs or VERITAS Oracle Disk Manager VRTSodm HPSBUX02409 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks...

HP-UX Update for VERITAS File System (VRTSvxfs) or VERITAS Oracle Disk Manager (VRTSodm) HPSBUX02409

Check for the Version of VERITAS File System VRTSvxfs or VERITAS Oracle Disk Manager VRTSodm OpenVAS Vulnerability Test HP-UX Update for VERITAS File System VRTSvxfs or VERITAS Oracle Disk Manager VRTSodm HPSBUX02409 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks...

HP-UX PHCO_39104 : HP-UX Running VERITAS File System (VRTSvxfs) or VERITAS Oracle Disk Manager (VRTSodm), Local Escalation of Privilege (HPSBUX02409 SSRT080171 rev.3)

s700800 11.23 VRTS 5.0 MP1RP4 VRTSfsman Command Patch : A potential security vulnerability has been identified with HP-UX running VRTSvxfs and VRTSodm. The vulnerability could be exploited locally to cause an escalation of privilege. VRTSvxfs and VRTSodm are bundled with Storage Management Suite...

HP-UX PHCO_39132 : HP-UX Running VERITAS File System (VRTSvxfs) or VERITAS Oracle Disk Manager (VRTSodm), Local Escalation of Privilege (HPSBUX02409 SSRT080171 rev.3)

s700800 11.31 VRTS 5.0 GARP3 VRTSvxfs Command Patch : A potential security vulnerability has been identified with HP-UX running VRTSvxfs and VRTSodm. The vulnerability could be exploited locally to cause an escalation of privilege. VRTSvxfs and VRTSodm are bundled with Storage Management Suite SM...

HP-UX PHCO_39103 : HP-UX Running VERITAS File System (VRTSvxfs) or VERITAS Oracle Disk Manager (VRTSodm), Local Escalation of Privilege (HPSBUX02409 SSRT080171 rev.3)

s700800 11.23 VRTS 5.0 MP1RP4 VRTSvxfs Command Patch : A potential security vulnerability has been identified with HP-UX running VRTSvxfs and VRTSodm. The vulnerability could be exploited locally to cause an escalation of privilege. VRTSvxfs and VRTSodm are bundled with Storage Management Suite S...

HP-UX PHCO_38913 : HP-UX Running VERITAS File System (VRTSvxfs) or VERITAS Oracle Disk Manager (VRTSodm), Local Escalation of Privilege (HPSBUX02409 SSRT080171 rev.3)

s700800 11.31 VRTS 5.0 GARP3 VRTSfsman Command Patch : A potential security vulnerability has been identified with HP-UX running VRTSvxfs and VRTSodm. The vulnerability could be exploited locally to cause an escalation of privilege. VRTSvxfs and VRTSodm are bundled with Storage Management Suite S...

[security bulletin] HPSBUX02409 SSRT080171 rev.1 - HP-UX Running VERITAS File System (VRTSvxfs) or VERITAS Oracle Disk Manager (VRTSodm), Local Escalation of Privilege

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01674733 Version: 1 HPSBUX02409 SSRT080171 rev.1 - HP-UX Running VERITAS File System VRTSvxfs or VERITAS Oracle Disk Manager VRTSodm, Local Escalation of Privilege NOTICE: The information in this...

DEBIAN-CVE-2008-5397

Tor before 0.2.0.32 does not properly process the 1 User and 2 Group configuration options, which might allow local users to gain privileges by leveraging unintended supplementary group memberships of the Tor process...

VulnCheck KEV: CVE-2006-5758

The Graphics Rendering Engine in Microsoft Windows 2000 through 2000 SP4 and Windows XP through SP2 maps GDI Kernel structures on a global shared memory section that is mapped with read-only permissions, but can be remapped by other processes as read-write, which allows local users to cause a...

[Reversemode Paper] Exploiting WDM Audio Drivers

Hi, For those researchers who are interested in the driver security and also for driver writers, the paper "Exploiting WDM Audio Drivers" has been released. This paper explains an attack vector inherent to certain WDM audio drivers running on Windows Vista, XP, 2000 and 2003. Successful...

DEBIAN-CVE-2007-0472

Multiple race conditions in Smb4K before 0.8.0 allow local users to 1 modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the removelockfile function in core/smb4kfileio.cpp, and 2 add lines to the sudoers file via a symlink attack on...

security flaw

The dvdreadbca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, assigns the wrong value to a length variable, which allows local users to execute arbitrary code via a crafted USB Storage device that triggers a buffer overflow...

.ELF Binaries - Local Privilege Escalation

.ELF Binaries - Local Privilege Escalation gcc infR3.s -o infR3 strip infR3 find a writable binary example: ls ./infR3 /bin/ls when root calls the writable ls, chmod will be setuided Coded by [email protected] == [email protected] .text .global main infeccion de start para conseguir local...

MS Windows 2k Kernel APC Data-Free Local Escalation Exploit (MS05-055)

Exploit for unknown platform in category local exploits ====================================================================== MS Windows 2k Kernel APC Data-Free Local Escalation Exploit MS05-055 ====================================================================== / helper.c commented out below...

Microsoft Windows Server 2000 Kernel - APC Data-Free Local Escalation (MS05-055)

/ helper.c commented out below ms05-055.c /str0ke / / MS05-055 Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability Exploit Created by SoBeIt 12.25.2005 Main file of exploit Tested on: Windows 2000 PRO SP4 Chinese Windows 2000 PRO SP4 Rollup 1 Chinese Windows 2000 PRO SP4 English...

PT-1997-1136 · Slackware Linux · Crond

Name of the Vulnerable Software and Affected Versions: Linux Slackware crond affected versions not specified Description: A buffer overflow issue in the crond program of Linux Slackware allows local users to gain root access. Recommendations: At the moment, there is no information about a newer...