[Full-Disclosure] [SECURITY] [DSA 524-1] New rlpr packages fix multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 524-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 19th, 2004 http://www.debian.org/security/faq -...

CVE-2004-0524

The CVE-2004-0524 entry describes a buffer overflow in the chpasswd command of the Change_passwd plugin (before 4.0) used by SquirrelMail. The vulnerability allows local users to gain root privileges through a long user name. The NVD entry assigns a base score of 10.0 (HIGH) with local, low-compl...

CVE-2004-0402

CVE-2004-0402 concerns the xpcd package, specifically the xpcd-svga component, where a buffer overflow in the pcd_open function can copy user-supplied data into a fixed-size buffer. Connected advisories (Debian DSA-508, Mandrake MDKSA-2004:053, Ubuntu/Debian/NVD entries) confirm the vulnerability...

APSIS Pound 1.5 - Remote Format String

// source: https://www.securityfocus.com/bid/10267/info APSIS Pound has been found to be prone to a remote format string vulnerability. The problem presents itself when Pound handles certain requests containing embedded format string specifiers. Ultimately this vulnerability could allow for...

BulletProof FTP Server 2.4.0.31 Local Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ================================================================== BulletProof FTP Server 2.4.0.31 Local Privilege Escalation Exploit ================================================================== // //Privilege escalation in BulletProof...

[SECURITY] [DSA 489-1] New Linux 2.4.17 packages fix local root exploit (mips+mipsel)

-------------------------------------------------------------------------- Debian Security Advisory DSA 489-1 [email protected] http://www.debian.org/security/ Martin Schulze April 17th, 2004 http://www.debian.org/security/faq -...

BSD-Games 2.x - Mille Local Save Game File Name Buffer Overrun

// source: https://www.securityfocus.com/bid/10165/info bsd-games mille is prone to a locally exploitable buffer overrun vulnerability. This issue is due to insufficient bounds checking when the user inputs a file name when saving a game. This game is typically installed setgid games so may allow...

FirstClass Desktop 7.1 - Local Buffer Overflow

/ ++++++++++++++++++++++++++++++++++++++++++++++++++++ FirstClass Desktop 7.1 latest buffer overflow exploit Discovered and coded by I2S-LaB. URL : http://www.I2S-LaB.com contact : contactatI2S-LaB.com ++++++++++++++++++++++++++++++++++++++++++++++++++++ Compile it with cl.exe VC++6 / include voi...

[SECURITY] [DSA 462-1] New xitalk packages fix local group utmp exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 462-1 [email protected] http://www.debian.org/security/ Martin Schulze March 12th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 456-1] New Linux 2.2.19 packages fix local root exploit (arm)

-------------------------------------------------------------------------- Debian Security Advisory DSA 456-1 [email protected] http://www.debian.org/security/ Martin Schulze March 6th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 444-1] New Linux 2.4.17 packages fix local root exploit (ia64)

-------------------------------------------------------------------------- Debian Security Advisory DSA 444-1 [email protected] http://www.debian.org/security/ Martin Schulze February 20th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 438-1] New Linux 2.4.18 packages fix local root exploit (alpha+i386+powerpc)

-------------------------------------------------------------------------- Debian Security Advisory DSA 438-1 [email protected] http://www.debian.org/security/ Martin Schulze February 18th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 432-1] New crawl packages fix potential local games exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 432-1 [email protected] http://www.debian.org/security/ Martin Schulze February 3rd, 2004 http://www.debian.org/security/faq -...

0verkill 0.16 - Game Client Multiple Local Buffer Overflow Vulnerabilities

// source: https://www.securityfocus.com/bid/9550/info // The 0verkill game client has been reported prone to multiple instances of exploitable buffer overrun vulnerabilities. The functions that have been reported to be affected are loadcfg, savecfg and sendmessage. It has been reported that due ...

SuSE linux 9.0 YaST config Skribt Local Exploit

Exploit for linux platform in category local exploits =============================================== SuSE linux 9.0 YaST config Skribt Local Exploit =============================================== include include include define PATH "/tmp/tmp.SuSEconfig.gnome-filesystem." define START 1 define E...

Linux Kernel "do_mremap" Local Proof of Concept

Exploit for linux platform in category local exploits =============================================== Linux Kernel "domremap" Local Proof of Concept =============================================== / Proof-of-concept exploit code for domremap Copyright C 2004 Christophe Devine and Julien Tinnes Th...

[SECURITY] [DSA 405-1] New xsok packages fix local group games exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 405-1 [email protected] http://www.debian.org/security/ Martin Schulze December 30th, 2003 http://www.debian.org/security/faq -...

XSOK 1.0 2 - 'LANG Environment' Local Buffer Overrun

// source: https://www.securityfocus.com/bid/9341/info xsok is prone to a locally exploitable buffer overrun vulnerability due to insufficient bounds check of data supplied through the LANG environment variable. This could be exploited to execute arbitrary code with elevated privileges. The progr...

HP-UX B11.11 /usr/bin/ct Local Format String Root Exploit

Exploit for hp-ux platform in category local exploits ========================================================= HP-UX B11.11 /usr/bin/ct Local Format String Root Exploit ========================================================= / File : xhp-ux11inlsct.c Usage : cc xhp-ux11inlsct.c -o xct ; ./xct...

MS Windows (ListBox/ComboBox Control) Local Exploit (MS03-045)

Exploit for unknown platform in category local exploits ============================================================== MS Windows ListBox/ComboBox Control Local Exploit MS03-045 ============================================================== / \ local ListBox/ComboBox exploit for Win32 / \ Created...