AIX 5.2 paginit Local Root Exploit

Exploit for aix platform in category local exploits ================================== AIX 5.2 paginit Local Root Exploit ================================== / IBM AIX paginit root exploit I just wanted to play with PowerPC Tested on 5.2 intropy intropy caughq.org / include include include include...

Fortinet Fortigate firewall backdoor account

maintainer/pbcpbnserial number account has local root access to device...

Linux Mandrake <= 10.2 cdrdao Local Root Exploit (unfixed)

Exploit for linux platform in category local exploits ========================================================== Linux Mandrake ld.so.c uidt getuid return 0; EOF echo "+ done." echo "preparing shell program ..." cat sh.c include int mainint argc,char argv setreuid0,0; setgid0; unlink"/tmp/ld.so";...

Linux Kernel 2.4.x / 2.6.x uselib() Local Privilege Escalation Exploit

Exploit for linux platform in category local exploits ====================================================================== Linux Kernel 2.4.x / 2.6.x uselib Local Privilege Escalation Exploit ====================================================================== / pwned.c - linux 2.4 and 2.6...

SUSE-SA:2005:003: kernel

The remote host is missing the patch for the advisory SUSE-SA:2005:003 kernel. Several exploitable security problems were identified and fixed in the Linux kernel, the core of every SUSE Linux product. - Due to missing locking in the sysuselib system call a local attacker can gain root access. Th...

atari800 Local Root Exploit

Exploit for linux platform in category local exploits =========================== atari800 Local Root Exploit =========================== / Exploit for atari800 by pi3 pi3ki31ny email protected:$ ./p ...::: -= exploit for Atari800 by pi3 pi3ki31ny =- :::... Ussage: + ./p options -? -v choose a bu...

Debian DSA-066-1 : cfingerd - remote exploit

Steven van Acker reported on bugtraq that the version of cfingerd a configurable finger daemon as distributed in Debian GNU/Linux 2.2 suffers from two problems : - The code that reads configuration files files in which $ commands are expanded copied its input to a buffer without checking for a...

[RLSA_04-2004] QNX crrtrap possible race condition vulnerability

rfdslabs security advisory Title: QNX crrtrap possible race condition vulnerability RLSA04-2004 Versions: QNX RTP 6.1 possibly others Vendor: http://www.qnx.com Date: Sep 13 2004 Author: Julio Cesar Fort julio at rfdslabs com br 1. Introduction crrtrap is a tool to detect video hardware and start...

[RLSA_01-2004] QNX PPPoEd local root vulnerabilities

rfdslabs security advisory Title: QNX PPPoEd local root vulnerabilities RLSA01-2004 Versions: QNX RTP 6.1 possibly others Vendor: http://www.qnx.com Date: 02 Sep 2004 Author: Julio Cesar Fort julio at rfdslabs com br 1. Introduction PPPoEd daemon is used to provide a PPPoE connection, such as DSL...

Mandrake Linux Security Advisory : XFree86 (MDKSA-2003:118)

A vulnerability was discovered in the XDM display manager that ships with XFree86. XDM does not check for successful completion of the pamsetcred call and in the case of error conditions in the installed PAM modules, XDM may grant local root access to any user with valid login credentials. It has...

Mandrake Linux Security Advisory : kdebase (MDKSA-2003:091)

A vulnerability was discovered in all versions of KDE 2.2.0 up to and including 3.1.3. KDM does not check for successful completion of the pamsetcred call and in the case of error conditions in the installed PAM modules, KDM may grant local root access to any user with valid login credentials. It...

SuSE-SA:2004:005: Linux Kernel

The remote host is missing the patch for the advisory SuSE-SA:2004:005 Linux Kernel. Another bug in the Kernel's domremap function, which is unrelated to the bug fixed in SuSE-SA:2004:001, was found by Paul Starzetz. The domremap function of the Linux Kernel is used to manage Virtual Memory Areas...

SuSE-SA:2004:006: xf86/XFree86

The remote host is missing the patch for the advisory SuSE-SA:2004:006 xf86/XFree86. XFree86 is an open source X Window System implementation that acts as a client-server-based API between different hardware components like display, mouse, keyboard and so on. Several buffer overflows were found i...

[Full-Disclosure] Advisory 04/2004: Net&#40;Free&#41;BSD Systrace local root vulnerabilitiy

e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: NetFreeBSD Systrace local root vulnerability Release Date: 2004/05/11 Last Modified: 2004/05/11 Author: Stefan Esser [email protected] Application: NetBSD with systrace support before 2004/04/09 FreeBSD with unofficial port by...

SquirrelMail < 1.4.3 Multiple Vulnerabilities

The remote host is running SquirrelMail, a web-based mail server. There are several flaws in all versions less than 1.4.3 and development versions 1.5.0 and 1.5.1 that allow for local root access and remote cross-site scripting XSS attacks. Nessus has determined the vulnerability exists on the...

SquirrelMail chpasswd buffer overflow

Exploit for linux platform in category local exploits ===================================== SquirrelMail chpasswd buffer overflow ===================================== / 0x3142-sq-chpasswd.c Squirremail chpasswd buffer overflow. Tested on SuSE 9. The bug was found by Matias Neiff Coded by x314 c...

Slackware 8.1 kernel security update

New kernels are available for Slackware 8.1 containing a backported fix from a bounds-checking problem in the kernel's mremap call which could be used by a local attacker to gain root privileges. This fix was previously issued for Slackware 9.0, 9.1, and -current SSA:2004-006-01. Sites running...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages are now available that fix a security vulnerability allowing local users to gain root privileges. The Linux kernel handles the basic functions of the operating system. A flaw in bounds checking in the dobrk function in the Linux kernel versions 2.4.22 and previous can allo...

TerminatorX <= 3.81 stack overflow local root exploit

Exploit for linux platform in category local exploits ===================================================== TerminatorX -b -s -r : no bruteforcing, try to execute shellcode with as return address -b: enables bruteforcing -s: bruteforces by using return address from to 0x00000000 Example:...

MacOS X privilege escalation

There are conditions it's possible to obtains local root access having access to USB keyboard during boot process...