[SECURITY] [DSA 252-1] New slocate packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 252-1 [email protected] http://www.debian.org/security/ Martin Schulze February 21st, 2003 http://www.debian.org/security/faq -...

Cpanel 5 and below remote command execution and local root vulnerabilities

Products: Cpanel 5 and below http://www.cpanel.net Date: 19th February 2003 Author: pokleyzz pokleyzzatscan-associates.net Contributors: sk skatscan-associates.net shaharil shaharilatscan-associates.net Special thanks: Skywizard skywizardatmybsd.org.my Description =========== Cpanel is web hostin...

Local root vuln in SuSE 8.0 plptools package

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Vulnerability Advisory Distribution: SuSE 8.0 possibly other versions, eg. 7.x/8.1 Package name: plptools-0.6mjg-161.i386.rpm Impact: Local root Advisory ID: CLIVITT-2003-2 Author: Carl Livitt carl at learningshophull.co.uk Date: January 29th...

iDEFENSE Security Advisory 01.21.03: Buffer Overflows in Mandrake Linux printer-drivers Package

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 01.21.03: Buffer Overflows in Mandrake Linux printer-drivers Package http://www.idefense.com/advisory/01.21.03.txt January 21, 2003 I. BACKGROUND MandrakeSoft Inc.'s Mandrake Linux includes the printer-drivers package in mos...

CVE-2002-1367

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need...

HP-UX 11 - Software Distributor Lang Environment Variable Local Buffer Overrun

HP-UX 11 - Software Distributor Lang Environment Variable Local Buffer Overrun // source: https://www.securityfocus.com/bid/8986/info HP has reported that some Software Distributor SD utilities are prone to a locally exploitable buffer-overrun vulnerability. Affected utilities include swinstall1M...

HP-UX 11.0/11.11 swxxx Local Root Shell Exploit

Exploit for hp-ux platform in category local exploits =============================================== HP-UX 11.0/11.11 swxxx Local Root Shell Exploit =============================================== / Program : xhpux11isw.c Use : HP-UX 11.11/11.0 exploit swxxx to get local root shell. Complie : cc...

HP-UX 11.011.11 - swxxx Privilege Escalation

HP-UX 11.011.11 - swxxx Privilege Escalation / Program : xhpux11isw.c Use : HP-UX 11.11/11.0 exploit swxxx to get local root shell. Complie : cc xhpux11isw.c -o xsw;./xsw not use gcc for some system Usage : ./xsw off Tested : HP-UX B11.11 & HP-UX B11.0 Author : watercloud @ xfocus.org Date :...

HP-UX 11.0/11.11 - 'swxxx' Privilege Escalation

/ Program : xhpux11isw.c Use : HP-UX 11.11/11.0 exploit swxxx to get local root shell. Complie : cc xhpux11isw.c -o xsw;./xsw not use gcc for some system Usage : ./xsw off Tested : HP-UX B11.11 & HP-UX B11.0 Author : watercloud @ xfocus.org Date : 2002-12-11 Note : Use as your own risk !! / inclu...

SAP database local root via symlink

This local attack upon SAP is based on sapdb-server-linux-32bit-i386-73029.tgz it is currently unknown if this affects other SAP flavors. elguapo@rh8 pgm$ pwd /usr/sapdb/depend/pgm elguapo@rh8 pgm$ ls -al lserver -rwsrwxr-x 1 root sapdb 15673 Oct 22 10:42 lserver Using ltrace we can see an attemp...

grpck-expl.pl

Hi packetstorm dudez! --- start here --- !/usr/bin/perl www.uhagr.org - [email protected] This is only a Proof of concept. /usr/sbin/grpck is not suid root by default. castle: /usr/sbin/grpck perl -e 'print "X"x2900' Segmentation fault castle: my $usage = Example: ./grpck-expl.pl 1 TARGETS: 1...

[SECURITY] [DSA 189-1] New luxman packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 189-1 [email protected] http://www.debian.org/security/ Martin Schulze November 6th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 189-1] New luxman packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 189-1 [email protected] http://www.debian.org/security/ Martin Schulze November 6th, 2002 http://www.debian.org/security/faq -...

DSA-189 luxman - local root exploit

Bulletin has no description...

NetBSD Security Advisory 2002-019: Buffer overrun in talkd

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2002-019 ================================= Topic: Buffer overrun in talkd Version: NetBSD-current: source prior to September 20, 2002 NetBSD 1.6: affected NetBSD-1.5.3: affected NetBSD-1.5.2: affected NetBSD-1.5.1: affected NetBSD-1.5:...

Sun Solaris asppls(1M) vulnerable to arbitrary file overwriting via symlink redirection of temporary file

Overview Sun Solaris asppls1M creates temporary files insecurely, leading to possible local root compromise. Description Sun Microsystems describes the function of asppls1M as follows:aspppd is the link manager for the asynchronous data link protocol specified in RFC1331, The Point-to-Point...

Interbase 56 - GDS_Lock_MGR UMask File Permission Changing

Interbase 56 - GDSLockMGR UMask File Permission Changing // source: https://www.securityfocus.com/bid/5805/info Interbase is a SQL database distributed and maintained by Borland. It is available for Unix and Linux operating systems. The gdslockmgr program within Interbase is typically installed...

Interbase 5/6 - GDS_Lock_MGR UMask File Permission Changing

// source: https://www.securityfocus.com/bid/5805/info Interbase is a SQL database distributed and maintained by Borland. It is available for Unix and Linux operating systems. The gdslockmgr program within Interbase is typically installed setuid. This program does not properly handle user-supplie...

iDEFENSE Security Advisory 09.16.2002: FreeBSD Ports libkvm Security Vulnerabilities

iDEFENSE Security Advisory 09.16.2002 FreeBSD Ports libkvm Security Vulnerabilities DESCRIPTION The FreeBSD ports asmon, ascpu, bubblemon, wmmon, and wmnet2 can be locally manipulated to take advantage of open file descriptors /dev/mem and /dev/kmem to gain root privileges on a target host. These...

Cisco VPN 5000 Client - Buffer Overrun (2)

Cisco VPN 5000 Client - Buffer Overrun 2 // source: https://www.securityfocus.com/bid/5734/info Buffer overrun vulnerabilities have been reported in the Cisco VPN 5000 UNIX clients available for Linux and Solaris systems. The condition affects the binaries 'closetunnel' and 'opentunnel', both...