221 matches found
RedHat Linux 5.0/5.1/5.2,Slackware Linux <= 3.5 klogd Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/398/info It is possible to cause a denial of service remote and local through generating old, obscure kernel messages not terminated with \n in klogd. The problem exists because of a buffer overflow in the klogd handling ...
LBL traceroute 1.4 a5 Heap Corruption Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/1739/info Traceroute is a well-known network diagnostic tool used for analyzing the path on a network between two hosts. On unix systems, traceroute is typically installed setuid root because of its use of raw sockets...
Centrify Deployment Manager v2.1.0.283 local root
Centrify Deployment Manager v2.1.0.283 local root 12/7/2012 Taking a little longer look at the software, I managed to win a race condition and get root with files in /tmp. Here is my analysis: root@h0g:/tmp ls -l /etc/shadow -r-------- 1 root shadow 1010 Dec 7 21:42 /etc/shadow root@h0g:/tmp...
Mandrake Linux Security Advisory : lpr (MDKSA-2000:054)
There is a format string bug in lpr with its calls to the syslog facility. There are no known exploits at ths time, but it may be possible for a user to gain local root access. This new lpr fixes this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
Calibre E-Book Reader - Race Condition Privilege Escalation
!/bin/sh .70-Calibrer Assault Mount by Dan Rosenberg @djrbliss and zx2c4 Yesterday we learned how Calibre's ability to mount anything anywhere resulted in a local root. Today's exploit shows a race condition to subvert recent changes preventing symlinks and checking path prefixes. - djrbliss &...
FreeBSD Run-Time Link-Editor Local r00t Zeroday
Exploit for unknown platform in category local exploits =============================================== FreeBSD Run-Time Link-Editor Local r00t Zeroday =============================================== Title: FreeBSD Run-Time Link-Editor Local r00t Zeroday CVE-ID: OSVDB-ID: Author: Kingcope...
Re: [Full-disclosure] FreeBSD <= 6.1 kqueue() NULL pointer dereference
Przemyslaw Frasunek pisze: FreeBSD = 6.1 suffers from classical check/use race condition on SMP There is yet another kqueue related vulnerability. It affects 6.x, up to 6.4-STABLE. FreeBSD security team was notified on 29th Aug, but there is no response until now, so I won't publish any details...
Mandrake Security Advisory MDVSA-2009:171 (pulseaudio)
The remote host is missing an update to pulseaudio announced via advisory MDVSA-2009:171. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
Mandrake Security Advisory MDVSA-2009:171 (pulseaudio)
The remote host is missing an update to pulseaudio announced via advisory MDVSA-2009:171. OpenVAS Vulnerability Test $Id: mdksa2009171.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:171 pulseaudio Authors: Thomas Reinke Copyright: Copyright c 2009...
Mandrake Security Advisory MDVSA-2009:152 (pulseaudio)
The remote host is missing an update to pulseaudio announced via advisory MDVSA-2009:152. OpenVAS Vulnerability Test $Id: mdksa2009152.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:152 pulseaudio Authors: Thomas Reinke Copyright: Copyright c 2009...
Unixware utilities buffer overflow
No description provided by source. / 04/2008: public release I have'nt seen any advisory on this; possibly still not fixed. SCO UnixWare Reliant HA Local Root Exploit By qaaz / include stdio.h include stdlib.h include string.h include unistd.h include errno.h include fcntl.h define TGT1...
elf-infection.txt
gcc infR3.s -o infR3 strip infR3 find a writable binary example: ls ./infR3 /bin/ls when root calls the writable ls, chmod will be setuided Coded by [email protected] == [email protected] .text .global main infeccion de start para conseguir local root use at your own risk Coded by...
Qpopper <= 4.0.8 (poppassd) Local Root Exploit (linux)
No description provided by source. !/bin/sh tested and working /str0ke Linux Qpopper poppassd latest version local r00t exploit by kcope August 2005 Confidential - Keep Private! POPPASSDPATH=/usr/local/bin/poppassd echo "" echo "Linux Qpopper poppassd latest version local r00t exploit by kcope"...
Qpopper <= 4.0.8 (poppassd) Local Root Exploit (freebsd)
Exploit for bsd platform in category local exploits ======================================================== Qpopper program.c include include include void init if !geteuid remove"/etc/libmap.conf"; execl"/bin/sh","sh","-c","/bin/cp /bin/sh /tmp/xxxx ; /bin/chmod +xs /tmp/xxxx",NULL; EOF gcc -o...
AIX 5.2 paginit Local Root Exploit
Exploit for aix platform in category local exploits ================================== AIX 5.2 paginit Local Root Exploit ================================== / IBM AIX paginit root exploit I just wanted to play with PowerPC Tested on 5.2 intropy intropy caughq.org / include include include include...
Fortinet Fortigate firewall backdoor account
maintainer/pbcpbnserial number account has local root access to device...
Linux Mandrake <= 10.2 cdrdao Local Root Exploit (unfixed)
Exploit for linux platform in category local exploits ========================================================== Linux Mandrake ld.so.c uidt getuid return 0; EOF echo "+ done." echo "preparing shell program ..." cat sh.c include int mainint argc,char argv setreuid0,0; setgid0; unlink"/tmp/ld.so";...
Linux Kernel 2.4.x / 2.6.x uselib() Local Privilege Escalation Exploit
Exploit for linux platform in category local exploits ====================================================================== Linux Kernel 2.4.x / 2.6.x uselib Local Privilege Escalation Exploit ====================================================================== / pwned.c - linux 2.4 and 2.6...
SUSE-SA:2005:003: kernel
The remote host is missing the patch for the advisory SUSE-SA:2005:003 kernel. Several exploitable security problems were identified and fixed in the Linux kernel, the core of every SUSE Linux product. - Due to missing locking in the sysuselib system call a local attacker can gain root access. Th...
atari800 Local Root Exploit
Exploit for linux platform in category local exploits =========================== atari800 Local Root Exploit =========================== / Exploit for atari800 by pi3 pi3ki31ny email protected:$ ./p ...::: -= exploit for Atari800 by pi3 pi3ki31ny =- :::... Ussage: + ./p options -? -v choose a bu...