[Full-disclosure] MDKSA-2005:239 - Updated printer-filters-utils packages fix local vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2005:239 http://www.mandriva.com/security/ Package : printer-filters-utils Date : December 30, 2005 Affected: 10.1, 10.2, 2006.0, Corporate 2.1, Corporate 3.0 Problem Description: "newbug" discovered a local root...

IBM AIX 5.3 - 'GetShell' / 'GetCommand' File Enumeration

source: https://www.securityfocus.com/bid/16102/info IBM AIX is prone to a local vulnerability in getShell and getCommand. This issue may let local attackers enumerate the existence of files on the computer that they wouldn't ordinarily be able to see. -bash-3.00$./getCommand.new...

IBM AIX 5.3 - GetShell GetCommand File Enumeration

IBM AIX 5.3 - GetShell GetCommand File Enumeration source: https://www.securityfocus.com/bid/16102/info IBM AIX is prone to a local vulnerability in getShell and getCommand. This issue may let local attackers enumerate the existence of files on the computer that they wouldn't ordinarily be able t...

[SECURITY] [DSA 900-3] New fetchmail-ssl packages fix potential information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 900-3 [email protected] http://www.debian.org/security/ Martin Schulze November 22nd, 2005 http://www.debian.org/security/faq -...

4D WebStar Symbolic Link Vulnerability

4D WebStar is reportedly vulnerable to a local symbolic link vulnerability. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 815-1] New kdebase packages fix local root vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 815-1 [email protected] http://www.debian.org/security/ Martin Schulze September 16th, 2005 http://www.debian.org/security/faq -...

[Full-disclosure] MDKSA-2005:160 - Updated kdebase packages fix potential local root vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Update Advisory Package name: kdebase Advisory ID: MDKSA-2005:160 Date: September 6th, 2005 Affected versions: 10.1, 10.2, Corporate 3.0 Problem Description: Ilja van Sprundel from suresec.org notified the KDE security team abo...

CVE-2004-2477

DiamondCS Process Guard Free 2.000 allows local users to disable the process guard protection system by overwriting the current Service Descriptor Table SDT in \device\physicalmemory with the original SDT found in ntoskrnl.exe...

[SECURITY] [DSA 761-2] New heartbeat packages fix insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 761-2 [email protected] http://www.debian.org/security/ Martin Schulze August 15th, 2005 http://www.debian.org/security/faq -...

FreeBSD : sudo -- local race condition vulnerability (3bf157fa-e1c6-11d9-b875-0001020eed82)

Todd C. Miller reports : A race condition in Sudo's command pathname handling prior to Sudo version 1.6.8p9 that could allow a user with Sudo privileges to run arbitrary commands. Exploitation of the bug requires that the user be allowed to run one or more commands via Sudo and be able to create...

CVE-2004-2148

Technical details (affected product/component, vulnerability type, impact, exploit vectors) are not provided in the supplied documents. Monitor for updates from NVD/CVE records and related advisories.

CVE-2004-2148

Unknown local vulnerability in the "change user" feature of Slava Astashonok Fprobe 1.0.5 and earlier has unknown impact and attack vectors...

[SECURITY] [DSA 728-2] New qpopper packages fix arbitrary file overwriting

-------------------------------------------------------------------------- Debian Security Advisory DSA 728-2 [email protected] http://www.debian.org/security/ Martin Schulze May 26th, 2005 http://www.debian.org/security/faq -...

Affix Bluetooth Protocol Stack 3.1/3.2 - Signed Buffer Index (1)

// source: https://www.securityfocus.com/bid/13347/info A local signed buffer index vulnerability affects Affix Bluetooth Protocol Stack. This issue is due to a failure of the affected utility to properly handle user-supplied buffer size parameters. This issue may be leveraged by a local attacker...

FTP Now 2.6.14 - Local Password Disclosure

FTP Now 2.6.14 - Local Password Disclosure / FTP Now v2.6.14 Local Password Disclosure Exploit by Kozan Application: FTP Now v2.6.14 and prior versions Vendor:www.network-client.com Vulnerable Description: FTP Now v2.6.14 discloses passwords to local users. Discovered & Coded by: Kozan Credits to...

Microsoft Windows XP - Local Denial of Service

Microsoft Windows XP - Local Denial of Service source: https://www.securityfocus.com/bid/12870/info It is reported that Microsoft Windows XP Service Pack 1 is prone to a local denial of service vulnerability. The issue is reported to manifest when a raw IP over IP socket is created and data is...

iSnooker 1.6.8 - Local Password Disclosure

iSnooker 1.6.8 - Local Password Disclosure / iSnooker include include HKEY hKey; define BUFSIZE 100 char prgfilesBUFSIZE; DWORD dwBufLen=BUFSIZE; LONG lRet; int main ifRegOpenKeyExHKEYLOCALMACHINE, "SOFTWARE\Microsoft\Windows\CurrentVersion", 0, KEYQUERYVALUE, &hKey == ERRORSUCCESS lRet =...

CVE-2005-0719

Unknown vulnerability in the systems message queue in HP Tru64 Unix 4.0F PK8 through 5.1B-2/PK4 allows local users to cause a denial of service process crash for processes such as nfsstat, pfstat, arp, ogated, rarpd, route, sendmail, srconfig, strsetup, trpt, netstat, and xntpd...

[SECURITY] [DSA 692-1] New kppp packages fix privileged file descriptor leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 692-1 [email protected] http://www.debian.org/security/ Martin Schulze March 8th, 2005 http://www.debian.org/security/faq -...

CVE-2005-0099

The CVE relates to the SDL port of abuse (abuse-SDL) prior to version 2.00, where privileges were not dropped before creating certain files. This allows local users to create or overwrite arbitrary files. Debian and SUSE advisories confirm the issue as CAN-2005-0099 with a local-priority impact; ...