SAP database local root vulnerability during installation. (fwd)

This is an older moot vulnerability that I discovered which was never released, the vendor has fixed it. It is similar to what KF at snosoft discovered recently in the current version of SAPDB. Vapid Labs SAP database local root vulnerability during installation. December 10, 2002 I. BACKGROUND S...

Qpopper 4.0.x poppassd Local Root Exploit

Exploit for linux platform in category local exploits ========================================= Qpopper 4.0.x poppassd Local Root Exploit ========================================= / Title: Qpopper v4.0.x poppassd local root exploit. Exploit code: 0x82-Local.Qp0ppa55d.c -- ./0x82-Local.Qp0ppa55d -...

Qpopper v4.0.x poppassd local root exploit

======================================== INetCop Security Advisory 2003-0x82-016 ======================================== Title: Qpopper v4.0.x poppassd local root exploit 0x01. Description Qpopper poppassd is a program that changes system passwords thus allowing users to change their mail...

Qpopper 4.0.x - poppassd Privilege Escalation

Qpopper 4.0.x - poppassd Privilege Escalation / Title: Qpopper v4.0.x poppassd local root exploit. Exploit code: 0x82-Local.Qp0ppa55d.c -- ./0x82-Local.Qp0ppa55d -u x82 -p mypasswd Qpopper v4.0.x poppassd local root exploit. by Xpl017Elz / include include include include define BUFSZ 0x82 define...

Qpopper 4.0.x - 'poppassd' Privilege Escalation

/ Title: Qpopper v4.0.x poppassd local root exploit. Exploit code: 0x82-Local.Qp0ppa55d.c -- ./0x82-Local.Qp0ppa55d -u x82 -p mypasswd Qpopper v4.0.x poppassd local root exploit. by Xpl017Elz / include include include include define BUFSZ 0x82 define DPOPPASS "/usr/local/bin/poppassd" define DNAM...

ChiTeX/ChiLaTeX unsafe set-user-id root

Niels Heinen reports that ChiTeX installs set-user-id root executables that invoked system3 without setting up the environment, trivially allowing local root compromise...

VapidSAP.txt

Vapid Labs SAP database local root vulnerability during installation. December 10, 2002 I. BACKGROUND SAP DB is a Free Enterprise database http://www.sapdb.org. An exploitable race condition exists during installation that can be won to yield root to a local malicous user. An executable is world...

Mac OS X <= 10.2.4 DirectoryService (PATH) Local Root Exploit

Exploit for macOS platform in category local exploits ============================================================= Mac OS X include include include int mainint argc, char argv char ORIGPATH; int temp; if argc 2 if geteuid == 0 printf"euid is root.\n"; setuid0; execl"/bin/bash", "bash", NULL;...

[SECURITY] [DSA 267-2] New lpr packages fix local root exploit (potato)

-------------------------------------------------------------------------- Debian Security Advisory DSA 267-2 [email protected] http://www.debian.org/security/ Martin Schulze April 15th, 2003 http://www.debian.org/security/faq -...

Linux Kernel < 2.4.20 Module Loader Local Root Exploit

Exploit for linux platform in category local exploits ====================================================== Linux Kernel include include include include include include include include include include include include define TMPSIZE 4096 define FMAX 768 define UIDNUM 6 define MMSIZE 40961 define...

SRT2003-04-01-1231 - Progress DLC overflows

Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...

Apple Mac OSX 10.x - DirectoryService Denial of Service

Apple Mac OSX 10.x - DirectoryService Denial of Service // source: https://www.securityfocus.com/bid/7323/info MacOSX DirectoryService has been reported prone to a denial of service vulnerability. It has been reported that a remote attacker may trigger an exception in DirectoryService by repeated...

DEBIAN-CVE-2003-0144

Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as 1 request ID or 2 user name...

Linux Kernel 2.2.x - 2.4.x ptrace/kmod Local Root Exploit

Exploit for linux platform in category local exploits ========================================================= Linux Kernel 2.2.x - 2.4.x ptrace/kmod Local Root Exploit ========================================================= / Linux kernel ptrace/kmod local root exploit This code exploits a ra...

[SECURITY] [DSA 270-1] New Linux kernel packages (mips + mipsel) fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 270-1 [email protected] http://www.debian.org/security/ Martin Schulze March 27sh, 2003 http://www.debian.org/security/faq -...

linux kmod/ptrace bug - details

Hello There are many discussions on slashdot for example on the recent linux ptrace & kmod bug. I'll try to clarify what is this all about. It's a local root vulnerability. It's exploitable only if: 1. the kernel is built with modules and kernel module loader enabled and 2...

xscreensaver exploit for Redhat 7.3

I think you don't need other comments: / Tested on rh 7.3 using XFree86 xscreensaver vulnerability AUTHORS: Angelo Rosiello Guilecool & deka REQUIRES: X must be run! EFFECTS: local root exploit! deka is leet brother, thank you : MAIL: [email protected] / include stdio.h include string.h include...

XFree86 4.2 - XLOCALEDIR Local Buffer Overflow (2)

XFree86 4.2 - XLOCALEDIR Local Buffer Overflow 2 // source: https://www.securityfocus.com/bid/7002/info Several XFree86 utilities may be prone to a buffer overflow condition. The vulnerability exists due to insufficient boundary checks performed by these utilities when referencing the XLOCALEDIR...

XFree86 4.2 - &#039;XLOCALEDIR&#039; Local Buffer Overflow (3)

// source: https://www.securityfocus.com/bid/7002/info Several XFree86 utilities may be prone to a buffer overflow condition. The vulnerability exists due to insufficient boundary checks performed by these utilities when referencing the XLOCALEDIR environment variable. A local attacker can exploi...

Mandrake 9.0 local root exploit

------------------------------------------------------------------------------------------------------------------ Priv8 Security - www.priv8security.com priv8mdk90.tar.gz - Mandrake 9.0 local root exploit Based on Idefense adv. http://www.idefense.com/advisory/01.21.03.txt Greets to : coideloko,...